2

I'm trying to set up a personal accountant with access to some of my financial accounts. I would like to use LastPass sharing to give them access to the accounts without giving them access to a password that could be used by third parties. However, according to what appears to be a LP staff comment, the recipient of the shared password could just inspect the element in his browser and discover the original password. Can this possibly be the way it actually works??? If so, what's the point?

https://blog.lastpass.com/2016/01/tips-for-securely-sharing-passwords.html/

  • 1
    just try it yourself, share a password to another browser, let lastpass put in the password -> right click and inspect element and change the <input type="password" ...... > to <input type="text" .......>. inb4 of course you'll see the password – architekt Jan 10 at 8:12
1

You can't. End of discussion.

For them to log in, they have to know the password. If this is not acceptable to you, you will have to work out a solution with your provider where two separate accounts can get access to the same data. In my country, this is a rather common feature for banks.

Note that sharing your password will probably be in breach of any contract you have with the banks, which may severely limit their liability.

  • The last paragraph is strongly geographically influenced - in parts of the EU, that's no longer allowed as part of banking terms and conditions, where the sharing is with a regulated provider (which you'd hope an accountant was) - see fca.org.uk/consumers/… for the details on the rules in the UK, for one. – Matthew Jan 9 at 11:55
  • @Matthew "Your banking terms and conditions should not prevent you from sharing your credentials with regulated AIS or PIS providers" - this does probably not include sharing passwords with friends or relatives... – vidarlo Jan 9 at 11:57
  • @vidario Yeah, I specifically included the bit about "regulated provider" since the original question was about an accountant. Doesn't apply to family! – Matthew Jan 9 at 11:59

protected by Community Jan 10 at 11:05

Thank you for your interest in this question. Because it has attracted low-quality or spam answers that had to be removed, posting an answer now requires 10 reputation on this site (the association bonus does not count).

Would you like to answer one of these unanswered questions instead?

Not the answer you're looking for? Browse other questions tagged or ask your own question.