LastPass
by LastPass (GoTo)
FedRAMP Status
Not FedRAMP Authorized
Impact Level
N/A
Category
Identity & Access Management
Overview
LastPass is a widely used password manager that has suffered multiple significant data breaches. It is not FedRAMP authorized despite marketing language suggesting government trust. Defense contractors should not store credentials for CUI systems in LastPass.
CUI Risk Assessment
Not FedRAMP authorized despite marketing claims. Has suffered multiple data breaches. Cannot be used for credential management in CUI environments.
NIST 800-171 Violations
Using LastPass for CUI without FedRAMP authorization may violate these NIST 800-171 controls:
FedRAMP Compliant Alternatives
Frequently Asked Questions
Is LastPass FedRAMP authorized?
No. Despite marketing that uses terms like "trusted," LastPass does not hold FedRAMP authorization. Its multiple data breaches further undermine its suitability for defense environments.
Run a Full Tech Stack Audit
Check all your enterprise tools at once with our free CUI Compliance Auditor.
Launch CUI Auditor