Table of Contents

Enrolling with LastPass

Request an Account & Verification Email

To initiate the enrollment, you need to request an account. Click on the link below:
https://groups.uw.edu/group/u_passman_users_requested

in the Groups Service and click “Join this group”.

Between 30 minutes and an hour, you will receive an email from LastPass guiding you to create an account at lastpass.com and then use the LastPass invite link sent in the email*. Upon creating a new LastPass account and a time-limited invitation they can use to link UW Enterprise LastPass to their existing LastPass account. Each individual must choose a LastPass Enterprise account password to complete creation. The LastPass Enterprise account password is not the same as their UW NetID password.

Note* If you don't see the verification email, check the spam/junk folders.
Note** Your master password is crucial. No one, including UW-IT and LastPass, can retrieve the password for you. Make sure to remember it or write it down somewhere that can be retrieved at any time. And make sure to set up the recovery.

2FA Configuration (Required)

University of Washington already has integrated 2FA for Workday using Duo, the authentication application. Though there are many other 2FA applications available, we will use Duo because that is what we are currently using for Workday. Make sure to enable 2FA once you create your account by following steps below:

Log into LastPass https://lastpass.com/?ac=1&lpnorefresh=1
Go to "Account Settings" in the left corner:
Select "Multifactor Options" in the navigation bar at the top:
Select "Edit" for "Duo Security".
Change "Enable" and "Use Duo Web SDK when possible" and press "Update":
Put in the LastPass' Master Password (That you got when you set up LastPass).
Put in your UW Net ID:

Now, it will ask for your Duo Action to be taken on your mobile device every time you login to LastPass.

Next time you log in, it should look like this:

Check "Trust Device for 30 Days" if you want to avoid having to 2FA each time you launch the browser

Install LastPass

Check if you see the LastPass extension when you open up Google Chrome at the upper right corner like this:

If you do not see the LastPass extension, visit Download LastPass. Download the LastPass for whichever browser you want to use (If you use multiple browsers, download the Universal one). Once it's downloaded, open the installer & follow the prompt.

GCA – follow the steps below to enable the LastPass extensions if you don't already have them enabled:
https://support.logmeininc.com/lastpass/help/how-do-i-enable-the-lastpass-web-browser-extension-lp070006

Browser Extension vs. LastPass.com

We recommend the usage of LastPass from the browser plugin. If you choose to use LastPass.com it may ensure that passwords get updated immediately and you never have to click "refresh sites", but you won't get password auto-fill and you will have to Log In (and authenticate with 2FA if you have that set up) every time you open your vault.

https://support.logmeininc.com/lastpass/help/log-on-to-sites-using-lastpass-lp010004

Recovery Set-Up (Recommended)

There are 2 different ways to set up the recovery. One is by registering your phone number and performing SMS Recovery and the other method is downloading the LastPass app on your phone. If not, open a ticket with UW-IT and LastPass team will reset the password for the user. Make sure to CC the user and have them consent.

The following describes how to enable SMS recovery:

Log in to LastPass and access your Vault by doing either of the following:
- In your web browser toolbar, click the LastPass icon , then select Open My Vault.
- Go to https://lastpass.com/?ac=1 and log in with your email address and Master Password.
Select Account Settings in the left navigation.
Select the General tab, then scroll to the "SMS Account Recovery" section. If the correct phone number is not listed, click Update Phone.
Click Add Number.
If prompted, enter your Master Password and click Continue.
Use the drop-down menu to select your country, then enter your phone number and click Send Test Code.
Once you receive the code via SMS message, enter the code into your web browser window and click Verify. If you don't receive the SMS message, click Resend.
Once verified, a confirmation message is displayed. You can now close that web browser window.

Directly taken from LastPass (https://support.logmeininc.com/lastpass/help/set-up-sms-account-recovery-lp030001)

LastPass Usage

Use:

https://support.logmeininc.com/lastpass/help/log-on-to-sites-using-lastpass-lp010004

Manage:

https://support.logmeininc.com/lastpass/help/manage-your-vault-lp010015

When to Create Secure Notes:

https://blog.lastpass.com/2016/08/oh-the-secure-notes-youll-create.html/

Shared Folders:

https://support.logmeininc.com/lastpass/help/about-lastpass-enterprise-shared-folders-lp010052

https://support.logmeininc.com/lastpass/help/manage-lastpass-teams-shared-folders-users-lp010061

Restore Deleted:

https://support.logmeininc.com/lastpass/help/restore-deleted-items-and-folders

Manually Sync (Force Refresh shared passwords updated by other users):

Try doing this first if the password does not work. It could have been recently changed, and the changes not reflected on your local LastPass browser extension.

https://support.logmeininc.com/lastpass/help/how-do-i-manually-sync-my-lastpass-account-data

Importing Passwords from Google Chrome Password Manager (MAKE SURE TO DOWNLOAD THE BINARY VERSION - CLICK IN THEIR LINK):
https://support.logmeininc.com/lastpass/help/how-do-i-import-passwords-from-the-chrome-password-manager