What is lp-push-server-1600.lastpass.com? It's a subdomain used by LastPass, the popular password manager. If you've ever wondered whether this subdomain is safe, here's what you need to know. The site immediately redirects to lastpass.com, so no actual login or data entry happens here. That's the first clue that this isn't a standalone scam page. Security is well handled — the connection is encrypted, browser protections are in place, and the domain isn't flagged anywhere. For a subdomain of a major service, you wouldn't expect a separate privacy policy or contact page, and that's fine. The absence of a favicon is a minor oddity, but it doesn't affect trust. If you're a LastPass user, you'll never interact with this subdomain directly — it's just a server address for push notifications. So is lp-push-server-1600.lastpass.com a scam? No. It's a genuine piece of LastPass infrastructure, and there's nothing here to worry about.
In plain English
This is a legitimate subdomain owned by LastPass, a widely used password manager. It redirects to the main LastPass site and has strong security protections in place. There's no reason to treat it as suspicious — it's just a backend server doing its job.
Where the score comes from
Strong security setup with modern encryption, browser protections against clickjacking and code injection, and no blacklisting. This is exactly what you'd expect from a legitimate service handling login flows.
While this specific subdomain doesn't expose its own WHOIS, it's clearly part of LastPass, a well-known, established company. The about page and brand recognition compensate for the lack of direct ownership info here.
No negative signals from blacklists or Google Web Risk. The subdomain isn't widely crawled (no Tranco rank), but that's normal for a server endpoint. The lack of archive history is a minor neutral point.
There's an about page, but contact info and social links are missing from this subdomain. That's typical for a redirect or backend server — users are meant to land on the main LastPass site for full details.
No privacy policy or terms on this subdomain, but the parent LastPass site has them. For a subdomain that simply redirects, this gap is not a compliance red flag.
Built on DigitalOcean with Akamai CDN, which is a solid combination. DNSSEC isn't enabled, and there's no email setup, but those are common omissions for a push-server subdomain.
What we checked
Run this site? Show your score.
Add a trust badge so visitors can see your live score for themselves.
Get your badge →