This site requires JavaScript to be enabled
An updated version of this article is available

LastPass Business Admin User Guide

820 views

5.0 - Last modified on 2026-11-10 Revised by Luca Giles

4.0 - Last modified on 2026-09-11 Revised by Summer Scanlan

3.0 - Last modified on 2026-09-01 Revised by Summer Scanlan

2.0 - Last modified on 2026-07-01 Revised by Casey Hennig

1.0 - Created on 2026-04-13 Authored by Lynn Gu

Reminder: You will be prompted to reset the main passphrase for your LastPass Business Account every 365 days.

Complete the LastPass Business Form

Request a LastPass Business account for your department via the LastPass Business Request Form. Before submitting your request, make sure you've read and understand the requirements at Getting Started with LastPass.

Activate your LastPass Business Account

Install Browser Extensions and Mobile Apps

Prepare your browser to use LastPass Business by going to the LastPass Download webpage and downloading the appropriate plug-on or browser extension: https://lastpass.com/misc_download2.php

Activate Your Account

ISO Staff will invite departmental administrators to the newly created instance. The email invitation will come from LastPass <do-not-reply-support@lastpass.com> and will include an activation code to activate your account and set your Main Password.

Activate LastPass Account Email Invitation screenshot showing the Activate LastPass button.

Click on the Activate LastPass button to get started. Enter your Activation code (if it's not there already), and then create a main password.

Set Your Main Password

For security purposes, the main password must be a strong, complex password.

  • At least 20 Characters
  • Password characters must be from all 4 of the following character sets:
    • numbers [0-9]
    • lowercase letters [a-z]
    • uppercase letters [A-Z]
    • special characters [!@#$,^ etc]
  • The passwords must be complex and not easily guessed or obtained.
  • Do not use simple words (e.g., "password," "welcome," or "hello").
  • Do not include three or more consecutive characters from your user name.
  • Main Passwords must be reset every 365 days.
    • If you reuse a main password elsewhere in LastPass, you will be required to reset it. Your main password cannot be reused elsewhere.

Set Up Duo MFA

After the main password is set, log in again and click the link to verify your Duo Security setup. You will be asked to provide your CalNet ID on the next screen, and complete a Duo Security challenge before being logged in to LastPass Business.

Screenshot of the link to verify Duo Security setup.

Link Personal Account

ISO offers the option to link a personal account to your Business account. This is voluntary. When a user completes their first login, they will be prompted to set up a linked account.

Screenshot showing the prompt to link a personal LastPass account.

Additional Information on Linked account

Both the linked personal account and the Business account are encrypted with different encryption keys. When linked, the Business account can view data within the personal account but not vice versa. The linked personal account can be any “free” or “premium” account. Free LastPass Premium accounts are available to anyone with a valid berkeley.edu email address thanks to Premium as a Perk. LastPass cannot auto-create a “premium” account for any entity, since the end-user will always need to define the main password for encryption and access.

Browser Extensions and Mobile Apps

If you have not yet done so, install Browser Extensions and mobile apps. Downloads for plug-ins or add-ons for other browsers and operating systems can be downloaded at the LastPass Download webpage: https://lastpass.com/misc_download2.php

Request Admin Access

Once you complete the steps above, you will be active in LastPass Business as regular users and not an administrator. Reply back to the ServiceNow ticket, confirm that you have activated your account, and request administrative privileges. ISO staff will enable administrator privileges on your account.

Set Up Recovery Options

It is extremely important that you set up recovery options for your account. The LastPass Support page details all recovery options. At a minimum, we recommend using the LastPass browser extension. Signing in to LastPass using the extension regularly will ensure that your administrators can help you reset your main password if you forget it.

LastPass Admin Responsibilities

  • Provide support directly to your end users
  • User lock-outs and account deletion (only the User and Super Admin can reset main passwords)
  • Configure Admin roles and related policies – like Help Desk Restricted Admin
  • Re-inviting users whose invitations have expired
  • Software installation assistance (for the LastPass browser plugins and desktop apps)
  • User education and training
  • Initial troubleshooting on problem/resolution, including login issues on specific URLs

Accessing the Business Admin Console

Once ISO enables administrator privileges on an Business account, you should have access to the Business Console. To access the console, click the LastPass browser extension and select the “Admin Console” button at the bottom of the pulldown. Alternatively, go to lastpass.com, log in with your Business account, and click Admin Console on the left-hand menu.

Inviting Additional Users

Administrators will invite additional users/administrators to their LastPass instance. LastPass has detailed instructions on how to invite Business users individually or in bulk: https://support.logmeininc.com/lastpass/help/manually-add-enterprise-users-lp010045

The email invitations will come from LastPass and will include an activation code. You should provide instructions to your users to pre-install the LastPass Browser extension and share the LastPass Business Guide with new users.

Reset a User’s Main Password

Details on how to reset a main password for a user are here: Reset a User's Main Password (Super Admin). A summary is provided below.

All Admins are, by default, set up to be able to reset all user main passwords. Users must login via the LastPass web browser extension to activate the option to reset main passwords. Once a user is eligible, you will see the following under the Users page:

LastPass Admin interface showing the Reset Master Password option.

Selecting “Reset Main Password” will take you through the following steps:

  • Enter your own main password to verify your identity.
  • Select a new, temporary main password for the user. Make sure the checkbox to require them to change their main password is checked.
  • LastPass will re-encrypt the user’s vault.
  • Share the new password with the user.
  • The user will login and be required to change their main password.

Removing a User

Administrators can remove users from a LastPass Business instance without deleting the user's account:

  1. Log in to LastPass and click the "Admin Console" from the left menu bar.
  2. In the admin console, click "Users" from the left menu bar.
  3. Select the user you would like to remove to bring up the account details.
  4. Click the three dots at the upper right corner.
  5. Select "Remove user from company."
  6. Select "Allow access to shared sites and folders" to allow the account to be added to another instance in the future.

Managing Sharing and Shared Folders

Note: LastPass Admins will NOT automatically have access to all shared folders. To ensure access is not lost when a user leaves, we recommend that users add their department Admin to shared folders.

  • An account can have multiple different shared folders with different permissions on each.
  • Teams can share folders with users in other campus LastPass Business accounts. Note that shared folders can only be administered by members of the Business instance in which they were created.

Track & Report

Use the Reports tab in your Admin Dashboard to gauge the success of LastPass Business in your department. Detailed instructions: Generate Enterprise Reports.

Verify functionality by checking the following:

  • Verify login and access your department’s admin console.
  • Verify that policies are in place and functioning.
  • Verify that policies are not infringing on work duties.
  • Verify that users are able to access all needed functions.

Dark Web Monitoring for Business Accounts

For Admins:

  1. Go to policies.
  2. Search for Control.
  3. Click the policy to edit it.
  4. Click on Edit Policy Setting.
  5. Enter 1.
  6. Save.

For Users:

In order for LastPass to monitor an email address, it must be entered in the username of an item saved in your vault:

  1. Add New Password.
  2. Enter Name: Dark Web Monitoring - [email address].
  3. Enter Username: Full email address.
  4. Enter anything in the password field.
  5. Save.
  6. Go to Security Dashboard.
  7. Scroll down to Dark Web Monitoring and turn on monitoring for the email address.

If you are unable to add an item to your business account, you must first unlink your premium personal account: Unlink personal account instructions.

Training and Support

Online Training

LastPass provides a one-hour training session with Q&A for users and administrators. We recommend the live or recorded training: Free Live Training.

LastPass CLI Tool

Use the LastPass command-line application

Support

Primary support is provided by LastPass and accessible through your admin console (Contact Us button):

For UCB-specific issues, secondary support is provided by the CalNet team. Email calnet-admin@berkeley.edu with details and any information provided by LastPass support.

LastPass Security Policies

For a current list of enabled and disabled LastPass policies, see: LastPass Security Policies Spreadsheet.

Revised by Summer Scanlan
Last modified 2 months ago