Security News > 2021 > February > 1Password has none, KeyPass has none... So why are there seven embedded trackers in the LastPass Android app?

1Password has none, KeyPass has none... So why are there seven embedded trackers in the LastPass Android app?
2021-02-25 18:39

A security researcher has recommended against using the LastPass password manager Android app after noting seven embedded trackers.

German infosec bod Mike Kuketz spotted LastPass's trackers in analysis produced by Exodus, which describes itself as "a non-profit organization led by hacktivists [whose] purpose is to help people get a better understanding of the Android applications tracking issues."

The Exodus report on LastPass shows seven trackers in the Android app, including four from Google for the purpose of analytics and crash reporting, as well as others from AppsFlyer, MixPanel, and Segment.

The discussion about trackers in LastPass comes at a bad time.

"A LastPass spokesperson told us:"No sensitive personally identifiable user data or vault activity could be passed through these trackers.

These trackers collect limited aggregated statistical data about how you use LastPass which is used to help us improve and optimize the product.


News URL

https://go.theregister.com/feed/www.theregister.com/2021/02/25/7_trackers_in_lastpass_android/

Related vendor

VENDOR LAST 12M #/PRODUCTS LOW MEDIUM HIGH CRITICAL TOTAL VULNS
Android 4 0 17 2 0 19
1Password 7 1 8 0 1 10