Terminate Users from LastPass Teams
There are several termination options available for LastPass admins to use, each with varying degrees of severity. Please consider your options carefully prior to deleting or removing users. These actions can only be performed manually via the Admin Console.
Whether a user account is deleted, disabled, or removed from the LastPass Teams account, this will not impact any remaining users or their previously associated shared folders. However, if the departed user was the admin of a shared folder, that folder will be left without an admin. For this reason, it is recommended that you enable the Super Admin – Shared Folders policy for at least one admin.
As a best practice and an added precaution, we suggest that any shared credentials be changed upon the departure of an employee, regardless of how you choose to manage their exit from LastPass. These changes to any shared folder will automatically sync to all assigned users, and this will give you an added layer of security.
Note: All LastPass Teams seats are transferable once an account is disabled, removed, or deleted.
- Log in and access the Admin Console at https://lastpass.com/company/#!/dashboard.
- Select Users in the left navigation.
- Click to select your desired user.
- Click the More icon in the upper-right corner.
- Choose from the following options, each outlined in detail below:
Disabling a user in your LastPass Teams account puts a lock on the account. No one – not even your LastPass administrator – can log in to the account regardless of passwords or previous access. Once disabled, the seat will be available for reassignment.
Removing a user from your LastPass Teams account will disassociate that user’s account from your company account. With this action, you are prompted to select one of the following options:
- Forbid access to shared sites and folders – Selecting this option will delete all items within the account that have been shared with the user from other users in the company (from within shared folders and single shared items).
- Allow access to shared sites and folders – Selecting this option will allow all items that were shared with the user from other users in the company to remain available to the user (from within shared folders and single shared items).
Once you click Remove User, the seat is available for reassignment, and the removed user's account will be downgraded to a LastPass Free account. However, if the removed user previously purchased LastPass Premium before joining Teams, they will be downgraded to LastPass Premium to continue using any remaining time left (if applicable).
Deleting an account fully deletes all information within the user's LastPass account. Any data stored within the account will be deleted, an action which cannot be undone. For this reason, it is strongly recommended that a user exports their LastPass account data prior to being deleted so that their LastPass Vault data can be restored later if desired. Once deleted, the seat will be available for reassignment.
- Ensuring that Sites/tools are no longer accessible by the employee: If the account owner created any passwords in their Vault, or if any credentials were shared visibly with them, then it is quite possible that they have stored this information elsewhere and could access these tools again in the future (outside of LastPass). In order to avoid any doubt, we strongly recommend updating all passwords when an employee account is terminated.
- Once an employee is terminated (disabled, deleted or removed), any data that the account owner has placed in a Shared Folder will remain fully intact for remaining users.
- In the case of Shared Folders, while you are never at risk of deleting the shared credentials, you are at risk of finding yourself with no remaining Admin on the folder (if the former account owner was the sole folder Admin). If this is a concern, you should consider enabling the "Super Admin – Shared Folders" policy.
- Please note that NONE of these actions will affect a Linked Personal Account, which is why we highly recommend that users store personal data within their Linked Personal Account rather than storing this type of data in a Teams account.