The App Store has removed a fake app masquerading as the popular password manager LastPass, though it’s unclear if Apple took it down or the fake developer did. This fake app, created by someone named Parvati Patel, looked just like the real LastPass app but was not made by the company that owns LastPass, LogMeIn. It even had silly spelling mistakes if you looked closely. It’s embarrassing that Apple approved a phony app that so clearly copied another one.
Apple says that if other app stores were allowed, like in new EU rules, it could put customers at risk. Rogue developers may try to trick people into buying hard-to-cancel subscriptions or infect devices with malware. But in this case, the problematic app came directly from within the App Store.
The fake LastPass app launched on January 21st so it had a couple weeks to fool users. Luckily, every review warned others that it was a scam. It also used keyword “LastPass” to appear higher in searches but still only ranked 7th. The app never became very popular, as it didn’t make Apple’s top lists. So maybe not too many downloads happened before removal.
Still, LastPass had to publicly notify customers about the fake instead of it being caught sooner. It wasn’t removed by Apple until a day after LastPass spoke out. LastPass talked with Apple representatives about the copycat app and how it passed review. They are working together to understand how this app slipped through the cracks in Apple’s usually strict process.
The fake app clearly tried copying LastPass’ branding, look and feel, and description to target real users of the popular password manager. It’s good it was removed, but a better job is needed checking apps so sneaky fakes don’t end up on the App Store in the first place. Customers should always feel safe with what they find.
