LastPass is a powerful password management tool that can significantly enhance your organization's data security and minimize cyber risks. As a LastPass admin, you can access <a href="https://support.lastpass.com/s/document-item?language=en_US&amp;bundleId=lastpass&amp;topicId=LastPass/Add_and_Manage_Enterprise_Policies.html&amp;_LANG=enus" target="_blank" rel="noopener">over 100 policies from the Admin Dashboard</a> that allow you to customize password security standards, modify feature usage, and establish employee login requirements. This article will explore three essential LastPass admin policies you should enable today: password sharing, linking personal accounts, and enabling multi-factor authentication (MFA). These policies will help to secure your organization, increase the adoption of LastPass, and encourage compliance with password security policies.
<ol>
 	<li aria-level="2">
<h3>Prohibit Sharing Except for Shared Folders</h3>
</li>
</ol>
LastPass offers password sharing to <a href="https://blog.lastpass.com/2022/02/how-to-safely-share-business-passwords/" target="_blank" rel="noopener">help employees securely and conveniently share logins with others</a> inside and outside the organization. By default, individuals can share items one-on-one, or teams can easily collaborate and access shared accounts by setting up shared folders. However, any credentials shared one-on-one are not visible to admins. 

Enabling the "Prohibit Sharing Except for Shared Folders" policy <a href="https://support.lastpass.com/s/document-item?language=en_US&amp;bundleId=lastpass&amp;topicId=LastPass%2Fmanage-shared-folders-admin.html&amp;_LANG=enus" target="_blank" rel="noopener">restricts password sharing to designated shared folders only</a> and does not allow employees to share individual accounts. As a result, this LastPass policy lets admins keep track of all shared access and ensure transparency. Of course, employees can still create shared folders, add relevant sites, and share them with their teams. However, admins will be able to see when such sharing occurs, enhancing overall security and accountability.
<ol start="2">
 	<li aria-level="2">
<h3>Recommend or Require Linked Personal Account</h3>
</li>
</ol>
LastPass is beneficial at home and in the workplace, offering secure storage and management of credentials in both places. However, to ensure the security and privacy of both data sets, an employee should be encouraged to create two LastPass accounts - a personal and a work account. Then, LastPass <a href="https://support.lastpass.com/s/document-item?language=en_US&amp;bundleId=lastpass&amp;topicId=LastPass%2Flink-unlink-personal-account-about.html&amp;_LANG=enus" target="_blank" rel="noopener">allows users to "link" their personal and business LastPass accounts</a>, providing a unified view of all login credentials in a single vault. Admins don't have visibility into the personal LastPass vault, while users can access credentials from both vaults as they work.

By recommending or requiring linking accounts via the LastPass Admin policies, you nudge employees to leverage LastPass to better secure their own logins, such as email, social media, and online shopping. Promoting the use of linked accounts also helps employees understand the value of LastPass, promoting the adoption and usage of LastPass as employees get comfortable with password management features and more quickly develop better security habits. Good security at home, in turn, translates to better protection in the workplace. Linking personal accounts also facilitates a smooth transition when employees leave the organization, as admins can instantly revoke access to work accounts so employees walk away with only their personal passwords.
<ol start="3">
 	<li aria-level="2">
<h3>Require Multi-Factor Authentication</h3>
</li>
</ol>
In today's threat landscape, enforcing an additional layer of security beyond traditional username and password authentication is crucial. Requiring employees to use multi-factor authentication (MFA) significantly enhances the protection of sensitive data. By using additional information to verify a user's identity, organizations can eliminate many common cyber threats and reduce the threat of data breaches.

LastPass integrates with various MFA services, such as smartphone apps, software-based services, and hardware tokens. By <a href="https://support.lastpass.com/s/document-item?language=en_US&amp;bundleId=lastpass&amp;topicId=LastPass%2FEnable_Multifactor_Authentication_Admins.html&amp;_LANG=enus" target="_blank" rel="noopener">enabling the LastPass admin policy to "Require Multi-Factor Authentication</a>," you ensure that employees validate their identity using additional information during login to LastPass. Implementing MFA across all applicable platforms, including LastPass, single sign-on, and user directories, is advisable to mitigate the risk of unauthorized access.
<h3 aria-level="2">Policies give you power</h3>
As a LastPass admin, you have the power to customize and enforce numerous policies to strengthen your organization's security posture. By enabling three key LastPass admin policies today—password sharing restrictions, linking personal accounts, and requiring multi-factor authentication—you can significantly enhance your company's data security while providing a user-friendly experience for your employees. Transparent password sharing, improved password hygiene at home, and additional verification requirements all contribute to a more robust defense against cyber threats. Take advantage of LastPass's extensive policy options and empower your organization with more robust security measures today. 

New to password management in the workplace? Learn how <a href="http://lastpass.com/" target="_blank" rel="noopener">LastPass</a> can help you meet your security goals.

Three LastPass Admin Policies to Enable Today 

LastPass is a powerful password management tool that can significantly enhance your organization's data security and minimize cyber risks. As a LastPass admin, you can acces[..]

With the launch of the <a href="https://blog.lastpass.com/2020/10/introducing-new-lastpass-admin-console/" target="_blank" rel="noopener">new Admin console</a> in 2020, we’ve continued to prioritize enhancements to migrate <a href="https://blog.lastpass.com/2021/03/introducing-the-new-admin-console-adoption-dashboard/" target="_blank" rel="noopener">priority features and functionalities</a> to ensure a streamlined, highly effective Admin experience. 

Over the next several months, we’ll be implementing the new Admin Console as the default console for new and existing customers. This is the only Admin console that will be improved in the future. The old Admin console is still available, but we highly encourage you to <a href="https://blog.lastpass.com/2021/03/exploring-new-features-in-the-lastpass-admin-console/" target="_blank" rel="noopener">explore the new Admin console</a> further.  

In addition to defaulting into the new Admin console, you will see improvements to the Federated Login page and Custom Admin capability. 
<h3>Coming Soon</h3>
Improvements to Federated Login 

Federated login integrates an identity provider (IDP) into a password manager, ultimately removing the need for the master password. 

Business customers can integrate their IDP with LastPass to create one entry point, simplifying access by automating and easily scaling password management, all while saving time for IT and keeping data secure. 

The Federation Configuration page will be migrated to the new Admin console, whereas in the past, it only resided within the legacy Admin console. Admins will be able to configure Federation integrations in the new Admin console. 

In addition, on the Users page in the new Admin console, new “Federated” statuses have been added. You will be able to have a more holistic view of your users and all statuses that apply to them in one location in the new Admin console.  

This reduces the need to switch back and forth between consoles and pages to configure federation and view your Users full statuses. 

Lastly, you will be able to grant limited Admin access through the creation of new admin levels. You will also be able to edit or delete the roles and levels within the Admin console. 

The new Admin Console was built for you to offer the simplicity and security your business needs -- and to adapt as those needs shift and change. Be sure to be on the lookout for new features and functionalities coming to the new Admin Console!

To keep learning about the new Admin Console, check out our Support FAQs <a href="https://support.logmeininc.com/lastpass/help/new-lastpass-admin-console-faqs" target="_blank" rel="noopener">here</a>.

Your New Default Admin Console and Continuous Improvements to Federated Login

With the launch of the <a href="https://blog.lastpass.com/2020/10/introducing-new-lastpass-admin-console/" target="_blank" rel="noopener">n[..]

As an MSP providing IT and cybersecurity services to other businesses, your clients expect you to follow cybersecurity best practices. Your mission is to safeguard the networks, data, and resources of other companies. To be successful, your team must plan, stay organized, and implement a layered approach to cybersecurity so that you can provide safe, reliable services to your clients. Doing so will minimize threats to your own MSP business and ultimately will better protect your clients. 

A robust cybersecurity strategy starts with <a href="https://blog.lastpass.com/2021/04/why-your-msp-needs-a-password-manager/" target="_blank" rel="noopener">credential security</a> and straightforward best practices. When followed, they will minimize the risk of a potential data breach and reduce the impact of any successful cyberattacks. In addition, your MSP gains oversight of user access, provides users with secure and easy entry to all relevant access points, and simplifies IT management.

Wondering where to get started? Here are six credential security best practices every MSP should be following:
<h3>Manage user access with adjustable permissions</h3>
MSPs often service many clients simultaneously - sometimes hundreds or even thousands. IT personnel need access to networks, databases, apps, cloud services, servers, remote desktops, and more - for every single client. The total number of access points managed by an MSP quickly adds up. 

Every one of those access points needs to be controlled, meaning that the MSP needs a way to know who is using them and then take reasonable steps to secure each access point. Managing user access means ensuring the right people have the right level of access to the right things at the right time. Access permissions should be based on role or assigned projects and should be adjustable at a moment's notice. IT should change user access anytime someone joins or leaves the team, changes role, or changes projects. 

Software that manages user access helps MSPs see every user in the system (both IT personnel and clients) and all access points in use. They can automate day-to-day management of user access, adjust permissions and policies globally or per user, and assign or revoke access instantly. 
<h3>Add behind-the-scenes complexity to authentication</h3>
A layered approach to user access works best. Don't just rely on simple usernames and passwords. Every access point used - both within your MSP to conduct business and by your clients themselves - is a potential entryway for hackers to exploit. 

<a href="https://www.lastpass.com/products/multifactor-authentication" target="_blank" rel="noopener">Multifactor authentication</a> (MFA) uses multiple data points to prove that users are the person they claim to be. In addition to standard credentials or even a single sign-on token, MFA may require users to supply biometrics (like a fingerprint), a code sent to a smartphone, login from a trusted device, or even contextual information gathered behind-the-scenes like a trusted IP address. MFA drastically reduces the risk of a threat actor gaining access to your MSP or a client by requiring additional information that they don't have.
<h3>Invest in cybersecurity training</h3>
Regularly review cybersecurity best practices with employees and test their knowledge. Familiarize them with common cybersecurity terminology and fundamentals like not reusing or sharing passwords. Simulate phishing, malware attacks, social engineering, and other threats whenever possible. 

By teaching employees to recognize these threats, they're far less likely to fall victim to an attack, and they'll more readily report suspicious activity. Everyone - not just IT personnel - needs to be trained in cybersecurity best practices, from HR to executives to the summer intern. Hackers will usually look for the easiest target, so every employee needs to be vigilant.
<h3>Create a patch management strategy</h3>
Software and hardware vendors regularly release updates to their apps and operating systems. These updates usually include security and bug fixes or "patches." Those updates prevent hackers from exploiting vulnerabilities to steal data or gain a foothold in a company. 

Staying on top of these updates is crucial. If you or your clients are running outdated apps or operating systems with known vulnerabilities, you've become a much easier target. That said, you'll likely need to have a testing environment to ensure any updates won't cause issues for internal IT personnel or clients.

Create a process to check for and run updates on a regular schedule. You'll need to start by inventorying all devices in use - both for you and for clients. Some tools may require manual updates, but often patch management can be centralized and automated with patch management software.
<h3>Update and enforce your password policy</h3>
Does your organization have a password policy? A password policy typically states how employees should create and handle passwords and requires semi-regular password rotation. When was the last time you reviewed your MSP's password policy? And do you enforce the policy, or is it an empty demand? 

Your password policy should reflect your MSP's commitment to credential security. Require that every password in use is unique and strong (16+ mixed characters). Users should only share passwords in an encrypted, secure format - not over email, SMS, chat, or any other insecure channel. Rotate passwords once a year or when a security incident requires it; using MFA reduces the need to burden users with frequent password rotation.

Once IT agrees on the updated password policies, document them in employee handbooks and resources. Communicate policy updates clearly and train users occasionally on best practices. To enforce compliance with password policies, consider a password manager. IT can set policies and requirements via the password manager, which then builds in the correct password behaviors as users create, store, and use their login credentials.
<h3>Manage passwords with secure, encrypted storage</h3>
Given the volume and importance of the passwords managed by MSPs, a <a href="https://www.lastpass.com/password-manager" target="_blank" rel="noopener">password manager</a> is highly recommended. A password manager is not only a secure repository for users to store and encrypt credentials. It's also a platform for centralizing oversight of all credentials in use by all users and enforcing good password hygiene for all accounts. The password manager saves, recalls, and fills passwords for the user, removing much of the tedium and mistakes inherent in password use. In short, a password manager is a crucial tool for MSPs.

With a password manager, especially one <a href="https://blog.lastpass.com/2020/07/lastpass-launches-managed-service-provider-msp-solution/" target="_blank" rel="noopener">tailored to the unique needs of an MSP</a>, you can ensure the correct client passwords are accessible to the right IT personnel. Down to the user level, you can see who has access to which passwords and whether those passwords meet company password policies. A password manager also creates a foundation to build and expand upon the above-mentioned best practices.

Following credential security best practices will better protect your MSP's infrastructure from cyber threats. You'll also better safeguard clients from cyber attacks and minimize common password pitfalls. 

LastPass provides MSPs a tailored solution to create and execute a credential security strategy that works for IT personnel and clients alike. <a href="https://www.lastpass.com/channel-partners" target="_blank" rel="noopener">Learn more</a> about the benefits of using LastPass as an MSP.

Credential Security for Your MSP: Six Best Practices 

As an MSP providing IT and cybersecurity services to other businesses, your clients expect you to follow cybersecurity best practices. Your mission is to safeguard the netwo[..]

With a bevy of business password managers on the market, picking the right one may seem like a tough task. With an <a href="https://blog.lastpass.com/2021/04/drive-business-success-and-security-with-an-anywhere-work-strategy/" target="_blank" rel="noopener">increase of cybersecurity threats</a> shepherded by the pandemic, you’ll need a password management solution that is built with security and encryption best practices and can handle an ever-evolving threat landscape. 

The goal of a password manager is to reduce the risk of a data breach and safeguard your business. You want to ensure that any solution you adopt is itself properly secured, and that it gives you the right tools to actually enforce better policies in your organization.  

With <a href="https://www.lastpass.com/enterprise/security" target="_blank" rel="noopener">proactive security and reliability</a> as cornerstones of our mission, we’ve designed LastPass to protect what you store at every step, so you can trust it with your sensitive data. 

For more than 70,000 businesses, LastPass reduces friction for employees while increasing control and visibility with a password management solution that is easy to manage and effortless to use.

“Password security is a question that always comes up, so with LastPass, that’s a big tick in that box and we move on. Essentially, it is our product of choice for password management, and I can’t see another solution out there that comes close," relates Jason Muir, IT Operations Manager at MOQdigital. 

Let’s explore how LastPass is built to keep your business safe. 
<h3>How do we keep our customers' data secure?</h3>
Securing an account begins the moment it’s created. LastPass operates on a zero-knowledge security model that ensures customer data remains protected. 

When a LastPass user creates their master password, it’s used to generate a unique encryption key. The master password and the encryption key stay local on the user’s device – they are never sent to or shared with LastPass. Without the encryption key, your encrypted vault data is meaningless.

We also employ the following best practices, to ensure that customer data remains secure: 
<ul>
 	<li data-leveltext="" data-font="Symbol" data-listid="3" data-aria-posinset="1" data-aria-level="1">End-point encryption: Encryption happens exclusively at the device level before syncing to LastPass for safe storage, so only users can decrypt their data. </li>
 	<li data-leveltext="" data-font="Symbol" data-listid="3" data-aria-posinset="2" data-aria-level="1">256-bit AES encryption: This algorithm is widely accepted as impenetrable – it’s the same encryption type utilized by banks and the military. </li>
 	<li data-leveltext="" data-font="Symbol" data-listid="3" data-aria-posinset="3" data-aria-level="1">TLS for secure data transfer: Even though sensitive data is already encrypted with AES-256, the TLS protocol secures the connection to LastPass to further protect a user’s data. </li>
</ul>
<ul>
 	<li data-leveltext="" data-font="Symbol" data-listid="3" data-aria-posinset="1" data-aria-level="1">100,100 rounds of PBKDF2-SHA256 hashing for brute-force attacks: We strengthen the master password and encryption key against large-scale, brute-force attacks by slowing down guesses. </li>
 	<li data-leveltext="" data-font="Symbol" data-listid="3" data-aria-posinset="2" data-aria-level="1">Private master password: We do not send or store the master password at all to ensure that access to sensitive vault data remains secure. </li>
 	<li data-leveltext="" data-font="Symbol" data-listid="3" data-aria-posinset="3" data-aria-level="1">Zero-knowledge model: LastPass Federated Login Services is designed to ensure that the user’s identity provider credentials are not exposed to LastPass and all data stored encrypted on LastPass’ servers. </li>
</ul>
<img class="alignnone wp-image-155170 aligncenter" src="https://cdn.lputil.com/wp-content/uploads/sites/20/2021/04/Screen-Shot-2021-04-26-at-5.08.21-PM-300x296.jpeg" alt="" width="405" height="400" />
<h3>How do we keep our infrastructure protected?</h3>
LastPass also utilizes best practices to protect our infrastructure, including regularly upgrading our systems, as well as utilizing redundant data centers to reduce the risk of downtime or a single-point-of-failure. 

We employ the following to ensure that our customers can trust our security infrastructure:
<ul>
 	<li data-leveltext="" data-font="Symbol" data-listid="3" data-aria-posinset="4" data-aria-level="1">Regular audits and pen tests: We engage with trusted, world-class, third-party security firms to conduct routine audits and testing of the LastPass service and infrastructure. </li>
 	<li data-leveltext="" data-font="Symbol" data-listid="3" data-aria-posinset="5" data-aria-level="1">Bug bounty program: Our bug bounty program incentivizes responsible disclosure and improvements to our service from top security researchers. </li>
</ul>
<ul>
 	<li data-leveltext="" data-font="Symbol" data-listid="3" data-aria-posinset="1" data-aria-level="1">Transparent incident response: Our team reacts swiftly to reports of bugs or vulnerabilities and communicates transparently with our community. </li>
</ul>
<h3>The importance of multi-factor authentication</h3>
LastPass also offers users multi-factor authentication (MFA) on top of account logins and the LastPass vault to provide an extra layer of protection against cyber-criminal attacks. With MFA, users can add extra security by requiring a second or third login step before authorizing a user. 

Multi-factor authentication requires two or more authentication factors, including something the user knows (master password), in addition to something they have (a code, a key) and/or something they are (a fingerprint). By requiring not only the master password, but also an additional login factor, a user adds another layer of protection against unauthorized access. 
<h3>The “gold standard” for security and privacy</h3>
LastPass has acquired the Service Organization Control 2 (SOC 2) Type 2 compliance, which is a detailed review of our controls and processes. As the “gold standard” for software companies that is widely recognized nationwide across industries, completing and maintaining SOC 2 compliance is just one more way we demonstrate our commitment to security and privacy. 

With LastPass, businesses can take control of password management, benefitting from a proven security model, secure product architecture and powerful security features. <a href="https://www.lastpass.com/enterprise/security" target="_blank" rel="noopener">Learn more</a> about how LastPass can help safeguard your data. 

For more information, be sure to check out these additional resources:
<ul>
 	<li data-leveltext="" data-font="Symbol" data-listid="4" data-aria-posinset="1" data-aria-level="1"><a href="https://assets.cdngetgo.com/93/82/de5a3ed74c4b95d992a36b8e5d28/lastpass-security-overview.pdf" target="_blank" rel="noopener">LastPass Security Summary</a></li>
 	<li data-leveltext="" data-font="Symbol" data-listid="4" data-aria-posinset="2" data-aria-level="1"><a href="https://assets.cdngetgo.com/10/6a/9c45fb854b7d9d6ffc17ffb7b8ae/lastpass-technical-whitepaper-march-2021-final.pdf" target="_blank" rel="noopener">LastPass Technical Whitepaper</a></li>
</ul>

How LastPass Keeps Your Business Safe

With a bevy of business password managers on the market, picking the right one may seem like <span[..]

Today marks the inaugural <a href="https://www.idsalliance.org/identity-management-day-overview/" target="_blank" rel="noopener">Identity Management Day</a>, a new annual awareness event on the second Tuesday of every April. Founded by the <a href="https://www.idsalliance.org/" target="_blank" rel="noopener">Identity Defined Security Alliance (IDSA)</a>, Identity Management Day aims to educate IT decision-makers “about the dangers of casually or improperly managing and securing digital identities.”

But what is identity? And why should businesses care about identity management, especially if resources and budgets are stretched thin? How can IT decision-makers implement or improve upon identity management systems to address IT and employees’ needs in an increasingly remote work environment.
<h3>What exactly is identity?</h3>
The term "identity" has many uses, but Identity Management Day focuses on the context of managing employee identities at work. In that environment, identity connects a person to their work and the resources they use.

In the workplace, your "identity" is the data used to verify you. An identity may include pieces of information you know (an email address or password) or devices you have access to (your phone). It may consist of your own physical or behavioral characteristics (a fingerprint) and even background information that is supplied behind the scenes but is otherwise “invisible” to you (your IP address or typing patterns). Those data points can build a profile to keep track of your activity and give you access to physical and digital resources.

In summary, <a href="https://blog.lastpass.com/2020/01/an-introduction-to-identity-with-lastpass/" target="_blank" rel="noopener">an identity proves that you are who you claim to be</a>. Anytime you need to log in to the corporate network or swipe into the office or open your work email, various data points prove you are the right person and that you should have permission to continue.
<h3>Identity is paramount to business security</h3>
Over the years, businesses have expanded the definition of “workplace” to include working from home, working on the road, co-working, and other remote work scenarios. The COVID-19 pandemic further accelerated digital transformation for many businesses, particularly in industries that to-date were slow to embrace virtual work.

Identity is essential to efficient work and maximum security, no matter where employees happen to be working. Centralized identity management affords IT teams greater control and removes common obstacles for employees like tedious login prompts and demanding security requirements. In today’s work-from-anywhere world, it’s even more critical that IT <a href="https://blog.lastpass.com/2020/03/identity-management-enabling-secure-scalable-business-growth/" target="_blank" rel="noopener">makes identity management a top priority</a>.

Proper identity management also helps prevent bad actors from gaining physical or digital access. The ISDA reports that “79% of organizations have experienced an identity-related security breach in the last two years, and 99% believe their identity-related breaches were preventable.” Employees with too much access - like admin privileges that are inappropriate for their role - can unintentionally cause data breaches, too.

In short, poorly managed identities can be a security liability and resource drain. Using an identity solution to centrally manage user access can improve the employee experience, boost efficiency, and better safeguard the business from cyber threats.
<h3>Managing identity in a work-from-anywhere world</h3>
Creating and managing workplace identities requires an identity solution. Implementing an identity solution should be cost-effective and scalable. Not only should a solution meet IT’s requirements for security and administrative oversight, but it should also meet employee requirements for usability.

For businesses with smaller IT teams, limited resources, or less room in the budget for a full suite of cybersecurity tools, an identity solution can be an intelligent investment to create a strong security foundation. With <a href="https://blog.lastpass.com/2020/02/identity-management-from-3-perspectives/" target="_blank" rel="noopener">a holistic identity solution</a>, IT can adequately safeguard privileged accounts, create a security culture across the organization, make strong passwords the norm, connect employees with behind-the-scenes authentication protocols, and add extra protection to work resources with multifactor authentication.

Identity Management Day provides an opportunity to evaluate how your company is currently managing identities and any ongoing identity-related challenges facing the organization, especially within the remote work landscape. Expanding your current identity program to ensure all access points are properly secured or investing in a new identity solution like <a href="https://www.lastpass.com/products/identity" target="_blank" rel="noopener">LastPass</a> can significantly improve work efficiency while reducing cyber threats.

Identity Management Day Reminds Us of the Importance of Identity in a Work-From-Anywhere World

Today marks the inaugural <a href="https://www.idsalliance.org/identity-management-day-overview/" target="_blank" rel="noopener">Identity Management Day</a>, a new annual awareness event on the second[..]

In Fall 2020, <a href="https://blog.lastpass.com/2020/10/introducing-new-lastpass-admin-console/" target="_blank" rel="noopener">LastPass launched a new Admin Console</a> to streamline and improve your Admin experience, giving you greater control while increasing your visibility into user adoption. We <a href="https://blog.lastpass.com/2021/03/exploring-new-features-in-the-lastpass-admin-console/" target="_blank" rel="noopener">continued to develop the new Admin Console</a> by releasing feature functionalities to further aid Admins in account management to drive end user adoption across your organization.

Based on feedback from customers like you, we have expanded upon this initiative by creating a new Admin Console adoption dashboard.

Your new adoption dashboard is just that – yours. It was created by you and for you. So, let’s explore this new Dashboard to better understand its features and the benefits it brings to you, the Admin, and your business.
<h3>What does the new adoption dashboard do?</h3>
It’s all in the name: This new Dashboard centers around end-user enrollment and adoption. Data visualization tools allows you to view relevant, summarized data to quickly understand how your business is using LastPass, and take easy, actionable steps for improvement.  It visually displays graphs and data points of LastPass adoption by user status, enrollment rate, utilization rate and security score, and provides one-click calls to action to communicate simply with users.

The new adoption dashboard allows you to simply view your organizations enrollment and adoption status at a high level – and down to the user – and track progress over time, while using step-by-step calls-to- action to guide you toward greater adoption, all while securing your business.

<img class="alignnone wp-image-154903 aligncenter" src="https://cdn.lputil.com/wp-content/uploads/sites/20/2021/03/EN-Dashboard-704x338-1-300x144.png" alt="" width="550" height="264" />
<h3>How is the new adoption dashboard different than the legacy dashboard?</h3>
The legacy dashboard provided high level data for viewing purposes, but was not as detailed, easy to use or actionable. Here’s what sets the new adoption dashboard apart:

Get a quick view, with even faster actions: With our simple design, you can quickly see where you have pressing issues or gaps – like unresponsive or inactive users – while our call-to-action buttons help you take steps toward resolving them.

<img class=" wp-image-154917 aligncenter" src="https://cdn.lputil.com/wp-content/uploads/sites/20/2021/03/EN-Action-Panel-704x338-1-300x144.png" alt="" width="508" height="244" />

Build for your business: The new adoption dashboard shows you relevant data specific to your organization, which you can customize by date range to track progress. Each call-to-action is specific to your adoption status, and you can customize the conversation by sending a reminder through LastPass or exporting your users and their respective emails.

<img class="alignnone wp-image-154924 aligncenter" src="https://cdn.lputil.com/wp-content/uploads/sites/20/2021/03/EN-Export-List-Full-189x300.png" alt="" width="360" height="571" />

This feature was of particular interest among our LastPass Admins, as it gives you greater visibility and provides an easy and actionable communication prompt while also allowing you to export and customize your own outreach.

Share advanced reporting with stakeholders: The clean, simple snapshot graphs are great for providing insight to management and stakeholders, so you can track progress, show improvement and report on steps taken to drive end user adoption.

<img class="alignnone wp-image-154931 aligncenter" src="https://cdn.lputil.com/wp-content/uploads/sites/20/2021/03/EN-Reporting-Panel-704x338-1-300x144.png" alt="" width="544" height="261" />
<h3>Explore the new adoption dashboard</h3>
Achieve greater enrollment and eliminate lengthy adoption challenges with the new action-oriented adoption dashboard. To keep learning more about the new adoption dashboard, click <a href="https://support.logmeininc.com/lastpass/help/whats-new-in-the-new-admin-console-dashboard" target="_blank" rel="noopener">here</a>. For even more information on the ins and outs of the new adoption dashboard, be sure <a href="https://lp.logmeininc.com/LP_Webinar_UAC-Dashboard_LP.html?source=blog" target="_blank" rel="noopener">to register and attend our webinar</a>.

Introducing the New Admin Console Adoption Dashboard

In Fall 2020, <a href="https://blog.lastpass.com/2020/10/introducing-new-lastpass-admin-console/" target="_blank" rel="noopener">LastPass launched a new Admin Console</a> to streamline and improve you[..]

When choosing how to deploy LastPass, IT teams must balance their own needs with employees’ expectations. On the one hand, IT will want to automate as much of the process as possible. Integration with existing systems and directories is often crucial, too. End users, conversely, want minimal disruption to their workday. This means avoiding downtime and making setup as straightforward as possible. 

That’s why the Managed Browser Policy can be ideal for deploying LastPass. We chatted with Blake Lewis, an Enterprise Customer Success Manager for LastPass at LogMeIn, to learn more about the policy and why you should consider enabling it for your LastPass deployment. 

As a CSM, Lewis is a go-to expert for clients looking to “deploy, maintain, and maximize the value of LastPass.” He thinks through use cases and figures out how clients can best utilize LastPass in their environments. Clients often ask him how to connect LastPass to their user directory, set up federated login, enable master password recovery features or train employees on best practices. 

When it comes to deploying LastPass, Lewis reviews all the options available to clients and helps them choose the best one. The Managed Browser Policy, he said, is one he frequently recommends.
<h3>What is the Managed Browser Policy?</h3>
Utilizing <a href="https://support.logmeininc.com/lastpass/help/how-do-i-deploy-lastpass-web-browser-extensions-across-my-enterprise" target="_blank" rel="noopener">Managed Browser Policy</a> gives IT admins direct control over available settings and extensions in the browser while causing minimal disruption to the employee. “Most browsers let businesses manage browser functionality through a set of policies configured and deployed as part of an install package or via GPO,” says Lewis. “In the case of LastPass, we have sample code for Edge, Chrome, and Firefox that allows you to enable LastPass in the browser while disabling the built-in password manager, too.”
<h3>What are the advantages of the Managed Browser Policy?</h3>
Lewis highlighted three key advantages of the policy:
<ul>
 	<li data-leveltext="" data-font="Symbol" data-listid="2" data-aria-posinset="1" data-aria-level="1">Convenience: The policy offers a seamless install experience with no user interaction. “With the MSI install, we leverage a technology called side-loading,” says Lewis. “This method of installation requires users to accept the permissions for the app via a pop-up notification. If they fail to do so, the app won’t fully install.” In other words, the successful installation of LastPass comes down to user action, which creates an opportunity for failure.</li>
 	<li data-leveltext="" data-font="Symbol" data-listid="2" data-aria-posinset="2" data-aria-level="1">Flexibility: The Managed Browser Policy is easily added to an existing browser policy configuration. According to Lewis, “the policy also allows you to put the extension ‘on deck’ as an installed extension, but not activated, which can be useful if LastPass will be an opt-in service.”</li>
 	<li data-leveltext="" data-font="Symbol" data-listid="3" data-aria-posinset="3" data-aria-level="1">Security: Using the policy to disable the built-in password managers limits employees’ opportunities to store passwords in unapproved, insecure ways. The policy can also prevent users from accidentally uninstalling the LastPass extension. Plus, “browsers are moving away from supporting side-loading as a security enhancement,” Lewis mentions. “Our MSI installer can <a href="https://blog.mozilla.org/addons/2019/10/31/firefox-to-discontinue-sideloaded-extensions/#:~:text=Sideloading%20will%20stop%20being%20supported,them%20if%20they%20chose%20to" target="_blank" rel="noopener">no longer install LastPass to Firefox</a>. </li>
</ul>
<h3>Is the Managed Browser Policy right for me?</h3>
LastPass offers different deployment options for a reason. The deployment process should be as easy as possible while accounting for differences in technical environments. Lewis says that his clients’ number one worry is always, “How can I provide the most seamless experience for my end users?” 

When helping them figure out which deployment options to choose, he first asks them to explain how they’re doing it today. “Is the IT team managing browsers already? If not, how can I help them learn more?” he explains. “This method provides a lot of flexibility and security controls for an organization looking to keep Shadow IT at bay.”

If your organization is new to managing browsers, Lewis recommends learning more about how it works for <a href="https://support.google.com/chrome/a/answer/188446?hl=en" target="_blank" rel="noopener">Chrome</a>, <a href="https://support.mozilla.org/en-US/kb/customizing-firefox-using-group-policy-windows" target="_blank" rel="noopener">Firefox</a>, and <a href="https://docs.microsoft.com/en-us/deployedge/configure-microsoft-edge" target="_blank" rel="noopener">Edge</a>.

Of course, the policy may not be the right choice for everyone. “For organizations who don’t leverage a software distribution tool or cannot take advantage of the policy, we do host direct links to the browser extension stores on our <a href="https://lastpass.com/misc_download2.php" target="_blank" rel="noopener">downloads page</a>,” Lewis says. The self-service download is still a quick option, though it offers less centralized control for IT.

For next steps on utilizing the Managed Browser Policy, be sure to check out our detailed <a href="https://support.logmeininc.com/lastpass/help/how-do-i-deploy-lastpass-web-browser-extensions-across-my-enterprise" target="_blank" rel="noopener">documentation</a>.

Why You Should Use the Managed Browser Policy Installation for LastPass  

When choosing how to deploy LastPass, IT teams must balance their own needs with employees’ expectations. On the one hand, IT will want to automate as much of the process as[..]

In Fall 2020, LastPass announced the launch of the new Admin Console, available to our Enterprise and Identity customers. The new Admin Console simplified the admin experience, enabling you to more easily get up and running with LastPass. It also gave broader visibility and control into your LastPass account and user activity, helping you to better increase your organization’s security posture, manage employee attributes and boost LastPass adoption. 
Our goal at LastPass is to provide effortless security for everyone, and we rely on customer feedback to help us seamlessly secure every aspect of your digital life. Incorporating that customer feedback from businesses and admins like you, was a core driver for the new Admin Console to offer simplicity and security to your organization. We have continued to develop the new Admin console by releasing feature functionalities to increasingly aid admins in  account management so you can drive end user adoption across your organization.   
Let’s explore what’s new since you may have last visited your new Admin Console.  If you haven’t tried the new Admin console yet, be sure to <a href="https://blog.lastpass.com/2020/10/introducing-new-lastpass-admin-console/">check it out</a>. 
Increased Customization in the Users Table  
We know that all businesses are not the same, and customization is important for admins to have a clear view into their end users and to report into key stakeholders.   
The Users Table is where you have a holistic view of employees in your organization to simply add and edit employee attributes, define groups and assign admins. 
We’ve increased data point customization in the Users Table, including security score, admin level and last master password change. You can now filter by each of these data point columns and combine filters, too. Admins can select which columns appear and in which order for the users table. The number of possible customizations in your table is unlimited, giving you greater control over reporting.  
Expanded User Status 
To have a more holistic view of the employees in your LastPass account, we’ve continued to update our user management settings. To better clarify and categorize end users based on their status of adoption, users whose LastPass invitations have not been accepted within the time limit will show as &#8220;Expired Invitation.&#8221;   
This allows admins to view all existing user invitations that have expired after 14 days, or net new invitations that have expired after 90 days. With this information available, admins can contact employees with expired invites and re-engage them with a new invitation or provide additional onboarding resources as necessary, allowing you to maximize LastPass usage across the business. 
The existing Disabled and Awaiting Approval statuses remain unchanged. 
Keep Exploring the New Admin Console 
The new LastPass Admin Console was built for you to offer the simplicity and security your business needs. Keep learning more about these updated features <a href="https://support.logmeininc.com/lastpass/help/whats-new-in-the-lastpass-admin-console">here</a>, and be sure to check out our Support FAQs <a href="https://support.logmeininc.com/lastpass/help/new-lastpass-admin-console-faqs">here</a>.

Exploring New Features in the LastPass Admin Console  

In Fall 2020, LastPass announced the launch of the new Admin Console[..]

LastPass is proud to announce that we have expanded our global data footprint into India to better serve the APAC market. To support increasing privacy requirements and to improve our customer’s experience, LastPass will now include local storage in India.    
As the world becomes increasingly more digital, India is taking steps to be more compliant and privacy aware across organizations. In a recent <a href="https://blog.logmeinrescue.com/customer-support-insights/why-98-percent-of-it-leaders-are-consolidating-remote-work-tools/">LogMeIn and IDG study</a>, 58% of APAC organizations felt remote work had exposed them to cyber risk. The APAC region is second behind North America in number of security incidents and breaches, according to the <a href="https://enterprise.verizon.com/resources/reports/dbir/2020/data-breaches-by-region/apac/">2020 Data Breach Investigations Report</a>, with 4,055 incidents and 560 breaches, split evenly across small and large businesses. Of the 560 breaches, 88% of the time the data compromised was credentials. 
As a result, more and more businesses in the APAC region, including India, are adopting a position of awareness training and promotion of tools to enable them to become more secure. 
What does this mean for LastPass customers? Storage offered in India enables LastPass Enterprise and Identity customers to store their vault data in region. In this way, businesses may satisfy internal security requirements by having vault data hosted locally. Business admins can request that their vault data be stored locally in India instead of the United States. 
LastPass Enterprise and Identity customers will continue to enjoy the all the same features and benefits and can now store vault data in region (on and offline) with zero knowledge, access account deletion, and replicate and export data. Knowing where data resides is very important and having it stored in region will help businesses implement improved security posture throughout their organization.  
If you’re an existing LastPass business customer, click <a href="https://support.logmeininc.com/lastpass/help/where-is-my-lastpass-enterprise-vault-data-stored?cid=LP_APAC_ADH_Announcement_Local%20Storage&amp;utm_medium=email&amp;utm_source=announcement&amp;utm_campaign=lp-apac-en-adh-multi-2019-06-20-announcement-local+storage&amp;utm_content=local%20storage">here</a> to find out how you can move your vault data.  
For more information on our business solutions, visit LastPass.com. If you’re ready to get started using simple and secure password management, get started with a <a href="https://www.lastpass.com/products/enterprise-password-management-and-sso">free trial</a>.

Expanded Data Storage in India Provides Flexible, Secure and Local Data Residency to Customers

LastPass is proud to announce that we have expanded our global data footprint into India to <sp[..]

LastPass now provides the flexibility to authenticate into the LastPass vault and configured single sign-on (SSO) applications with SMS passcode, voice call or YubiKey.  
LastPass delivers both personal and business customers with the flexibility to authenticate into the LastPass vault using any cell phone or landline via voice call and SMS passcode authentication. For LastPass customers who are not able to consistently use the Authenticator mobile applications, voice call and SMS passcodes will now allow them to add secondary authentication on top of their LastPass vaults to ensure their credentials remain secure.  
In addition, LastPass is also releasing voice call, SMS passcodes, and YubiKey support for business customers accessing single sign-on applications configured in LastPass. This provides additional options for LastPass users who may not want to use a hardware token to authenticate into their cloud applications.  
For Personal use 
For personal users, including our Free, Premium, and Families customers, you’ll be able to add a secondary authentication method onto your vault with voice call or SMS passcodes. 
Adding a secondary authentication method is recommended as it increases the security of your account by requiring more than just a single credential when accessing your LastPass vault. When you create or log into an account, you must enter a password in addition to authenticating via an Authenticator application, SMS passcode, voice call or hardware token.  
For Business Use 
For business users, SMS passcodes and voice call authentication will offer flexibility for employees who may not be able to utilize their cell phones during the day.  With these authentication methods, employees can set up a landline or desk phone as their secondary authentication method to ensure secure access. In the circumstance that a mobile phone is lost, employees can set up an alternative phone to provide authentication, so they are never locked out of their account. In addition to supporting these methods for the LastPass vault, LastPass now also supports voice call, SMS passcodes and YubiKey when authenticating into single sign-on applications.  
How do SMS passcodes and voice call work?  
When users select or Admins assign LastPass Authenticator as their authentication method, on their next authentication, they will also have the option to utilize voice call or SMS passcodes instead of the LastPass Authenticator application when logging into the LastPass vault or single sign-on applications.  
<img fetchpriority="high" decoding="async" class="size-medium wp-image-154547 aligncenter" src="https://cdn.lputil.com/wp-content/uploads/sites/20/2021/02/SMS-and-Voice-Call-Launch-300x286.png" alt="" width="300" height="286" />
After you choose your authentication method, LastPass will either send an SMS passcode or voice call to the phone on file for authentication. Once you confirm the code, LastPass will authenticate you into your LastPass vault or single sign-on application.  
To learn more about setting up SMS passcode and voice call authentication visit, <a href="https://support.logmeininc.com/lastpass/help/how-do-i-use-the-call-me-feature-for-lastpass">here</a>. To learn more about LastPass Authenticator, visit <a href="https://lastpass.com/auth/" target="_blank" rel="noopener noreferrer">here</a>.

LastPass Now Offers the Flexibility to Authenticate Into the Vault & Single Sign-On Applications With SMS Passcode, Voice Call or YubiKey

LastPass now provides <span[..]

Whether employees are working in an office or clocking in from home, security must be a top priority for IT teams. Though the threats may differ between work and home environments, the goal is the same – to reduce the risk of cyberattacks that lead to costly and damaging theft and data breaches, without getting in the way of employee’s work.
With more employees remote than ever before, it’s critical to revisit your security strategy. Increasing security for your remote workforce may require investing in new technology, updating your policies, or changing the way you use existing technology.
Here are 5 quick tips to improve your cybersecurity strategy for your remote workforce:
Implement single sign-on
Visibility is key to understanding potential security threats. <a href="https://blog.lastpass.com/2020/09/building-iam-strategy-start-single-sign/">Single sign-on (SSO)</a> gives IT much-needed oversight of apps and services in use across the business. By centrally deploying and managing employee access to every application, IT can ensure that the right employees have access to the right information when and where it is appropriate, based on their role, expected work location, and more. SSO can be deployed across the entire organization and is built into everyday tasks, rather than burdening employees with complicated access requirements.
Use a password manager
For many collaborative virtual teams, sharing credentials is necessary to get the job done. But for IT, it’s a security nightmare to have passwords floating around in emails, chats, text messages, and Excel documents. A <a href="https://blog.lastpass.com/2020/05/how-remote-teams-can-securely-share-passwords/">password manager</a> gives IT centralized oversight of company password hygiene, ensuring shared passwords are encrypted, and only available to the intended recipient. With a vault to store and manage credentials, as well as a password generator to create randomized passwords, a password manager makes strong password hygiene easier. 
Add multifactor authentication
<a href="https://blog.lastpass.com/2020/08/effective-way-secure-remote-workforce-mfa/">Multifactor authentication (MFA)</a> can add protection to all virtual entry points by requiring more than just a single credential when an employee tries to access something. The additional layer of security helps prevent unwanted logins, and takes an additional step to ensure employees are who they say they are. From SSO apps, employee workstations or even your organization’s VPN, MFA heightens security by locking down an account if login activity is suspicious, while making everyday activities easy for trusted users.
Review reporting logs
With centralized solutions like SSO, password management and MFA, IT can leverage detailed reporting logs to monitor employee access for signs of problems. Reports that can be filtered and customized allow IT to see who has access to what, whether any suspicious logins or attempted logins have taken place, and where employee behaviors like duplicated passwords might be putting the company at risk. IT can then be more targeted about preventative actions and can measure progress over time in achieving cybersecurity goals.
Monitor the dark web
An employee’s personal cybersecurity habits can directly impact a company’s security. This is especially true in a remote work environment, when there is likely to be more crossover between work and personal on the same devices. With <a href="https://blog.lastpass.com/2020/09/employees-understand-risks-dark-web/">dark web monitoring</a>, employees receive alerts when their passwords and other personal information have been leaked in a data breach and are at risk of being used by cyber thieves. Employees can then respond to any potential threats by taking action, such as updating passwords or freezing their credit. Helping employees be more diligent with their personal cybersecurity will also benefit the company’s overall security posture.
Add security, not complexity, for remote work
<a href="https://www.lastpass.com/10-ways-to-improve-security-productivity-while-working-remote">Securing a remote workforce</a> doesn’t need to be complex. The key is to secure all your employee logins, applications and credentials for holistic security, with a simple experience that helps boost productivity.

5 Tips to Increase Security for Your Remote Workforce

Whether employees are working in an office or clocking in from home, security must be a top priority for IT teams. Though the threats may differ between work and home environments, the goal is the [..]

Our goal at LastPass is to provide effortless security for everyone, and we rely on customer feedback to help us seamlessly secure every aspect of your digital life – both business and personal. Based on our customer conversations, a theme that stood out was ease of use and simplifying the admin experience. We heard you loud and clear and made it our mission reimagine the LastPass Admin Console to offer the simplicity and security your business needs.
Today we are excited to announce our <a href="https://support.logmeininc.com/lastpass/help/whats-new-in-the-lastpass-admin-console">new Admin Console</a>, available in both LastPass Identity and LastPass Enterprise packages. The new LastPass Admin Console simplifies the admin experience by enabling you to more easily get up and running with LastPass, gain granular insight into your organizations’ security posture, manage employee attributes, and boost LastPass adoption in your organization.
Simplified Navigation 
We’ve simplified the navigation in the Admin Console through new categorization, so you can more easily find what you need.
<ul>
<li>The Users tab is where you will have a holistic view of employees in your organization to more simply add and edit employee attributes, define groups and assign admins.</li>
<li>The Applications tab is where you can facilitate secure access for all the applications your business uses everyday – single sign-on and legacy apps, password protected sites and VPNs.</li>
<li>The Policies view is where you can customize your LastPass controls across all employee logins with 100+ customizable settings.</li>
<li>Reporting is where you can see activity for every login across your business for complete insight to adjust controls as needed.</li>
<li>Lastly, Advanced is where you can configure the more advanced LastPass settings.</li>
</ul>
<img decoding="async" class="size-medium wp-image-153314 aligncenter" src="https://cdn.lputil.com/wp-content/uploads/sites/20/2020/10/LastPass-Admin-Console-Navigation-300x99.png" alt="" width="300" height="99" />
Intuitive Admin Onboarding Experience
To help you get up and running with LastPass, our new admin onboarding tour guides you through each step of setting up your account to ensure your users, apps and policies are configured in alignment with your organization’s security needs, so you can roll out LastPass and secure every employee login sooner.
<img fetchpriority="high" decoding="async" class="size-medium wp-image-153321 aligncenter" src="https://cdn.lputil.com/wp-content/uploads/sites/20/2020/10/Onboarding-Experience-300x274.png" alt="" width="300" height="274" />
New LastPass Statuses: Staged, Invited and Active
To have a more holistic view of the employees in your LastPass account, we’ve revamped user management so you can view employee details, onboarding status, multifactor authentication status and time of last login in a single, unified view.
For deeper insight into your employee’s onboarding journey, we’ve also introduced <a href="https://supportstage.logmeininc.com/lastpass/help/can-i-view-user-status">three new LastPass Statuses:</a> Staged, Invited and Active. Staged shows when you’ve created an employee account but haven’t sent an invitation, Invited is when an employee has received an initiation but not yet accepted, and Active is when an employee has accepted the invitation and logged in at least once. The new LastPass Statuses enable you to have deeper insight into employee adoption, giving you the visibility to maximize LastPass usage across the business.
<img decoding="async" class="size-medium wp-image-153328 aligncenter" src="https://cdn.lputil.com/wp-content/uploads/sites/20/2020/10/User-Page-300x168.png" alt="" width="300" height="168" />
Gain Deeper Insight into Employee Attributes
For deeper insight into employee settings, you can now view and edit user details from a single panel. You can view a specific employee’s assigned groups, single sign-on apps, Shared Folders, enabled policies and more all from one location – coupled with the control to add or adjust settings as needed from the same view.
<img loading="lazy" decoding="async" class="size-medium wp-image-153335 aligncenter" src="https://cdn.lputil.com/wp-content/uploads/sites/20/2020/10/Employee-Attributes-300x169.png" alt="" width="300" height="169" />
More Easily Manage Admins
A feature intended to make your job easier is the new Admin Management Center. In this view, you will be able to <a href="https://supportstage.logmeininc.com/lastpass/help/what-are-admin-roles">add, remove and manage all admins</a>, including the ability to assign Super Admin permissions, for complete control over your LastPass account in a simplified view.
<img loading="lazy" decoding="async" class="size-medium wp-image-153342 aligncenter" src="https://cdn.lputil.com/wp-content/uploads/sites/20/2020/10/Admin-Roles-300x171.png" alt="" width="300" height="171" />
The New LastPass Admin Console, Available in Your Account Today
The new LastPass Admin Console is <a href="https://support.logmeininc.com/lastpass/help/new-lastpass-admin-console-faqs">live in your account today</a>!
The LastPass Admin Console was built for you, and we want to hear what you think. To leave us feedback on the new experience, click on your username in the top-right corner of the new Admin Console and then select “Give feedback”. We are excited to hear your feedback, so we can continue to build effortless security for everyone.
<div class="flex-video"><iframe loading="lazy" title="LastPass 101: Admin Console" width="620" height="349" src="https://www.youtube.com/embed/5U6PO-KxkL4?feature=oembed" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture" allowfullscreen=""></iframe></div>

Introducing the New LastPass Admin Console

Our goal at LastPass is to provide effortless security for everyone, and we rely on customer feedback to help us seamlessly secure every aspect of your digital life – both business and personal. Ba[..]

Blog

Blog

Recent

Industry News

LastPass For Admins

LastPass Labs

Product Updates

Tips And Tricks