It should be safe enough, with a few exceptions, one of those being this exploit: https://news.ycombinator.com/item?id=12171547 https://news.ycombinator.com/ite

It should be safe enough, with a few exceptions, one of those being this exploit: https://news.ycombinator.com/item?id=12171547 https://news.ycombinator.com/item?id=12171547 This guy says that if the webpage "asks" for another's page credentials, lastpass plugin will give it. Every character/keystroke in specific fields could be catched/logged , here you have an example from ... eBay : https://news.ycombinator.com/item?id=12000820 https://news.ycombinator.com/item?id=12000820 Anyway, this was already fixed and pushed to the users, as the guy mentions in his post.