LastPass Settlement Claim Form: How to File, Deadlines, and Payouts

The LastPass settlement claim form is available at lastpasssettlement.com, with a filing deadline of July 2, 2026, at 11:59 p.m. ET online or postmarked by that date if you mail it. The settlement resolves a class action over the 2022 breach that exposed encrypted vault data and account metadata. Depending on what happened to you, your payment can range from a flat $25 to as much as $10,000 in documented losses, with a separate pool for cryptocurrency theft reaching up to $900,000 per claim.

Who Qualifies to File

The class covers everyone in the United States, and every U.S.-registered company, whose LastPass account was compromised during the 2022 breach and held data at the time. The breach window is August 2022 through November 2022.¹ You do not need to have been a paid subscriber. Free accounts with vault contents during that window are in.

Check your email for a notice from the settlement administrator. It contains the Unique ID and PIN you need to log in and file. If you think you qualify but never received a notice, call the administrator at 1-877-748-1875.²

What You Can Claim

You have to choose between the flat $25 payment and reimbursement of actual losses. You cannot collect both. California residents can add a $100 CCPA payment on top of whichever option they pick. Cryptocurrency losses have their own pool with its own cap.³

$25 Statutory Payment

Anyone who held a Consumer Premium, Consumer Family, or Business account with vault content can claim $25 without documentation. This is the right pick if the breach caused inconvenience but no provable financial loss.⁴

Ordinary Loss Relief Up to $300

Instead of the $25, you can claim up to $300 for out-of-pocket costs fairly traceable to the breach. Qualifying expenses include credit monitoring, identity protection services, dark web monitoring tools, and similar security-related costs paid after August 1, 2022. You need receipts or statements for each expense.⁴

Extraordinary Loss Relief Up to $10,000

If the breach led to identity theft, fraud, or unauthorized transactions, you can claim up to $10,000. The bar is higher here: the losses must have been caused by the breach, not just connected to it. Bank statements showing unauthorized charges, police reports, and correspondence with financial institutions all help. You can combine extraordinary and ordinary loss claims in one filing.⁴

$100 CCPA Payment for California Residents

If you lived in California at the time of the breach and held any LastPass account, you can add $100 under the California Consumer Privacy Act. It stacks on top of your other benefit, so a California resident taking the $25 statutory payment would see $125 before any pro-rata adjustment.⁴

Cryptocurrency Losses Up to $900,000

A separate $16.25 million Crypto Pool covers class members whose cryptocurrency was stolen as a result of the breach. Individual claims can reach $900,000, though payments shrink pro rata if approved claims exceed the pool. You will need wallet records, exchange statements, or transaction logs documenting the theft.³

In-Kind Benefits

Dark web monitoring is included for all LastPass users regardless of which cash benefit you claim. Free account holders also get a six-month upgrade to Consumer Premium.³

What to Gather Before You Start

Pull your paperwork together before you open the form. The administrator will not chase you for missing documents. Incomplete claims get denied.

For the $25 payment, you need little beyond your Unique ID, PIN, and confirmation of your account type and vault status. For loss claims, you need third-party documentation of every expense or loss: receipts, invoices, bank or credit card statements, correspondence showing fees or reimbursements, and wallet or transaction records for crypto losses.²

Every expense must be actual, documented, and unreimbursed. If your bank already refunded a fraudulent charge, you cannot claim it here. Costs must be dated after August 1, 2022, and must be fairly traceable to the breach for ordinary losses or directly caused by the breach for extraordinary losses.²

You can redact account numbers down to the last four digits, so long as names, dates, and dollar amounts stay visible. Each uploaded file must be under 20 MB and in one of these formats: jpg, jpeg, png, gif, tif, tiff, doc, docx, xls, xlsx, pdf, txt, rtf, or zip.²

Filing Online

Go to lastpasssettlement.com and log in with the Unique ID and PIN from your email notice. If you lost it or never got one, call 1-877-748-1875 before the deadline to get credentials.²

Once logged in, the form walks you through four confirmations:

Account type held during August through November 2022: Consumer Premium, Consumer Family, Business, or Free.
Whether your vault contained data at the time of the breach.
Whether you lived in California during the breach, for the $100 CCPA payment.
Which benefit you want: the $25 statutory payment or loss reimbursement, with an optional Crypto Pool claim.

If you picked a loss category, the form will prompt you to describe each expense and upload supporting documents. Take time with the descriptions. Vague entries and thin documentation are the fastest way to get a claim reduced or denied. Review the summary and submit. You will get a confirmation code by email. Save it.²

Filing by Mail

If you cannot file online, print the form from the settlement website and mail it with copies of your supporting documents to:

LastPass Data Security Incident Litigation Settlement Administrator
P.O. Box 2230
Portland, OR 97208-2230²

Mailed claims must be postmarked by July 2, 2026. Keep copies, and consider using a mailing method with tracking. You will not get an instant confirmation; the administrator will contact you if more information is needed.

Deadlines to Know

June 2, 2026: Deadline to request exclusion or file a written objection, both postmarked by this date.⁴
July 2, 2026: Deadline to submit your claim form, online by 11:59 p.m. ET or postmarked by mail.²
July 14, 2026: Final Approval Hearing, where the court evaluates the settlement and any objections.³

What Happens After You File

An independent third party reviews every claim against the settlement criteria and LastPass’s internal records. The reviewer decides what benefits you qualify for, and that decision is final. There is no formal appeal.³

If more information is needed, the administrator will reach out. Payments will not go out until after the Final Approval Hearing, and any appeals of the court’s order could push the timeline further. Benefits from the $8.2 million settlement fund are paid pro rata, so if approved claim values exceed the fund, every payment shrinks proportionally.³

Payment is by check mailed to the address on your claim or by electronic transfer. Keep your contact information current with the administrator. An undeliverable check or expired payment link means lost money.

Opting Out or Objecting

To preserve your right to sue LastPass independently over the breach, you must request exclusion in writing, postmarked by June 2, 2026, to the administrator at P.O. Box 2230, Portland, OR 97208-2230. Opting out means no payment, but your legal claims stay intact.⁴

You cannot file a claim and opt out at once. If you submit both, your claim is treated as invalid unless you withdraw the opt-out first.²

Objections are separate. If you think the terms are unfair but still want to participate, file a written objection by June 2, 2026. The court will consider it at the Final Approval Hearing. Objecting does not remove you from the class; you stay eligible for benefits unless you also opt out.⁴

If you do nothing, you give up the most. Every class member who does not opt out releases their legal claims against LastPass over the 2022 breach, whether or not they file. No claim and no opt-out means no money and no right to sue. Filing a valid claim at least gets you something in exchange for the release.²

A Note on Taxes

Reimbursements for actual losses are generally not taxable, because they restore you to where you were rather than creating a gain. The $25 statutory payment and the $100 CCPA payment are less clear-cut, since they are not tied to documented expenses, and may be treated as taxable. Starting in 2026, the IRS reporting threshold for Form 1099-MISC payments rose from $600 to $2,000, so smaller settlement payments may not trigger a tax form. For a large extraordinary-loss or cryptocurrency payout, talk to a tax professional about how to report it.

1
ClassAction.org. In Re LastPass Data Security Incident Litigation Proposed Notice
2
LastPass Settlement. LastPass Data Security Incident Litigation – Submit a Claim Instructions and Login
3
LastPass Settlement. LastPass Data Security Incident Litigation
4
LastPass Settlement. LastPass Data Security Incident Litigation – Frequently Asked Questions