Using VT LastPass to Generate and Store Username and Password Login Credentials


Introduction

Contents

Account Eligibility

Virginia Tech offers enterprise LastPass accounts to all active employees, all active students, and select affiliates. 

Account offerings will be rolled out in a phased approach during 2022 and 2023.

Employees

Eligibility: Active Virginia Tech Employees

Employee Group 1 (Internal Pilot) - Summer 2022: Limited employee groups 

Employee Group 2 (Expanded Pilot) - Summer-Fall 2022: Select divisions and units

Employee Group 3 - Fall 2022: All employees

Students

Eligibility: Active Virginia Tech Students

Students - 2023: Groups and Phases TBD

Select Affiliates

Eligibility: TBD 

2023: Groups TBD

Account Lifecycle

In addition to the eligibility rules above, Virginia Tech’s enterprise LastPass uses Hokies ID accounts. This means that the VT LastPass account lifecycle is dependent on the Hokies AD account lifecycle. Once a former student or alumni, former employee, or affiliates loses their Hokies AD account then their VT LastPass account will be disabled and they will no longer be able to authenticate to LastPass using this account or access the data in it. Export of their data in such cases needs to be completed prior to the expiration and deprovisioning of their Hokies AD account or loss of eligibility. 

Explanation

Client Apps / Extensions

Install the LastPass Browser extension for any and all browsers that you want and the Windows or MacOS application for use on those devices. You may use the universal installer which will install the extension for multiple browsers or install them individually. You may also install operating system-specific LastPass client apps, though you will also need a relevant browser extension in order to log in with your VT Username. 

Click here to go to the LastPass download page. 

For VT LastPass, to access the web vault through the LastPass web site, you must have the relevant browser extension installed.

Using LastPass

From ​​How do I use the LastPass browser extension?: "Once you have installed the LastPass browser extension, you can use it for all of your password management needs. You can fill your credentials and data for matching websites, search within your vault, or browse for items by category. You can also access your vault, add new items, generate secure passwords, manage account options, and much more."

Saving Username and Password Credentials

You can save username and password credentials to the LastPass vault by either manually typing them into the vault, or by choosing to have the LastPass browser tool save them after you successfully log into a web site. For text and video instructions of both of these methods see: Add a New Site.

Using Credentials that Are Saved in LastPass

The next time that you log into a web site or service where you have saved your credentials to LastPass, you can access those credentials with the LastPass browser tool. For instructions, see: Log In to Sites Using LastPass. This can be done on any device that has the LastPass browser extension and you are logged into it. So you could potentially access your credentials on both the computer in your office and a computer in a lab by logging onto the LastPass browser tool on both devices.

Generating New, Random Passwords

You can have LastPass generate a random password with a specific length, character set, and other requirements that you can then use when creating or changing a password of an existing account for a web site or service. For text and video instructions, see: Generate Secure Passwords.

Finding Saved Credentials

Navigate to a matching site, or use the search function. For instructions, see: How do I use the LastPass browser extension? 

Best Practices

  • Use randomly generated passwords. One of the main benefits to a password manager like LastPass is to make it practical to use long, random, complex passwords to protect your accounts and data. 
  • Generate passwords using the LastPass password generator. 
  • Only share passwords that are NOT for personal accounts or use. This includes accounts and passwords that are specifically for your use at Virginia Tech. 
  • Only share passwords when absolutely necessary and only for accounts that themselves are shared accounts or service accounts. When doing so, use LastPass shared folders (see ​​What are shared folders? and Use the Sharing Center).
  • When saving credentials for sites or services that do not use your Virginia Tech credentials and Virginia Tech 2-factor authentication, turn on and use the site's or service's 2-factor authentication / multi-factor authentication wherever possible. Install and use the LastPass Authenticator App or another authenticator app on your mobile device to use for 2-factor authentication or use an authentication token such as Yubikey. Pushed-based mobile authentication apps, mobile authenticator apps, or authentication tokens are far more secure than using phone call or SMS based authentication methods.

Linking Non-Virginia Tech Accounts

  1. First, verify that you know the credentials for your non-Virginia Tech LastPass account. To reset your non-Virginia Tech LastPass credentials, see Recover Your Lost Master Password for LastPass. 4Help cannot reset them.
  2. Activate your Virginia Tech LastPass account.
  3. Install one or more of the LastPass browser extensions.
  4. Login to the LastPass browser extension using your Hokies ID.
  5. Open your vault.
  6. Open Account Benefits from the left-hand menu.
  7. Link your account.

Please see the LastPass help article: Link your personal account.

Family Benefits

VT LastPass includes support for family accounts via LastPass Families. To activate this benefit:

  1. Open your vault.
  2. Open Account Benefits from the left-hand menu.
  3. Click Activate LastPass Families for free and follow the instructions.

LastPass Families provides family accounts for up to five others for free. You should not use @vt.edu email addresses for these family accounts because they will eventually be invited to activate their own VT LastPass account.

If you already pay for LastPass Families through your personal account, after linking your personal account LastPass will prompt you to start receiving this benefit for free and will unenroll your subscription payments. You will then receive LastPass Families, tied to your personal account, for free.

When you lose all of your eligible affiliations with Virginia Tech, your account will be disabled and you will no longer have family benefits. Sponsored family accounts will have the option to leave the family and convert to personal paid or free accounts.

Please see the LastPass help article: Claiming Your LastPass Families as a Benefit Account.

Existing @vt.edu LastPass Accounts

If you have a previously created personal LastPass account using your @vt.edu email address as your account name, you can request to have this account merged into the Virginia Tech enterprise account. Send your existing LastPass account username / email, but not the password to 4Help by clicking Get Help on the 4Help portal. VT LastPass staff will add you to the VT LastPass account. LastPass will send you an activation invitation which when activated will merge your existing account into the Virginia Tech one. It will then be subject to the VT LastPass account lifecycle and policies.

Frequently Asked Questions (FAQs)

How Do I Find Answers to More LastPass Questions?

Please see LastPass’ support site.

My Department Has an Existing LastPass Business / Enterprise Account. Can We Keep These Accounts and Merge Them into the Virginia Tech Business Account?

Yes. The admin for your departmental business account should contact 4Help by clicking Get Help on the 4Help portal asking that Secure Identity Service (SIS) merge your department business account into the Virginia Tech business account.

My Invitation Link Expired. How Do I Get a New One?

Activation invitation emails are valid for 90 days. If your link has expired, contact 4Help by clicking Get Help on the 4Help portal and request a new activation invitation email.

Why Is the LastPass Icon in My Browser Red / Yellow / Grey?

A red icon indicates that you are logged in. A yellow or grey icon indicates that you are not logged in; click the icon to log in.

You can modify this behavior by right-clicking the icon and selecting Options: Icons.

For more information, see Why is my LastPass browser extension icon color grey or black/yellow/red?

Can I Change the Email Address or Master Password that I Use to Log in to VT LastPass?

No; your Virginia Tech email and VT Username passphrase will always be used to log in to LastPass.

What if I Forgot My VT Username Passphrase?

Reset your passphrase by following the instructions at Changing or Resetting My Password.