About LastPass Teams Shared Folders
A shared folder is a special folder in your Vault that you can use to securely and easily share Sites and Secure Notes with other LastPass users. Changes to the shared folder are synchronized automatically to everyone with whom the folder has been shared. Different access controls – such as "Hide Passwords" – can be set per user. Shared folders use the same technology to encrypt and decrypt data that a regular LastPass account uses, but are designed to accommodate multiple users for the same folder.
If you are a LastPass Teams admin, please see View and Manage LastPass Teams Shared Folders (Admins) for instructions.
If you are a LastPass user, please see Manage LastPass Teams Shared Folders (Users) for instructions.
With Shared Folders:
- Anyone can create a shared folder.
- You can easily configure and maintain them.
- You can share hundreds of passwords with hundreds of users.
- Changes automatically propagate to all assigned users.
If you have a LastPass Teams, Enterprise, or Identity account, the ability to perform these actions may be limited or prohibited due to policies enabled by your LastPass admin.
Limitations of shared folders
- Each shared folder has an unlimited capacity of items that can be added (with the exception of using LastPass via Internet Explorer and/or the LastPass for Applications desktop app, which are hard-set at 5,000 items max). However, users can expect to see performance degradation when 2,500 items or more are added for all other web browsers and applications.
- Sites can be copied to multiple folders but must be updated manually in every folder. For this reason, it is recommended to use the "restrict" option in order to limit access for a specific sub-set of users, rather than copying the Site entry into multiple folders.
- User groups are not supported with LastPass Teams, and therefore they cannot be used to assign shared folders or policies.
- Site entries cannot be directly imported into shared folders.
- Form Fill profiles cannot be shared.
- Individually shared Sites cannot be added to a shared folder; a copy will have to be made.
- If a user is added more than once to a shared folder with different permissions, the most restrictive settings take priority.
- A sub-folder cannot have separate permissions from its parent shared folder.
- Users MUST generate sharing keys before being added to shared folders. This is done automatically by logging into the LastPass web browser extension at least once after creating an account. In Safari, if the web browser extension has not been installed yet, Sharing Keys can be created using the "Generate Sharing Keys” option in the online Vault.
- When you share an item within a shared folder, regardless of whether you enable the "Allow Recipient to View Password" option, you should be aware that savvy end users could potentially access the password if they capture it using advanced techniques, but LastPass will never be able to access this data because it has been encrypted using their public key. It is also possible to obtain shared passwords using another password manager. For these reasons, LastPass recommends that you generate a secure password specific to the Site that you’re sharing in order to avoid sharing any passwords that you’re uncomfortable with the recipient obtaining.