A knowledge base article about Why should I use a password manager (like LastPass)? provided by the UC Berkeley IT Service Hub - Knowledge Portal
What is a password manager?
A password manager is a software application that stores, retrieves, and manages complex passwords in an encrypted format. LastPass makes it easy to have unique passwords for every single account you have because it remembers them for you. Password managers store login information and automatically enter it to log you into your online accounts.
Why use a password manager?
Using a password manager makes your internet experience easier and safer by preventing common security risks:
- Reduces Password Fatigue: One Main Password is all you need to remember to access all of your accounts.
- Promotes Good Hygiene: Prevents poor behaviors like using simple passwords or repeating the same password across multiple sites.
- Phishing Protection: LastPass flags potentially malicious sites by comparing the URL you are visiting with the legitimate one stored in your vault, preventing the "autofill" of credentials on fraudulent domains.
- Sync Across Platforms: You can bring your passwords with you to any platform (web, desktop, and mobile). Data syncs in real time; changing a password on your laptop automatically updates it on your phone.
- Broad Compatibility: Compatible with every major OS (Windows, Mac, and Linux) and includes a command line application for advanced users.
Why use LastPass?
- Advanced Security: LastPass uses modern algorithms (AES-256, PBKDF2 SHA-256, and salted hashes). LastPass never sees your passwords in plaintext.
- Biometric Support: Supports fingerprint readers, including Windows Biometric Framework. Once enabled, you can use your fingerprint to log in rather than typing your Main Password.
- Secure Storage for Notes: Securely store sensitive text and images, such as travel itineraries, financial info, or emergency contact data.
- Password Generator: Easily create passwords adjusted for length, character types, and pronounceability.
The 'Zero-Knowledge' Model:
Your passwords are encrypted and decrypted at the device level. Your Main Password and your encryption keys are never sent to LastPass servers and are never accessible by LastPass staff or the Information Security Office. Even under subpoena, the host could only provide an encrypted data blob with no key to read it. This is why account recovery is not guaranteed if your Main Password is lost.
Support and Customer Service
- Direct Technical Support: Speak with live representatives for assistance.
- LastPass Business Support: Call 1-866-890-6809 (Available Sunday 7:30 PM to Friday 8:30 PM EST).
- LastPass Premium: Use your campus-sponsored account to open a priority support ticket for faster resolution.