LastPass Settlement: $8.2M Fund, $16.25M Crypto Pool, and Claims

The LastPass settlement is a $24.5 million class action deal that compensates U.S. users whose account data was stored with the password manager during the 2022 breach. It splits into an $8.2 million fund for general losses and statutory payments and a separate $16.25 million pool for users who lost cryptocurrency. Claims are open now through July 2, 2026, and a federal judge in Massachusetts will hold the final approval hearing on July 14, 2026.¹²

Who Is Eligible

The class covers all individuals residing in the United States and all U.S.-registered businesses whose LastPass accounts contained stored data at the time of the breach, which the settlement defines as the period between August and November 2022. Excluded are the court, LastPass and its related entities (including GoTo Technologies, Francisco Partners, and Elliott Investment Management), anyone who opts out, and anyone found guilty of involvement in the breach itself.³

If you had a Consumer Premium, Consumer Family, or Business account with data in it during that window, you are almost certainly a class member. Epiq, the court-appointed administrator, has been emailing eligible users a unique identifier and PIN from the address LastPassSettlement@e.epiqnotice.com. Those two codes are what you need to file.⁴

What You Can Claim

Payments come from two distinct funds. Which one applies depends on what you lost.

The $8.2 Million General Fund

This fund pays statutory awards and reimburses documented losses. You have to pick one track; you cannot receive both a statutory payment and a documented-loss reimbursement.⁵

A flat $25 statutory payment for any eligible account holder.
An additional $100 for California residents under the California Consumer Privacy Act.
Up to $300 for documented ordinary out-of-pocket costs traceable to the breach, such as credit monitoring or identity restoration.
Up to $10,000 for documented extraordinary losses caused by the breach.

All payments from this fund are pro rata. The final amount depends on how many valid claims come in and what is deducted for administration and attorneys’ fees.²

The $16.25 Million Crypto Pool

The crypto pool is a separate fund for users who lost cryptocurrency after attackers cracked their stolen vaults. Individual claims are capped at $900,000, and all valid claims are paid pro rata from the pool.⁵

Crypto claims are reviewed by a court-appointed special master, Bruce A. Friedman, Esq., with help from a blockchain forensics expert. Claims fall into two tiers. Tier 1 is for claimants whose vaults LastPass can confirm held compromised wallet private keys or seed phrases. Tier 2 is for claimants who cannot open their vault backup to verify storage but can provide other proof that their vault contained compromised keys at the time of the breach. Tier 1 claims are processed first.³⁶

One important trade-off: filing a crypto claim waives your right to sue LastPass separately over those losses.⁶

Non-Cash Benefits

All settlement class members are eligible for automatic enrollment in LastPass Dark Web Monitoring. Anyone who files a valid claim form also receives a complimentary six-month upgrade to a Consumer Premium account.⁵

How to File a Claim

Claims go through the official portal at www.lastpasssettlement.com/Login. You will need the unique identifier and PIN from your Epiq notification email. The filing deadline is July 2, 2026.³

If you want to opt out and preserve your right to sue LastPass separately, you have to mail a signed written request to the settlement administrator, postmarked by June 2, 2026. Opt-outs cannot be sent online, by phone, or by email.³

For documented-loss claims from the $8.2 million fund, you’ll need receipts, statements, or other records tying your expenses to the breach. For crypto claims, expect to submit whatever you can show about the contents of your vault at the time of the breach; Tier 2 claimants who cannot open their backup will need alternate proof.³

Is the Settlement Email Real or a Phishing Attempt

The notification is legitimate and court-authorized, but the concern is fair. This is a password manager settlement, and the exact people receiving these emails are the ones who already had their contact information exposed. A few ways to verify before you click anything:

Check the domain. The official site is lastpasssettlement.com, registered to Epiq Legal Noticing. You can confirm the registration through lookup.icann.org.
Contact the administrator directly at 1-877-748-1875 or info@LastPassSettlement.com.
Watch for red flags. A real settlement will never ask for a processing fee or credit card number. The claim form requires only the identifier and PIN from your notice. Official notices come by email or postal mail, not by text or social media.

If you are unsure about a message, type the settlement URL into your browser rather than clicking a link in the email.⁷³

When Payments Are Expected

The court granted preliminary approval in early 2026, and claims are open. Nothing will be paid until U.S. District Judge Patti B. Saris grants final approval at the July 14, 2026 hearing, scheduled for 2:30 p.m. If she approves the deal, payouts from the $8.2 million fund are expected in September or October 2026 at the earliest. Crypto pool payments will take longer and are anticipated around March 2027, following an additional court hearing on that fund.²⁶

Class counsel may take up to 35% of each fund in fees. That translates to up to $2.87 million from the general fund and up to $5.6875 million from the crypto pool. The fourteen named plaintiffs may each receive service awards of up to $10,000. Those amounts, plus administration and special master costs, come off the top before class members are paid.⁶

Canadian Users Have a Separate Settlement

If you’re in Canada, the U.S. deal doesn’t apply to you. A separate class action, Keswani et al v. GoTo Technologies USA, Inc. et al, was resolved in the Supreme Court of British Columbia and received final approval from Justice Brongers on February 18, 2026.⁸

The Canadian settlement totals US$3 million and includes a CAD $1.4 million crypto claims distribution fund. For ordinary claims, Canadian class members can be compensated for up to five hours of wasted time at CAD $34.01 per hour, plus up to CAD $500 for documented out-of-pocket expenses incurred before May 31, 2023. The Canadian claims window runs from March 25, 2026 to June 23, 2026, and is administered independently of the U.S. proceeding.⁹¹⁰

1
Bloomberg Law. LastPass Gets Initial Nod for $24.5 Million Data Breach Deal
2
LastPass Settlement. LastPass Data Security Incident Litigation Settlement
3
LastPass Settlement. LastPass Settlement FAQ
4
PCWorld. The LastPass Breach Settlement Is Real: Heres What You Should Know
5
ClassAction.org. $8.2M LastPass Settlement Ends Class Action Lawsuit Over 2022 Data Breach
6
Claim Depot. LastPass Settlement
7
Yahoo Tech. Does LastPass Owe Money
8
LastPass Canadian Settlement. LastPass Settlement Order
9
LastPass Canadian Settlement. LastPass Canadian Settlement
10
Concilia Inc. LastPass Class Action