LastPass is a username/password solution that safely stores and applies login credentials.


Introduction

LastPass Enterprise Account Eligibility

Virginia Tech offers enterprise LastPass accounts to all active employees, all active students, and select affiliates. 

Account offerings will be rolled out in a phased approach during 2022 and 2023.

 

Employees:

Eligibility: Active Virginia Tech Employees

Employee Group 1 (Internal Pilot) - Summer 2022: Limited employee groups 

Employee Group 2 (Expanded Pilot) - Summer-Fall 2022: Select divisions and units

Employee Group 3 - Fall 2022: All employees

 

Students:

Eligibility: Active Virginia Tech Students

Students - 2023: Groups and Phases TBD

 

Select Affiliates:

Eligibility: TBD 

2023: Groups TBD

Account Lifecycle

In addition to the eligibility rules above, Virginia Tech’s enterprise LastPass uses Hokies ID accounts. This means that the VT LastPass account lifecycle is dependent on the Hokies AD account lifecycle. Once a former student or alumni, former employee, or affiliates loses their Hokies AD account then their LastPass account will be disabled and they will no longer be able to authenticate to LastPass using this account or access the data in it. Export of user data in such cases needs to be completed prior to the expiration and deprovisioning of the Hokies AD account or loss of eligibility. 

Client Apps/Extensions

Install the LastPass Browser extension for any/all browsers that you want, and the Windows or MacOS application for use on those devices. You may use the universal installer which will install the extension for multiple browsers, or install them individually. You may also install OS specific LastPass client apps, though you will also need a relevant browser extension in order to log in with your VT Username. 

Accessing the web vault directly through the LastPass web site will not work for VT users unless they also have a relevant browser extension.

Instructions

Using LastPass

From ​​https://support.lastpass.com/help/use-the-lastpass-web-browser-extension-lp010110 : Once you have installed the LastPass browser extension, you can use it for all of your password management needs. You can fill your credentials and data for matching websites, search within your vault, or browse for items by category. You can also access your vault, add new items, generate secure passwords, manage account options, and much more.

Saving Username and Password Credentials

You can save username and password credentials to the LastPass Vault by either manually typing them into the Vault, or by choosing to have the LastPass browser tool save them after you successfully log into a Wbe site. For text and video instructions of both of these methods see: https://support.lastpass.com/help/add-a-new-site-lp010005

Using Credentials that Are Saved in LastPass

The next time that you log into a Web site or service where you have saved your credentials to LastPass, you can access those credentials with the LassPass browser tool. For instructions, see: https://support.lastpass.com/help/log-on-to-sites-using-lastpass-lp010004 . This can be done on any device that has the LastPass browser extension and you are logged into it. So you could potentially access your credentials on both the computer in your office and a computer in a lab by logging onto the LastPass browser tool on both devices.

Getting New Passwords Generated

You can have LastPass generate a random password with a specific length, character set, and other requirements that you can then use when changing a password of an existing account for a Web site or service, or when creating a new account for a Web site or service. For text and video instructions, see: https://support.lastpass.com/help/generate-secure-passwords-lp020011

Finding Saved Credentials

Navigate to a matching site, or use the search function. For instructions, see: https://support.lastpass.com/help/use-the-lastpass-web-browser-extension-lp010110 

Best Practices

  • Use randomly generated passwords. One of the main benefits to a password manager like LastPass is to make it practical to use long, random, complex passwords to protect your accounts and data. 
  • Generate passwords using the LastPass Password generator. 
  • Only share passwords that are NOT for personal accounts or use. This includes accounts and passwords that are specifically for your use at VT. 
  • Only share passwords when absolutely necessary and only for accounts that themselves are shared accounts or service accounts (e.g. service accounts). When doing so, use LastPass shared folders (see ​​https://support.lastpass.com/help/what-are-shared-folders and https://support.lastpass.com/help/use-the-sharing-center-lp020007).
  • When saving credentials for sites or services that do not use your VT credentials and VT 2-factor authentication, turn on and use the site's or service's 2FA/MFA wherever possible. Install and use the LastPass Authenticator App (https://support.lastpass.com/help/lastpass-authenticator-lp030014) on or another authenticator app on your mobile device to use for 2FA or use an authentication token such as Yubikey. Pushed-based mobile authentication apps, mobile authenticator apps, or authentication tokens are far more secure than using phone call or SMS based 2FA methods.

Linking non-VT accounts

  1. First, verify that you know the credentials for your non-VT LastPass account. To reset them, see [LP documentation].
  2. Activate your VT account.
  3. Install a browser extension.
  4. Login using your Hokies ID.
  5. Open your Vault.
  6. Open Account Benefits from the left-hand menu.
  7. Link your account. (If you do not know your non-VT LastPass account credentials and are unable to reset them with [LP documentation], 4Help cannot reset them for you.

Please see LastPass help article: Link your personal account.

Family Benefits

VT LastPass includes support for family accounts via LastPass Families. To activate this benefit:

  1. Open your Vault.
  2. Open Account Benefits from the left-hand menu.
  3. Click on the Activate LastPass Families for free” button and follow the instructions.

LastPass Families provides family accounts for up to 5 others for free. You should not use @vt.edu email addresses for these family accounts as they will eventually be invited to activate their own VT account.

If you already pay for LastPass Families through your personal account, after linking your personal account LastPass will prompt you to start receiving this benefit for free and will unenroll your subscription payments. You will then receive LastPass families, tied to your personal account, for free.

When you lose all of your eligible affiliations with VT, your account will be disabled and you will no longer have family benefits. Sponsored family accounts will have the option to leave the family and convert to personal paid or free accounts.

Please see LastPass help article: Claiming Your LastPass Families as a Benefit Account.

Existing @vt.edu LastPass accounts

If you have a previously created personal LastPass account using your @vt.edu email address as your account name, you can request to have this account merged into the Virginia Tech business account. Send a request with the existing account username/email, but not the password, to 4help@vt.edu. LastPass admin staff will add you to the VT LastPass business account. LastPass will send you an activation invitation which when activated will merge your existing account into the VT instance. It will then be subject to the VT LastPass account lifecycle and policies.

FAQ

Q: How do I find answers to more LastPass questions?

A: Please see LastPass’s support site: https://support.lastpass.com/home.

 

Q: My department has an existing LastPass business account? Can we keep these accounts and merge them into the Virginia Tech business account?

A: Yes. The admin for your departmental business account should send an email to 4help@vt.edu Attn: SIS requesting to merge your department business account into the Virginia Tech business account.

 

Q: My invitation link expired, how do I get a new one?

A: Activation invitation emails are valid for 90 days. If your link has expired, send an email to 4help and request a new activation invitation email.

 

Q: Why is the LastPass icon in my browser red / yellow / grey?

A: A red icon indicates that you are logged in. A yellow or grey icon indicates that you are not logged in; click the icon to login. You can modify this behavior by right clicking on the extension and selecting Options: Icons. https://support.lastpass.com/help/why-is-my-lastpass-web-browser-extension-icon-color-grey-yellow-red

 

Q: Can I change the email address or Master Password that I use to log in to LastPass?

A: No; your Virginia Tech email and VT Username passphrase will always be used to log in to LastPass.

 

Q: What if I forget my VT Username passphrase?

A: Reset your passphrase by following the instructions at https://4help.vt.edu/sp?id=kb_article&sysparm_article=KB0010084#vtuforgot