Here you can make administrative changes to your account, including change your plan, update billing and contact information, and set up custom email notifications.
- Set up custom email notifications – You can assign certain users within your team to receive email notifications on specific topics related to your Teams account, including product releases & updates; legal; security; and billing to make sure you’re always up to speed with LastPass.
LastPass offers a number of configurable policies around security levels and password strength. Each policy can be applied to all users, or an inclusive or exclusive list of users. For example, you might elect to implement a policy that will restrict sharing to shared folders for everyone, but allow teams leads to still share sites and notes individually. There are a number of important policy options on this tab. You should consider them carefully. Click here for a full list of LastPass Teams policies (note you must be logged in with an active LastPass Teams account to view the list).
Default policies are those that LastPass turns on automatically and applies to all users in your team. In order to customize the default policies, including the option to turn them off, please upgrade to Enterprise.
- Block Master Password Reuse: Prevent users from reusing previous master passwords when updating their master password.
- Log Mobile Activity: Add user’s activity on mobile devices to reports, such as password access and logins.
- Pre-Create Sharing Key: When autoprovisioning users, add the ability to share items or folders to them before they have logged in to their account.
- Show Master Password Strength: Collect and display the strength of employee master passwords in reports.
- Show Security Challenge Score: Automatically run the security challenge when the user logs in, and report scores to the user and admins.
- Block TOR Access: Prevent access to LastPass accounts from The Onion Router (TOR) exit node IP addresses.
- Use Enterprise MFA for Linked Personal Account: If a personal account does not have multifactor authentication enabled but is linked to an Enterprise account, require the Enterprise MFA option.
Recommended policies are those that default to on or off, depending on our recommendation, but that you can enable or disable depending on the needs of your business. Many of these policies also have additional settings that you can customize.
- Remember Master Password: Control whether employees can select Remember password for logging in to the LastPass browser extension.
- Notify of Account Recovery: Send an automated email to designated recipients when an employee uses Account Recovery.
- Account Logoff on Browser Close: Automatically log the user out of the LastPass browser extension when they close their browser.
- Master Password Characters: Require employees to have different types of characters in their master password.
- Master Password Length: Require employees to have a minimum number of characters in their master password.
- Restrict Sharing to Shared Folders: Only allow users to share sites, notes, and other items through Shared Folders that are limited to within the company.
- Master Password Updates: Require users to change their master password after a set number of days.
- Multifactor Authentication: Add another layer of protection to LastPass user accounts with an additional login step.
- Admin Master Password Reset: Allow designated admins to reset users’ master passwords.
- Admin Shared Folders: Automatically share all shared folders with the designated admins.
- Export: Allow users to export the passwords and notes stored in their LastPass account.
The list of policies in the Advanced section are accessible only to LastPass Enterprise admins. Advanced policies include more options to customize and secure your company’s users and information such as requiring multifactor authentication for admin dashboard access, disabling offline access, minimum character requirements for passwords, and more. For a complete list of policies available in Enterprise, click here.