www.lastpass.com speed test — 20 Oct 2026

Measured from the wfix.shop server on 20 October 2026 at 13:14 UTC. Grade B (84/100), with the screenshots, the timings and the fixes that matter.

https://www.lastpass.com/

20 October 2026 at 13:14 UTC · Free test · report pt_801bccc05267
Grade
B
84/100
Performance92/100
Structure71/100

8 audit(s) passed, 8 need work

First byte (TTFB)302 msmeasured from this server
Fully loaded2.54 sfirst byte + slowest asset
Requests18document + assets
Page weight1.02 MBcompressed transfer
HTML document32.0 KBgzip
ProtocolHTTP/3server not sent
Third-party328.0 KBother hosts

Where the first byte went

  • DNS lookup 77 ms 25%
  • TCP connect 53 ms 18%
  • Server wait 172 ms 57%

Measured on the connection that fetched the HTML. Every other request on the page waits for the end of this bar before it can start.

How this page compares

First bytefaster than 74% of 4,999 pages tested here302 ms against a median of 449 ms
Page weightheavier than 64% of 4,999 pages tested here1.02 MB against a median of 650.3 KB
Fully loadedslower than 74% of 4,999 pages tested here2.54 s against a median of 1.84 s
Requestssends fewer requests than 81% of 4,999 pages tested here18 against a median of 26

Every report published here is in this comparison, so it is a reference population of pages tested from one server - not a benchmark of the whole web.

What these numbers mean

  • The first byte arrived in 302 ms. That is workable, and the cheapest win left is caching or a warmer connection.
  • The page transfers 1.02 MB over 18 request(s). Javascript files are 79% of it, so defer what is not needed for the first screen, and drop tags nobody uses.
  • The HTML itself arrives gzip-compressed.
  • It runs over HTTP/3, so the assets share a connection instead of opening one each.
  • 31% of the weight comes from other hosts (analytics, fonts, embeds), which also means their slow day becomes your slow day.
  • The largest element painted at 864 ms, inside the 2.5 s Google calls good.
  • Layout shift is 0.101 (good is under 0.1): something without a reserved size is loading late - an image, an ad, or a font swap.
  • The main thread was blocked for 352 ms, so taps and scrolling wait while scripts run.

Fix first: Compress text responses - Turn on brotli (preferred) or gzip for text/css, javascript and text/html in the web server. This is the cheapest win available on almost any site.

Read on one shared server, not a visitor's phone: use it to compare pages against each other, not as a promise about every connection. We fix what these tests find.

Browser render

The same URL loaded in a real browser, so these are the readings curl cannot produce. The grade above is still built from the server measurements.

Largest contentful paint864 msgood is under 2.5 s
Cumulative layout shift0.101under 0.1 is stable
Total blocking time352 mslong tasks during load
First contentful paint624 msfirst content on screen
Browser page weight2.94 MB143 request(s), scripts included
Failed requests3blocked or unreachable
Largest contentful paint864 ms
Goodgood under 2.5 s, poor over 4 s
Cumulative layout shift0.101
Needs improvementgood under 0.1, poor over 0.25
Total blocking time352 ms
Needs improvementgood under 200 ms, poor over 600 ms

Page weight by type

What the page is made of

Javascript 5 requests
828.0 KB 79%
Css 3 requests
172.2 KB 17%
Images 8 requests
10.3 KB 1%
Html 1 request
474 B 0%

Transfer size, compressed as sent. 18 request(s) in total, 1.02 MB across all of them.

Top issues

Compress text responses

high impact

1 text response(s) of 10 KB or more are sent uncompressed, and the document itself is not compressed. That is 324.9 KB of compressible text.

Fix: Turn on brotli (preferred) or gzip for text/css, javascript and text/html in the web server. This is the cheapest win available on almost any site.

Render-blocking resources

high impact

3 render-blocking resource(s) in the document head (0 script(s), 3 stylesheet(s)). The page cannot paint until each one arrives.

Fix: Add defer or async to scripts that do not change the first paint, inline the critical CSS, and load the rest with media="print" plus an onload swap.

TLS certificate validity

high impact

The certificate for www.lastpass.com has 3 day(s) left.

Fix: Renew automatically (certbot with a working renewal timer) and alert on the certificate, not on the renew command, so a silent failure is caught weeks before a browser warning.

Total page weight

medium impact

The page transfers 1.02 MB across 18 request(s), with the document itself at 32.0 KB.

Fix: Work through the heaviest assets first: images, then fonts, then third-party scripts.

Cache static assets

medium impact

2 asset(s) answer without a Cache-Control max-age, so browsers revalidate them on every visit.

Fix: Version filenames on change and serve them with a long max-age plus immutable. That is what makes a returning visitor fast.

Waterfall

Slowest requests

JAVASCRIPTwww.lastpass.com/assets/form/static/js/thirdparty.bundl…
2.24 s
JAVASCRIPTwww.lastpass.com/assets/form/static/js/index.bundle.js
1.58 s
CSSwww.lastpass.com/assets/form/static/css/main.css
1.17 s
JAVASCRIPTstatic.lputil.com/lpassets/ab-test/tests.js
1.01 s
IMAGESwww.lastpass.com/assets/images/cdn/functional-arrow-blu…
796 ms
CSSwww.lastpass.com/assets/styles/styles.css
762 ms
IMAGESwww.lastpass.com/-/media/9a7d7c4139654095b1caeeee7e772b…
722 ms
IMAGESwww.lastpass.com/-/media/c5fcaf34fb504fab8984bfe413fdad…
711 ms
CSSfonts.googleapis.com/css2
711 ms
HTMLwww.lastpass.com/V_F2ybGbG2BR/maGEZOthv_/V-/5tOVQmwzbSt…
704 ms

Each bar is one request's own response time, scaled to the slowest. Assets were fetched in parallel, so the bars overlap in real time rather than stacking. first party third party

RequestTypeStatusTimeSize
https://www.lastpass.com/assets/form/static/js/thirdparty.bundle.js?t=12052026204139javascript2002.24 s234.0 KB
https://www.lastpass.com/assets/form/static/js/index.bundle.js?t=12052026204139javascript2001.58 s74.7 KB
https://www.lastpass.com/assets/form/static/css/main.css?t=12052026204139css2001.17 s15.1 KB
https://static.lputil.com/lpassets/ab-test/tests.js?t=12052026204139 3rd partyjavascript2001.01 s324.9 KB
https://www.lastpass.com/assets/images/cdn/functional-arrow-blue.svgimages200796 ms1.6 KB
https://www.lastpass.com/assets/styles/styles.css?t=12052026204139css200762 ms156.8 KB
https://www.lastpass.com/-/media/9a7d7c4139654095b1caeeee7e772bf2.svgimages200722 ms619 B
https://www.lastpass.com/-/media/c5fcaf34fb504fab8984bfe413fdadd6.svgimages200711 ms476 B
https://fonts.googleapis.com/css2?family=Source+Sans+3:ital,wght@0,200..900;1,200..900&display=swap 3rd partycss200711 ms366 B
https://www.lastpass.com/V_F2ybGbG2BR/maGEZOthv_/V-/5tOVQmwzbStb8QDO/PRc4N0sKYQk/A20W/AjNsKzkhtml403704 ms474 B
https://www.lastpass.com/-/media/43c6c6862a08410a8ef34ab46a3a750b.icoimages200697 ms696 B
https://www.lastpass.com/-/media/26f066959bca4cc9add4dbb206d2962e.svgimages200690 ms515 B
https://www.lastpass.com/assets/js/main.js?t=12052026204139javascript200683 ms191.7 KB
https://www.lastpass.com/-/media/1f23da193f0447af82a4e0179342eed4.svgimages200668 ms5.9 KB
https://api.consentjs.datagrail.io/e97f4db7-8599-4ef5-af61-0466450d3e76/0d05fe50-08b6-49c2-a26f-683f72ecaf9d/consent-loader.js 3rd partyjavascript200660 ms2.8 KB
https://www.lastpass.com/-/media/fbc260615a2e4912a9eed2b7687b567c.svgimages200659 ms405 B
https://www.lastpass.com/static/media/lazy.pngimages200658 ms129 B
Report this page

The page is removed when the owner agrees. Sending this removes nothing by itself.

Run this test on your own site

The same engine, free, with the screenshots and the fixes. No account needed.