TABLE OF CONTENTS

Introduction

Today’s users have access to many computing environments, devices and resources. The first line of defense to secure access to these resources is to implement strong unique passwords for each resource preventing the hijack of another account if your credentials are ever compromised. Generating, remembering and maintaining unique passwords is challenging and nearly impossible. The use of a password manager can help simplify this process.

A password manager can generate a complex unique password for each resource and maintain that database of passwords for a user. A password manager resides in your browser and acts like a digital gatekeeper which fills in your password for that resource once you enter a very secure and complex master password. The only password you need to remember is your master password. The password manager maintains the rest.

Getting Started

Users should navigate to the Software Download Page and purchase the software license. An email will be sent to the user's official Berkeley Lab Identity from LastPass requesting you download, install and activate your LastPass account. To get started with LastPass, see Getting Started with LastPass.

Features

The Laboratory currently utilizes 1Password as the supported password manager, but this will deprecated as of August 31, 2017. LastPass will become the password manager of choice. LastPass implements AES-256 bit encryption. Data is encrypted and decrypted at the device level. The data stored in your password vault is kept secret even from LastPass. Your master password and the keys are never sent to the LastPass servers and are never accessible to LastPass. These capabilities help ensure complete security.

LastPass provides additional features that 1Password does not at this time. They are:

• Two-factor authentication to access password vault
• Push tokens
• Support for Linux

LastPass Tips and Tricks

• How to change from 1Password to LastPass?

• How do I change my master password?

• I forgot my Master Password, how do I recover access to my account?

• How do I set up Multifactor Authentication for my LastPass account?

• How do I use LastPass from a mobile device?

• How does our team share passwords securely for several of our sites?

• Can I link my personal LastPass account to my Lab LastPass account?

• LastPass Online Help Documentation - https://helpdesk.lastpass.com/

• Any issues contact [email protected]