

The flaws were discovered by Google Project Zero researcher Tavis Ormandy, and responsibly disclosed to LastPass.īut while the company has pushed out what seems to be a slapdash and incomplete fix in the latest version of the Chrome extension (4.1.42, dated March 14, 2017), a fixed version of the Firefox plug-in has still not been released, as the company is waiting for Mozilla to greenlight it. You will still have complete access to your account at any time, from any browser or device you choose to use.LastPass Chrome and Firefox extensions contain flaws that could allow malicious websites to steal victims’ passwords or execute commands on their computer. You can still use those features in other browsers.Īs a reminder, whether you update to the beta now or wait for general release, the transition will have no impact on your LastPass account, or any of the information you’ve stored in your vault. Our current binary installer cannot talk to the beta WebExtension yet, so features requiring the binary component (like handling attachments) are currently disabled.If upgrading from version 4.1.54 (check the LastPass Icon > More options > About LastPass), updating to the beta will reset your local preferences to the default settings and you’ll need to reconfigure them.Later, when we release the final version, you will be transitioned to the release channel, so you’re not stuck on the beta channel. For our intrepid early adopters, we’re happy to announce that a beta version of the LastPass WebExtension is now available for testing! In your Firefox browser, click here if you want to give it a try – it will automatically update your current LastPass extension in Firefox. Having said that, many of you like trying out the newest software, and are already using the Firefox 57 public beta. We are actively working on making our extension compatible with the new format, to be made generally available on when Firefox 57 is released next month. LastPass is fully committed to supporting Firefox and WebExtensions. Firefox 57 completes the switch to this new technology, and add-ons – like the current LastPass add-on available on – must be updated to be compatible with the new API.

As we mentioned several months ago, the change that most impacts LastPass and our users is Firefox’s switch to a common API called WebExtension, providing a cross-browser system for developing extensions.

With Mozilla’s planned release of Firefox 57 on 14th November 2017, we wanted to update you on the status of LastPass support for the next generation of this popular browser.įirefox 57 brings some exciting new features (like Firefox Quantum) and other improvements to performance, design, and security. Earlier this year, we announced that we would be transitioning our Firefox addon to support Mozilla’s upcoming changes.
