A knowledge base article about LastPass Business: Getting Help and FAQs provided by the UC Berkeley IT Service Hub - Knowledge Portal
For help with LastPass business, contact your departmental LastPass Administrator.
You can check the status (incidents, outages, etc.) of LastPass at: https://status.lastpass.com
LastPass supports Admins and Helpdesk support teams with any issues requiring escalation, including technical or usability-related issues.
To get help directly from LastPass, click here and type in your question. Review the answers and if needed, scroll to the bottom of the page and click the “Contact Support” button to submit a help ticket to LastPass.
If you can't log in to your account to access the Service Portal, you can contact the Support team by submitting your email address on this page - https://support.lastpass.com/s/contact-support?language=en_US
Downloading and signing in through the browser extension is the best way to use LastPass. If you have deployed LastPass and a user still does not see the extension in their browser toolbar:
Though LastPass is a cloud-based solution, offline access is available through the browser extension and the mobile apps. The user needs to sign in at least once on a device to create a locally cached, encrypted copy of the vault. When they sign in without a connection, the app will default to offline mode and the user can sign in to view the offline copy of the vault. Note that offline access can be disabled by policy, though we do not recommend this due to user inconvenience.
LastPass is never sent the user’s Main Password, so we can’t send it to the user or the Admin or reset it. The Main Password must be reset by the user or an Admin using the available recovery options.
Here are steps users can take when they’re having trouble with their Main Password:
LastPass cannot change the username, email address or Main Password for a user – it must be done by signing in to the user’s account.
If a user does not have access to their MFA device, the Admin can temporarily disable it from the Admin dashboard.
One of the primary benefits of LastPass is the ability to create new, strong and unique passwords. It’s important to educate users on how to use the password generator and how to evaluate their overall password security with the Security Challenge.
Users can find the Security Challenge under Options. They will need to enter their Main Password to view results:
Because Admins can disable or delete a user’s account at any time, and because items stored in the work vault appear in reporting logs, we recommend that a user create a separate, personal LastPass account for all personal passwords.
Using the Link Personal Account option, the user can link their personal vault to their work vault so they can securely access both vaults while at work. However, the personal vault remains private, and the contents remain hidden from the Admin. Admins can enable the policy to make the personal vault Read Only if they want to ensure that no work items accidentally end up in the personal vault.
Why get LastPass?
LastPass securely stores all of your passwords and automatically signs you in to your accounts. LastPass also fills out shipping and billing forms, generates unique passwords and saves you time overall while improving security for you and your organization.
Who can see the data and passwords I have stored in LastPass Business?
Only you, and anyone you specifically invite to access it.
How will I get access to LastPass?
Request access from your department LastPass Administrator. You will receive a welcome email from LastPass with next steps on creating your account and completing setup.
What if I already use LastPass?
We encourage all Business users to also use a free Premium LastPass account, so only work credentials are stored in your Business account. You can link the two vaults together for easy access to both while keeping your personal account separate and private.
Why would I need a LastPass Business and Premium account?
LastPass Business is designed for institutional information and shared secrets. You will not be able to maintain access to LastPass Business after you are no longer an active staff member or affiliate. UCB’s Free LastPass Premium is configured using a non-Berkeley email address, is designed to be used with any non-institutional secrets, and will transition to a LastPass free account when you no longer have an active @berkeley.edu email address.
If you have both LastPass Business for your department and LastPass Premium for personal use, which one should you use to store your CalNet passphrase?
The CalNet passphrase is considered a personal account and we recommend that it be saved in LastPass Premium.
If you have institutional secrets to manage that are not shared and assigned to your personal identity (Slack or other non-CalNet work applications), should you use a Business or Premium account?
While institutional data should be in Business, either approach will work. If you have a need to share secrets with others in your department, request a Business instance. If you do not need to share secrets with others in your department, but still want a Business account, contact CalNet for help with a stand-alone account.
Can I add people outside my department to my LastPass Business managed company?
No, they cannot be invited to your particular LastPass Business managed company account because they are members of a different department. However, in the case where UCB Staff need to access information in multiple Business accounts, teams can share folders with users in other campus LastPass Business accounts. Note that shared folders can only be administered by members of the Business instance in which they were created. More information can be found at: Managing Sharing and Shared Folders.
How does Duo work with LastPass Business and Premium?
LastPass Business’s MFA is set up by ISO, and allows all methods of MFA, except SMS and Phone Calls. LastPass Premium is self-managed by the user, but instructions are provided to allow them to create their own free Duo integration. If they do that, it will appear in the Duo Security app on their phone.
What happens if I get compromised?
LastPass performs daily checks to see if LastPass account email addresses are compromised on the dark web. If a match is found, an email notification is sent to the LastPass user notifying them of the domain that was breached and the potential risk. Users can then run the LastPass Security Challenge to check for reuse of the same password and generate new passwords for all affected accounts.
How long will it take to enroll my department?
Once ISO receives your request via the web form, it will take up to a week to process your request and create and configure your instance.