LastPass Enterprise Password Manager & Password Management Software

• SJSU has partnered with LastPass to provide SJSU with a password management solution.
• LastPass can create, encrypt, store, and manage your university passwords, making everyday password security stronger and simpler.
• LastPass ensures that each account or application password it manages is strong and unique, synced across all of your devices, without you having to remember them all.
• LastPass is available as a browser add-on and a mobile device app.

Enterprise vs Premium Versions

LastPass Premium is available free to SJSU students, staff and faculty to store personal passwords.

LastPass Enterprise is for SJSU staff and faculty to store passwords that are used for University business. Please note that your personal Premium account and Enterprise accounts can be easily linked. This allows you to keep your vault entries all in one place, while both accounts remain separate.

Do not use the free version of LastPass to store passwords for University business.

• Students
• Faculty
• Staff

Activate your LastPass Enterprise Account

Faculty & Staff:  

• How to get LastPass Enterprise if you are new to LastPass
• How to set up LastPass Enterprise if you have an existing personal account using your sjsu.edu email address (Free or Premium)
  Note: You will not have to create a Master Password for LastPass Enterprise, because it is linked to your existing SJSU One account.

Students, Faculty, & Staff:

• How to get LastPass Personal Premium if you are new to LastPass
• How to get LastPass Personal Premium if you already have a personal LastPass account tied to your SJSU email address (Free or Premium)

When SJSU IT adds you to LastPass, you will receive an email in your SJSU email account welcoming you to LastPass and providing you with account activation instructions.

LastPass Training 

In addition to training provided by us, LastPass also provides self-paced training on platform usage. To learn more about this offering, please navigate to usertraining.lastpass.com. For a general training from our team, please reach out to us at security@sjsu.edu.

Faculty and Staff: How to Obtain LastPass Enterprise

Enterprise

LastPass enrollment is currently on a per-request basis. This is done by submitting an iSupport ticket, using the IT - LastPass Enterprise Account Request.

Upon enrollment completion, faculty and staff will receive an email invitation to establish an Enterprise LastPass account to store passwords used for University business. Faculty and staff may also register for a LastPass personal Premium account to store personal passwords (you will be prompted to register during the Enterprise enrollment process). Personal accounts must be registered with non-SJSU email addresses (see "Premium" section below).

1. In the "LastPass Account Created" email invitation, click on the "Complete the Activation of your Enterprise Account" link. If you have not already received an invitation to claim your LastPass Enterprise account or your invitation has expired, you may request an account by emailing itservicedesk@sjsu.edu.
   
   
2. Next, depending on the browser you are using and whether you already have the browser extension, you will get a slightly different setup experience (the following steps may appear in a different order for you). Walk through the additional setup screens to:
   
   
3. Add the LastPass browser extension(s)* by visiting the LastPass download center: LastPass works as an extension of your browser to keep your passwords in a secure and encrypted environment. If the browser extension is not already installed, install it. You will be prompted to install the browser extension during setup (from https://www.lastpass.com/download).
   
   DO NOT CHOOSE "LASTPASS UNIVERSAL WINDOWS INSTALLER." THIS INSTALLER REQUIRES ADMINISTRATOR RIGHTS. INSTALLING THE EXTENSION ON INDIVIDUAL BROWSERS DOES NOT REQUIRE ADMINISTRATOR RIGHTS. Once installed, log in to the LastPass extension. Here’s what the LastPass browser extension looks like:
   
   
   *Please note that the preferred browsers to use with LastPass are: Chrome, Firefox, and Edge. Internet Explorer for Windows and Safari for Macs are NOT recommended.
   
   
4. To function properly, LastPass must have permission to access and collect web addresses (URLs). Without permission, LastPass can't save and fill your credentials to your sites. When prompted to accept permissions, click "Accept."
   
   
5. Click on the browser extension. Enter your SJSU ID and SJSU Email/Account Password, and click Log In.
   
   
6. Authenticate Using Duo: Your LastPass account is protected with Duo multi factor authentication and Single Sign On just like your SJSU account. 

7. Login and start using LastPass! Click on the browser extension. Enter your SJSU ID and SJSU Password, and click Log In. Note: You will be prompted for Duo multi factor authentication upon login.

The first time you log in, you will be prompted to set up and/or link a free, upgraded personal premium LastPass account. This is highly recommended. Follow the onscreen prompts to continue.

For more information on linking accounts, please visit the LastPass website.

Faculty and Staff: Setting Up LastPass Enterprise If You Have an Existing Personal Account Using Your sjsu.edu Email Address

1. Log into your existing account using the LastPass browser extension.
   
   
2. In the "SJSU & LastPass" email invitation, click on the "Complete the Activation of your University Enterprise Account" link. (If you have not already received an invitation to claim your LastPass Enterprise account or your invitation has expired, you may request an account by emailing security@sjsu.edu.)
   
   
3. On the Confirm Add page, click Yes, add me! You will see an Account Updated message.
   
   
4. Logout of the LastPass browser extension and then log back in.
   
   
5. Your LastPass account is protected with Duo Multi-Factor Authentication and will have the same login credentials and process as your SJSU One Account.
   
   
6. You are now ready to log back in and use LastPass! Click on the browser extension. Enter your SJSU ID, SJSU Password, and click Log In. Note: You will be prompted for Duo multi factor authentication upon login. 

The first time you log into your Enterprise account, you will be prompted to set up and/or link a free, upgraded personal premium LastPass account. This is highly recommended. Follow the onscreen prompts to continue.

For more information on linking accounts, please visit the LastPass website.

Students, Faculty and Staff: How to Obtain LastPass Personal Premium*

*Note: Follow these steps if you are new to LastPass. If you are an existing personal LastPass user, see the section below entitled, "If you already have a personal LastPass account (Free or Premium)."

Premium

Students may register for a LastPass personal Premium account to store personal and University passwords. Faculty and staff may register for a LastPass personal Premium account to store personal passwords. Personal accounts must be registered with non-SJSU email addresses.

To create a new LastPass personal Premium account:

1. Visit the SJSU LastPass Portal at: https://lastpass.com/partnerpremium/sjsu

2. Enter your SJSU email address, as well as a personal email address, and click Submit. SJSU will not have access to any of the information stored in your personal account. Your @sjsu.edu email address is required at this step only so that LastPass can confirm your status as a SJSU student, faculty, or staff.

3. Next, you will see a "congratulations" notification:

4. You will then receive a confirmation email in your San José State University email inbox. Click the Create My Account link.

5. On the Create an Account page, enter a New Master Password* and Confirm Your Master Password. It’s also recommended that you enter a password Reminder. Click Create My Account. *Remember to make it a good, memorable password, as it will protect all your other personal passwords!

6. Click Confirm to redeem a free upgrade to LastPass personal Premium for your account.

7. You should see a notification that your account has been updated:

8. LastPass works as an extension of your browser to keep your passwords in a secure and encrypted environment. If the browser extension* is not already installed, install it. DO NOT CHOOSE "LASTPASS UNIVERSAL WINDOWS INSTALLER." THIS INSTALLER REQUIRES ADMINISTRATOR RIGHTS. INSTALLING THE EXTENSION ON INDIVIDUAL BROWSERS DOES NOT REQUIRE ADMINISTRATOR RIGHTS. Here is what the LastPass browser extension looks like:

*Please note that the preferred browsers to use with LastPass are: Chrome, Firefox, and Edge. Internet Explorer for Windows and Safari for Macs are NOT recommended.

9. You are ready to use LastPass! Click on the browser extension. Enter your Email, Master Password, and click Log In. For information on how to use LastPass, visit our "Resources" section below.

Students, Faculty and Staff: If You Already Have a Personal LastPass Account (Free or Premium)

1. Log into your personal LastPass Premium account and disable Auto-Renewal (if applicable).
2. Visit the SJSU LastPass Portal
3. Enter your SJSU email address, as well as a personal email address, and click Submit. This way, we can guarantee you receive the Premium version. If you already have the Premium version, one additional year of free Premium will be added to your account.
   
   
   
4. You will then receive a confirmation email in your SJSU email inbox. Click the Upgrade My Account link.
   
   
   
   
5. On the Activate Your Account screen click Log In.
   
   
6. Login to LastPass with your existing personal account credentials. Enter your personal Email, Password, and click Log In.
   
   
   
   
7. Click Confirm to redeem LastPass Premium.
   
   
   
8. You will see that your account status has been updated. If you have not already done so, download the LastPass browser extensions. DO NOT CHOOSE "LASTPASS UNIVERSAL WINDOWS INSTALLER." THIS INSTALLER REQUIRES ADMINISTRATOR RIGHTS. INSTALLING THE EXTENSION ON INDIVIDUAL BROWSERS DOES NOT REQUIRE ADMINISTRATOR RIGHTS.
   
   LastPass works as an extension of your browser to keep your passwords in a secure and encrypted environment. Download the extension for your browser. You can also download the LastPass mobile app to your mobile device to keep your passwords secure on the go. Visit your device’s app store to download the app.
   
   
   
   
9. Congratulations! You now have upgraded your personal account to LastPass Premium. You can check your account type by going to the browser extension and clicking on Account Settings. Here you can view your account type (it should read "LastPass Premium User" and the account expiration date).

• Can LastPass or SJSU see my personal data?

  • No. Your information is available to you and only you. LastPass vaults are encrypted with bank-level, AES 256-bit encryption. LastPass does not have a key to unlock your encrypted data.

• Can I import data from a different password manager?

  • Yes. Instructions on how to import data are available on the LastPass website.

• What happens if I already have a personal LastPass account? 

  • If you already have a personal LastPass account associated with a personal email address, you are entitled to upgrade to the Premium version at no cost. The Premium and Enterprise accounts may be linked, so you can access your personal account in the same view as your Enterprise account. The accounts are not joined, but are viewable in the same window. If you already have a paid-for, personal Premium LastPass account, one additional year of Premium will be added to your account for free.

• Is LastPass Enterprise or LastPass Premium mandatory?

  • The use of LastPass is not mandatory but is highly recommended by the SJSU IT Information Security team.

• What if I forget my master password for my Premium account?

  • If you cannot remember your Master Password, visit https://lastpass.com/forgot.php to enter your email and have your password hint sent to you. The information that LastPass will email you is only what you entered as your password hint when you registered your Master Password. Neither LastPass nor SJSU has access to your Master Password. LastPass cannot send you more than your password hint. If the hint does not enable you to remember your you may need to initiate the Account Recovery process.

• What if I already have a LastPass account associated with my SJSU email address?

  • If you already have a LastPass account associated with your SJSU email address, please continue with activating your SJSU Enterprise LastPass account. Once your account is associated with SJSU’s Enterprise services, please proceed with activating a personal LastPass account with a non-SJSU email address. University-related passwords should be stored in the Enterprise account, and personal passwords should be stored in the personal Premium account. You can link these two accounts together and migrate any personal account information from your University account to your new personal account. Visit the LastPass website for instructions on how to migrate the data.

• Can SJSU see my personal passwords?

  • No, the passwords stored in your personal account are only visible by you. SJSU nor LastPass can see them.

• What happens when I leave SJSU?

  • When you leave SJSU, you will no longer have access to the passwords stored in your Enterprise account, and your personal Premium account will be unlinked from your Enterprise account. You will continue to have access to the contents of your personal Premium vault.

• How can I use both my Enterprise and personal Premium accounts at the same time?

  • Within the LastPass browser extension, you have the option to link your personal Premium account to your Enterprise account. This does not merge the accounts, but instead makes your personal vault visible within your Enterprise vault. If you login with your personal account Master Password, you will only see your personal account information. If you login with your Enterprise Master Password, you will see your Enterprise account information, as well as another section containing your personal account information. For more information on linking accounts, visit the LastPass website.

• Where do I get the browser extension?

  • The browser extension can be downloaded from the LastPass website. DO NOT CHOOSE "LASTPASS UNIVERSAL WINDOWS INSTALLER." THIS INSTALLER REQUIRES ADMINISTRATOR RIGHTS. INSTALLING THE EXTENSION ON INDIVIDUAL BROWSERS DOES NOT REQUIRE ADMINISTRATOR RIGHTS. Please note that the preferred browsers to use with LastPass are: Chrome, Firefox, and Edge. Internet Explorer for Windows and Safari for Macs are NOT recommended.

• What do I get with a personal Premium account?

  • - Unlimited sharing of passwords, items and notes

    - 1GB encrypted file storage

    - Multi-factor authentication

    - Priority support

• What kind of encryption is used and where?

  • LastPass encrypts user data with the trusted algorithm Advanced Encryption Standard (AES) in Cipher Block Chaining (CBC) mode with a 256-bit key generated from each user’s master password. The AES 256-bit algorithm is widely-accepted as impenetrable and is the same military-grade encryption used by banks and the US military to secure Top Secret data. The encrypted user data is transported to LastPass servers using TLS.

• Can I share passwords with other users in my organization?

  • Yes, you can create folders of passwords to share with other users in your organization.

• Can I use it with my phone?

  • Yes, LastPass supports every major smartphone and tablet, including Android, iOS, BlackBerry, and Windows Mobile devices.

    More information is available here: https://helpdesk.lastpass.com/lastpass-mobile/

• My invitation to join LastPass Enterprise has expired. How do I request another invitation?

  • If your invitation has expired, you may request another invitation by emailing itservicedesk@sjsu.edu. 

• I need help or would like to enroll, who should I contact?

  • For Enterprise accounts: Contact the IT Service Desk itservicedesk@sjsu.edu

    For personal Premium accounts: Contact LastPass at: https://support.lastpass.com/home