Is LastPass Password Manager safe?

LastPass Password Manager intercepts passkey requests and form credentials on all HTTPS pages to manage and store them.

The extension registers content scripts on every HTTPS page to wrap the WebAuthn API, capturing passkey creation and authentication flows before passing them back to the LastPass backend. It also listens to all outgoing POST requests to detect form-submitted credentials, SAML assertions, and OAuth tokens, which are used to trigger save prompts within the extension. As part of its credential-management role, it can disable the browser's built-in password manager so LastPass acts as the sole store.