Open
Cached
·
just now
16
Headers
HTTP Security Headers
Status
Strict-Transport-Security
Excellent
max-age=86400000; includeSubDomains; preload
Content-Security-Policy
Basic
default-src; style-src; font-src; +8 more
default-src 'nonce-811a218ef3f459154f90ec7eb2d08f29' 'self' 'report-sample'; style-src 'self' 'unsafe-inline' https://content.product.lastpass.com https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' https://identity-resources.cloud.lastpass.com https://lastpass.com https://content.product.lastpass.com https://*.googleapis.com https://maps.gstatic.com https://*.ggpht.com data: ; frame-src 'self' https://identity.lastpass.com https://auth.lastpass.com https://lastpass.com https://content.product.lastpass.com; connect-src 'self' https://lastpass.com https://*.lastpass.com https://lastpass.eu https://api.segment.io https://app.launchdarkly.com https://events.launchdarkly.com https://clientstream.launchdarkly.com https://data.product.lastpass.com https://content.product.lastpass.com https://maps.googleapis.com https://login.microsoftonline.com https://login.microsoftonline.us https://graph.microsoft.com https://graph.microsoft.us; script-src 'nonce-811a218ef3f459154f90ec7eb2d08f29' 'self' 'sha256-H3SVZBYrbqBt3ncrT/nNmOb6nwCjC12cPQzh5jnW4Y0=' https://maps.googleapis.com 'unsafe-eval' https://content.product.lastpass.com; frame-ancestors 'self'; block-all-mixed-content; upgrade-insecure-requests; report-uri /report/cspviolation/
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
no-referrer
Permissions-Policy
Missing
Not configured
Recommendations
- • Improve CSP by adding more specific directives and removing 'unsafe-inline'
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Consider adding Permissions-Policy to control browser features
Performance Headers
1 headers
Connection
Performance
close
Caching Headers
3 headers
Cache-Control
Caching
max-age=0, no-cache, no-store
Expires
Caching
Wed, 31 Dec 2025 16:54:16 GMT
Pragma
Caching
no-cache
Content Headers
1 headers
Content-Length
Content
0
Server Headers
0 headers
No server headers found
CORS Headers
0 headers
No CORS headers found
Cookies Headers
1 headers
Set-Cookie
Cookies
bm_sz=A14416DE0E56440BA8F77BE7FC7E868A~YAAQD2QwFyRydTabAQAAqORUdR71pzwSU9oXZLh6zMz9xGnTPeWJEm/rvYb4v2R7jzGaZiXcDrHceDA4FlTAq5jvASX22XT/jtvUREqWLjFkhQSn5kwRW/QYCfRMhkH47hn34Mm7XsbXAMn8YQUODz0NzLSBpD6ooKI//YLJjKCQCl5q0xx8T/AL0X9u+s23ql2M7RvhoPZH2lRkNLMrV7oif1Oal6BJRU2fAwKmhXKFJOlNOEvD7aFsWidOvwz45A29TcH4qjoUIWYxOUP3nyzPO1iKGpOcrLWsiRG0L2paoPD8uQfD4oASuIiVvkhbU9QMZY99DGHDdsk5PbxPl6eF6RswCUFBckumE/hR~3355698~3420740; Domain=.lastpass.com; Path=/; Expires=Wed, 31 Dec 2025 20:54:16 GMT; Max-Age=14400; SameSite=None; Secure
Other Headers
5 headers
Alt-Svc
Other
h3=":443"; ma=93600
Date
Other
Wed, 31 Dec 2025 16:54:16 GMT
Feature-Policy
Other
camera 'none';microphone 'none';geolocation 'none';encrypted-media 'none';payment 'none';usb 'none';
X-Dns-Prefetch-Control
Other
off
X-Download-Options
Other
noopen
Recommendations
Enable compression (gzip/brotli) to improve performance