LastPass adds SaaS monitoring, mobile

LastPass has announced a series of product enhancements and security milestones. According to the company, the updates, which include new SaaS monitoring tools and a mobile credential scanner, are designed to help businesses manage access and identity in a landscape where AI-driven attacks are increasing.

These innovations were detailed in a company announcement. The release follows findings from IBM's 2026 Cost of a Data Breach Report, which states the average breach cost has reached a record $4.99 million. That report also found AI-driven attacks increased by 56%, adding an average of $1 million to breach costs.

Karim Toubba, CEO of LastPass, linked the updates to the evolving threat environment. "As threat actors continue to automate and accelerate their attack tactics, strong identity, credential, and access management have become foundational security requirements," Toubba said.

Unified security posture management

LastPass has introduced enhancements to its SaaS Monitoring and SaaS Protect features within the Business Max offering. The goal is to provide greater visibility and control over complex software-as-a-service environments.

A key addition is Always-on SaaS Monitoring, branded as Persistent Monitoring. This feature maintains a continuous connection through the LastPass browser extension, ensuring monitoring remains active even when users are signed out of the password manager.

The company has also expanded SaaS Protect controls. Administrators can now create more granular usage rules for specific users or groups, allowing for security policies tailored to an organization's unique needs.

LastPass states these tools help accelerate adoption, reduce manual work, improve security coverage, and strengthen policy enforcement. All enhancements, including Persistent Monitoring across all browser extensions, were fully released as of July.

Mobile Smart Scanner launch

A new Mobile Smart Scanner is now available across all LastPass product offerings. The feature allows users to scan passwords from physical sources using the LastPass mobile app.

Users can scan printed lists, screenshots, and handwritten notes. The scanner turns these into editable, autofill-ready credentials stored directly in the encrypted vault. LastPass says this reduces manual data entry, saves time, minimizes errors, and keeps credentials secure instead of on vulnerable physical notes.

Security and user experience updates

LastPass reported completing independent SOC 2 and ISO 27001/27701 audits for the second consecutive year with zero findings. The company says this reinforces its commitment to security and provides customer assurance that its controls meet globally recognized standards.

In a significant change for consumer accounts, LastPass has begun a phased rollout to automatically enroll all users in its Dark Web Monitoring (DWM) service. This transitions DWM from an opt-in to a proactive protection model, ensuring more customers benefit from credential exposure monitoring without additional setup.

The DWM service consistently checks user information against databases of compromised credentials and issues immediate alerts if data is found on dark web sites. It also notifies users of potential threats like weak passwords.

For administrators, LastPass has officially completed the transition from a Legacy Admin Console to a single Unified Admin Console. The consolidation aims to create a more consistent and streamlined experience for managing users, security controls, and access policies across business offerings.

Additionally, a new company-wide sign-up link allows Teams, Business, and Business Max customers to onboard their entire organization through a single shareable link. LastPass states this reduces administrative effort and accelerates deployment.

Finally, LastPass introduced a redesigned Community platform with an intuitive interface and AI-powered search. The enhanced community is part of a broader self-service strategy to help users discover information and resolve questions faster.