LastPass Business: Administrator and User Activation Guide

1. Complete the LastPass Business Form

Request a LastPass Business account for your department via the LastPass Business Request Form. Before submitting your request, make sure you've read and understand the requirements at Getting Started with LastPass (KB0015544).

2. Activate your LastPass Business Account

Install Browser Extensions and Mobile Apps

Prepare your browser to use LastPass Business by going to the LastPass Download webpage and downloading the appropriate plug-on or browser extension: https://lastpass.com/misc_download2.php

Activate Your Account

ISO Staff will invite departmental administrators to the newly created instance. The email invitation will come from LastPass <do-not-reply-support@lastpass.com> and will include an activation code to activate your account and set your Main Password.

Click on the Activate LastPass button to get started. Enter your Activation code (if it's not there already), and then create a main password.

Set Your Main Password

For security purposes, the main password must be a strong, complex password:

• At least 20 Characters.
• Must include characters from all 4 sets: numbers, lowercase letters, uppercase letters, and special characters.
• Must be complex and not easily guessed.
• Do not use simple words (e.g., "password," "welcome," or "hello").
• Do not include three or more consecutive characters from your username.
• Main Passwords must be reset every 365 days. If you reuse a main password elsewhere in LastPass, you will be required to reset it.

Set Up Duo MFA

After the main password is set, log in again and click the link to verify your Duo Security setup. You will be asked to provide your CalNet ID and complete a Duo challenge before being logged in.

Link Personal Account

ISO offers the option to link a personal account to your Business account. This is voluntary. When you complete your first login, you will be prompted to set up a linked account.

Both the linked personal account and the Business account are encrypted with different keys. When linked, the Business account can view data within the personal account but not vice versa. Free LastPass Premium accounts are available via Premium as a Perk.

3. LastPass Admin Responsibilities

• Provide support directly to your end users.
• Handle user lock-outs and account deletion (only the User and Super Admin can reset main passwords).
• Configure Admin roles and related policies (e.g., Help Desk Restricted Admin).
• Re-invite users whose invitations have expired.
• Software installation assistance for browser plugins and desktop apps.
• User education and training.

4. Accessing the Business Admin Console

To access the console, click the LastPass browser extension and select the "Admin Console" button at the bottom of the pulldown. Alternatively, go to lastpass.com, log in, and click Admin Console on the left-hand menu.

Inviting Additional Users

Administrators invite additional users to their instance. LastPass provides detailed instructions here: Manually Add Business Users.

Share the LastPass Business Guide with new users.

Reset a User’s Main Password

Details on how to reset a main password for a user are available here: Reset a User's Main Password (Super Admin).

Note: Users must log in via the LastPass web browser extension at least once to activate the option for an admin to reset their main password.

5. Dark Web Monitoring

For Admins: To turn on user-controlled Dark Web Monitoring, go to Policies, search for Control, click Edit Policy Setting, enter 1, and Save.

For Users: To monitor an email address, it must be entered as the username of an item saved in your vault (even if you use CalNet ID to log in). Once saved, go to the Security Dashboard and turn on monitoring for that address.

6. Training and Support

LastPass provides a one-hour training session with Q&A: Free Live Training.

Primary Support: Accessible through your admin console or the 24/7 ticket support portal.

UCB-Specific Issues: Email calnet-admin@berkeley.edu with details if LastPass support cannot resolve the issue.