LastPass Cloud support

LastPass is a password manager tool that allows users to store, secure, and autofill their passwords. LastPass users get a password vault, which is the encrypted part of the LastPass password manager where a user’s passwords, secure notes, and sensitive information are safely stored.

LastPass can be added as an extension to a variety of web browsers, including Chrome, Firefox, Safari, Opera, and Microsoft Edge. It is also available as an app for Windows, macOS, Linux, iOS, and Android.

Not surprisingly, many users have found a way to leverage this tool for criminal activity. As stated on Forbes,  a person suspected of dealing drugs via the dark Web and Reddit was arrested and had LastPass on their phone. Unfortunately, the police couldn’t get access to the account or login credentials, and LastPass itself could only provide the police with IP addresses used by the suspect.

With Oxygen Forensic® Detective v.15.3, investigators can gain access to the LastPass Password Manager cloud, where passwords, notes, documents, credit cards, and other data are stored.

Extracting LastPass Data with Oxygen Forensic® Detective

To start data extraction from the cloud, first locate Oxygen Forensic® Cloud Extractor on the Oxygen Forensic® Detective home screen and launch it.

Fill in information about the extraction and proceed to the choice of cloud services to extract data from. Alternatively, you can import a credentials package or open Oxygen Forensic® Cloud Extractor from the “Accounts and Passwords” section of an extraction of interest in Oxygen Forensic® Detective.

Screenshot of data extraction from the cloud services options in Oxygen Forensic® Cloud Extractor

If LastPass credentials were not imported automatically, they will have to be filled in manually. To do this, select LastPass from the list of available cloud services, click on it, enter the requested credentials in the opened window, and wait until they are validated.

You can also authorize via token and use proxy at the authorization. The data extracted from the LastPass cloud could be opened and analyzed in Oxygen Forensic® Detective.

Screenshot of Cloud Extractor pop-up screen asking for LastPass authentication parameters


Get more from Oxygen Forensic® Detective

At Oxygen Forensics our software is updated multiple times every year. We offer training courses and webinars that can help you learn the ins and outs of Oxygen Forensic® Detective and stay up to date on new features and tools needed for your investigation. Returning customer? Sign up for our newsletter to stay in the loop.

Don’t have Oxygen Forensic® Detective and want to try it out? Request a free-trial.