LastPass End User Toolkit

LastPass is a secure password manager that remembers all of your passwords, so you don’t have to. All you need to do is remember one Master Password, and you can let LastPass do the rest.

What is LastPass?

LastPass is a unique password management solution that operates on a zero-knowledge security model – this means that your Master Password is the key to your account, and you are the only one with that key. We use 256-bit AES encryption to protect the contents of your LastPass Vault. Since your Vault is already encrypted before it reaches the LastPass server, your Vault contents cannot be accessed, even by a LastPass representative. Additionally, encryption and decryption of your data is performed locally on your device. With LastPass, you can safely and securely access your data from any web browser or device.

Note: The ability to perform the actions listed below may be limited or prohibited due to policies enforced by your LastPass admin.

Why should I use LastPass?

LastPass will help you in your day-to-day work while improving the overall security of your company.

Key benefits of using LastPass include:

  • Convenience – No more forgotten or mistyped passwords
  • Time saved – Instantly log in to websites
  • Stronger security – Long passwords that you don't have to remember

Are my passwords secure?

Yes. LastPass employs local-only encryption, which means that only you (with your Master Password) can decrypt and access your data. We’ve implemented 256-bit AES encryption with PBKDF2 SHA-256 and per-user salted hashes to ensure complete security in the cloud.

Getting Started Resources

Managing LastPass Account Settings

The Account Settings within your Vault allows you to view and edit your global settings and preferences, including the following:

  • General login settings
  • Advanced security settings
  • Multifactor Authentication options
  • Trusted devices
  • Mobile devices
You can also control how LastPass interacts with websites using Never URLs, equivalent domains, and managing URL rules. Learn how to manage Account Settings.

Setting up all account recovery options

Once you have created your LastPass account, it is strongly recommended that you set up and configure all account recovery options so that you can regain access to your LastPass Vault if your Master Password is ever forgotten. If recovery options are not set up and you are unable to recover your Master Password, you will need to create a brand new LastPass account and re-enter all of your Vault data. Learn how to set up account recovery.

Please be aware that LastPass Support has no knowledge of a user's Master Password. It is not possible for LastPass Support to reset or change a user's Master Password if it is forgotten.

Managing automatic logout

As a security best practice, you can manage settings within your LastPass web browser extension preferences to keep you logged in, or automatically log you out of your LastPass account when it is no longer in use and/or idle. Learn how to manage automatic logout.

Protecting your data with your Master Password

The Master Password is the password that you are prompted to create when you initially sign up for your LastPass account.

You have the option of configuring LastPass to require your Master Password to do any or all of the following:

  • Access an Identity
  • Access a site's password
  • Access a site
  • Access a secure note
  • Access a form fill item
  • Log on to a site

As a security best practice, we recommend enabling this feature whenever accessing sensitive data. Learn how to protect your Vault.

Navigating your LastPass Vault

The LastPass Vault is where all of your passwords, secure notes, and items are stored, and is easily accessible in the left navigation. Your Vault is a locally-hosted file, so you can access your stored data securely and quickly. You can organize your Vault view by folders, move or manage items in bulk, and manage your user account. Learn how to manage your Vault.

Adding and managing Vault items

You can add new items to your Vault that can be used to easily fill online web forms, including addresses, payment cards, bank accounts, health insurance policies, and much more. Learn how to manage items.

Adding new site passwords

You can add a new username and password while logging in to a website, saving manually, or adding directly within your Vault. You can store an unlimited number of password entries in your LastPass Vault. Learn how to add new site passwords.

Managing site passwords

One of the great time-saving benefits of LastPass is that it remembers your passwords. When you visit a site to log in, LastPass fills the credentials for you – no typing required! You can add, edit, delete, and share the passwords stored in your Vault. Learn how to manage your site passwords.

Changing site passwords

To keep up with best security practices, it is recommended that you update your stored passwords regularly to minimize security compromises. First, change your password directly on your desired website within the website's settings, then update within LastPass. Learn how to change site passwords.

Generating secure passwords

The most secure passwords are randomly generated, and LastPass can be used to both store and generate them. It is recommended to use generated passwords as much as possible as a security best practice. Learn how to generate secure passwords.

Managing folders within your Vault

To organize your Vault so you can easily find what you're looking for, you can create folders and/or sub-folders, then move your items into them to be stored. You can also delete and/or purge a folder containing items. Learn how to manage folders.

Changing the order of multiple logins

If you have multiple logins for a particular site, you may want to control the order in which the site credentials are populated for you via LastPass. You can manage these settings within your LastPass Vault by updating the site password name for each site password entry to begin in order using either 1, 2, 3 or A, B, C as your preferred ordering method. Learn how to order your logins.

Linking or unlinking your personal account

We understand that you like to keep your personal and work life separate – so do we! When you link your personal LastPass account with your LastPass Business account, you can keep your Vault entries all in one place while both accounts remain separate. Your personal account will continue to remain private (as your LastPass admin is never able to view your personal account data), and if you ever leave the company, your personal account data remains active and accessible to you. Additionally, login events for your personal account will never be logged in admin reporting. Learn how to get started.

Learning about shared folders

A shared folder is a special folder in your Vault that you can use to securely and easily share site entries and secure notes with other LastPass users. Changes to the shared folder are synchronized automatically to everyone with whom the folder has been shared. Learn all about shared folders.

Managing shared folders

A shared folder is a special folder in your Vault that you can use to securely and easily share sites and secure notes with other LastPass users and groups. Learn more about the limitations and management options available for shared folders.

Managing secure notes

You can add, manage, and share non-password information in your Vault to make LastPass the ultimate sticky note repository – these items are saved as secure notes. Learn how to manage secure notes.

Managing form fill items

You can add new items to your Vault that can be used to easily fill online web forms, including addresses, payment cards, bank accounts, health insurance policies, and much more. You can also manage item settings, add attachments, share items, and view item history. You can also prevent LastPass from displaying in-field icons for certain form fields. Please note that the items listed in the left navigation will vary depending on which items you added first. Learn how to manage form fills.

Logging on to sites using LastPass

You can use the in-field icons to easily log on to sites or fill forms automatically. Learn how to log on to sites using LastPass.

Fixing at-risk passwords in your Vault

It can be overwhelming when you're trying to improve your online security. LastPass can help by evaluating everything you've stored in your Vault and check for weak, reused, or missing passwords. Learn how to fix at-risk passwords in your Vault.

Compliance, Risks, and Security Resources