As organisations adopt an ever-growing mix of SaaS applications and AI tools, managing secure access has become one of the biggest challenges facing IT teams.
LastPass is attempting to address that problem with the launch of Secure Access Essentials, a new approach designed to extend the company’s traditional password management offering into broader access management for modern, browser-based work environments.
The company says the initiative reflects how dramatically digital workplaces have evolved in recent years. Employees now log into dozens of cloud applications daily, while new AI tools are entering workflows faster than security teams can track them.
At the same time, most of this activity now takes place inside the browser — an environment that historically has had limited security oversight.
That trend is creating new risks for organisations, particularly smaller businesses that may lack dedicated security teams.
According to research from Cybernews, 59 percent of employees are using AI tools that have not been approved by their employer, raising concerns around data exposure and shadow IT. Meanwhile, 80 percent of business leaders say data leakage is one of their biggest security worries.
LastPass says its new Secure Access Essentials capabilities are designed to provide organisations with foundational security controls to address these challenges without adding significant operational complexity.
“In a world where businesses and people rely on more apps and AI tools than ever before, securing access has become both essential and even more complicated,” said Don MacLennan, Chief Product Officer at LastPass.
“Customers tell us they need security that gives them control without slowing anyone down. Secure Access Essentials delivers simple, foundational access protection that helps keep every user, every app and every AI tool secure from the place people already work — the browser.”
The solution combines several identity and access management capabilities in a single platform delivered through a browser extension.
These include the ability for organisations to discover unmanaged SaaS applications and AI tools being used across their environment, providing IT teams with visibility into shadow IT activity.
Administrators can also define and enforce access policies, helping ensure employees only access the tools they need while maintaining audit and compliance oversight.
Finally, the platform integrates password management, single sign-on (SSO), and multi-factor authentication (MFA) to simplify secure sign-ins across applications.
The company says the approach is designed with lean IT teams in mind, allowing organisations to deploy security controls without requiring significant infrastructure or specialist expertise.
Secure Access Essentials also includes features aimed at individual users and families, including secure password storage, automated login capabilities, and dark web monitoring to detect compromised credentials.
LastPass plans to showcase the new capabilities at RSA Conference 2026, where it will demonstrate how organisations can protect SaaS environments from identity-based threats such as weak credentials and uncontrolled access to AI tools.
The announcement reflects a broader shift in cybersecurity toward identity and access protection, particularly as attackers increasingly target credentials and user sessions rather than traditional network vulnerabilities.
As the number of applications and AI services used in workplaces continues to expand, vendors are increasingly focused on securing the browser itself — the place where most modern work now happens.
