So in Lastpass I jiggered a setting to disallow any country but the United States. Then today I got a message on my computer while trying to log in to Lastpass saying I couldn't connect because I'm in Canada (I'm not.)
Happily, Lastpass did allow me to get an email sent with a link to change the setting.
Then I figured out what had caused this--Tunnelbear sometimes connects in Canada instead of the United States.
This also explains why Pandora threw a message the other day on my tablet saying it wasn't allowed in other countries. Apparently, at that moment, Tunnelbear had been connected in Canada. And apparently, Pandora doesn't allow that. I had turned off Tunnelbear to fix it, but now I understand that Tunnelbear sometimes connects in Canada.
I solved the problem in Lastpass by adding Canada as an allowed country. And I solved the problem in Pandora by figuring that most of the time it's not a problem because usually Tunnelbear connects in the United States, but when I do run into this message, I'll just temporarily shut off Tunnelbear while playing Pandora.
I tried forcing Tunnelbear to connect in the United States only, but it just hung. When Tunnelbear wants to connect through Canada, I need to let it. So I left its connection setting on "auto."