LastPass Password Management Software

About LastPass

San Jose State University has partnered with LastPass to supply complimentary LastPass password management accounts to students, faculty, and staff. LastPass is a secure password management tool that can create and store passwords in an encrypted environment. LastPass is available as a browser add-on and a mobile device app. Please note that there are multiple versions of LastPass available on the market. The two versions that will be offered through SJSU are the “Enterprise” and “Premium” versions.

LastPass Versions* Use Cases
Enterprise Faculty and staff should use this version to store passwords used for University business.

Premium

(available for public purchase but free to faculty, staff, and students)

Students should use this version to store both University passwords and personal passwords. 

Faculty and staff should use this product to store personal passwords. Please note that your personal Premium account and Enterprise accounts can be easily linked. This allows you to keep your vault entries all in one place, while both accounts remain separate. Your personal and University Enterprise accounts are private (your system administrator cannot view your account data), and if you ever leave the University, your personal account remains active and accessible to you.

 

*LastPass offers a free version of its product – please do not use this to store passwords used for University business.

For details about the differences in the functionality of each product, please visit the LastPass website.

 


Faculty & Staff:  How to Obtain LastPass Enterprise

Enterprise:  Faculty and staff will receive an email invitation to establish an Enterprise LastPass account to store passwords used for University business. Faculty and staff may also register for a LastPass personal Premium account to store personal passwords (you will be prompted to register during the Enterprise enrollment process). Personal accounts must be registered with non-SJSU email addresses (see “Premium” section below).

  1. In the “LastPass Account Created” email invitation, click on the “Complete the Activation of your Enterprise Account” link. If you have not already received an invitation to claim your LastPass Enterprise account or your invitation has expired, you may request an account by emailing itservicedesk@sjsu.edu.

  2. Next, depending on the browser you are using and whether you already have the browser extension, you will get a slightly different setup experience (the following steps may appear in a different order for you). Walk through the additional setup screens to:

  3. Add the LastPass browser extension(s)* by visiting the LastPass download center:  LastPass works as an extension of your browser to keep your passwords in a secure and encrypted environment. If the browser extension is not already installed, install it. You will be prompted to install the browser extension during setup (from https://www.lastpass.com/download).

    DO NOT CHOOSE "LASTPASS UNIVERSAL WINDOWS INSTALLER."  THIS INSTALLER REQUIRES ADMINISTRATOR RIGHTS. INSTALLING THE EXTENSION ON INDIVIDUAL BROWSERS DOES NOT REQUIRE ADMINISTRATOR RIGHTS. Once installed, log in to the LastPass extension. Here’s what the LastPass browser extension looks like:  
    Browser Extension Example Image

    *Please note that the preferred browsers to use with LastPass are:  Chrome, Firefox, and Edge. Internet Explorer for Windows and Safari for Macs are NOT recommended.

  4. To function properly, LastPass must have permission to access and collect web addresses (URLs). Without permission, LastPass can't save and fill your credentials to your sites. When prompted to accept permissions, click "Accept."

  5. Click on the browser extension. Enter your SJSU ID and SJSU Email/Account Password, and click Log In.

  6. Authenticate Using Duo:  Your LastPass account is protected with Duo multi factor authentication and Single Sign On just like your SJSU account. 
  1. Login and start using LastPass!  Click on the browser extension. Enter your SJSU ID and SJSU Password, and click Log In. Note: You will be prompted for Duo multi factor authentication upon login.

The first time you log in, you will be prompted to set up and/or link a free, upgraded personal premium LastPass account. This is highly recommended. Follow the onscreen prompts to continue.

For more information on linking accounts, please visit the LastPass website.


Faculty & Staff:  Setting up LastPass Enterprise if you have an existing personal account using your sjsu.edu email address

  1. Log into your existing account using the LastPass browser extension.

  2. In the “SJSU & LastPass” email invitation, click on the “Complete the Activation of your University Enterprise Account” link. (If you have not already received an invitation to claim your LastPass Enterprise account or your invitation has expired, you may request an account by emailing security@sjsu.edu.)

  3. On the Confirm Add page, click Yes, add me!  You will see an Account Updated message.

  4. Logout of the LastPass browser extension and then log back in.

  5. Your LastPass account is protected with Duo multi factor authentication and will have the same login credentials and process as your SJSU One Account.

  6. You are now ready to log back in and use LastPass!  Click on the browser extension. Enter your SJSU ID, SJSU Password, and click Log In. Note: You will be prompted for Duo multi factor authentication upon login. 

The first time you log into your Enterprise account, you will be prompted to set up and/or link a free, upgraded personal premium LastPass account. This is highly recommended. Follow the onscreen prompts to continue.

For more information on linking accounts, please visit the LastPass website.


Students, Faculty, & Staff:  How to Obtain LastPass Personal Premium*

*Note:  Follow these steps if you are new to LastPass. If you are an existing personal LastPass user, see the section below entitled, “If you already have a personal LastPass account (Free or Premium).”

Premium: Students may register for a LastPass personal Premium account to store personal and University passwords. Faculty and staff may register for a LastPass personal Premium account to store personal passwords. Personal accounts must be registered with non-SJSU email addresses.

To create a new LastPass personal Premium account:

  1. Visit the SJSU LastPass Portal at: https://lastpass.com/partnerpremium/sjsu

2. Enter your SJSU email address, as well as a personal email address, and click Submit. SJSU will not have access to any of the information stored in your personal account. Your @sjsu.edu email address is required at this step only so that LastPass can confirm your status as a SJSU student, faculty, or staff.

SJSU LastPass Signup Page

3. Next, you will see a “congratulations” notification:

LastPass Wecome Message

4. You will then receive a confirmation email in your San Jose State University email inbox. Click the Create My Account link.

LastPass Premium Confirmation Email

5. On the Create an Account page, enter a New Master Password* and Confirm Your Master Password. It’s also recommended that you enter a password Reminder. Click Create My Account. *Remember to make it a good, memorable password, as it will protect all your other personal passwords!

LastPass Master Password Setup

6. Click Confirm to redeem a free upgrade to LastPass personal Premium for your account.

Redeem Premium Account

7. You should see a notification that your account has been updated:

Install Browser Extension

8. LastPass works as an extension of your browser to keep your passwords in a secure and encrypted environment. If the browser extension* is not already installed, install it. DO NOT CHOOSE "LASTPASS UNIVERSAL WINDOWS INSTALLER." THIS INSTALLER REQUIRES ADMINISTRATOR RIGHTS. INSTALLING THE EXTENSION ON INDIVIDUAL BROWSERS DOES NOT REQUIRE ADMINISTRATOR RIGHTS. Here is what the LastPass browser extension looks like:

Browser Extension

*Please note that the preferred browsers to use with LastPass are:  Chrome, Firefox, and Edge. Internet Explorer for Windows and Safari for Macs are NOT recommended.

9. You are ready to use LastPass!  Click on the browser extension. Enter your Email, Master Password, and click Log In. For information on how to use LastPass, visit our “Resources” section below.

 


 

Students, Faculty, & Staff:  If you already have a personal LastPass account (Free or Premium)

  1. Log into your personal LastPass Premium account and disable Auto-Renewal (if applicable).
  2. Visit the SJSU LastPass Portal at: https://lastpass.com/partnerpremium/SJSU.

2. Enter your SJSU email address, as well as a personal email address, and click Submit. This way, we can guarantee you receive the Premium version. If you already have the Premium version, one additional year of free Premium will be added to your account.

SJSU LastPass Signup Page

3. You will then receive a confirmation email in your SJSU email inbox. Click the Upgrade My Account link.

Upgrade Premium Account

4. On the Activate Your Account screen click Log In.

Log In Link

5. Login to LastPass with your existing personal account credentials. Enter your personal Email, Password, and click Log In.

Login For Premium

6. Click Confirm to redeem LastPass Premium.

Redeem LastPass Premium

7. You will see that your account status has been updated. If you have not already done so, download the LastPass browser extensions. DO NOT CHOOSE "LASTPASS UNIVERSAL WINDOWS INSTALLER."  THIS INSTALLER REQUIRES ADMINISTRATOR RIGHTS. INSTALLING THE EXTENSION ON INDIVIDUAL BROWSERS DOES NOT REQUIRE ADMINISTRATOR RIGHTS.


LastPass works as an extension of your browser to keep your passwords in a secure and encrypted environment. Download the extension for your browser. You can also download the LastPass mobile app to your mobile device to keep your passwords secure on the go. Visit your device’s app store to download the app.

Install Browser Extension

8. Congratulations!  You now have upgraded your personal account to LastPass Premium. You can check your account type by going to the browser extension and clicking on Account Settings. Here you can view your account type (it should read “LastPass Premium User” and the account expiration date).

Account Settings

 


LastPass FAQs

Can LastPass or SJSU see my personal data?

No. Your information is available to you and only you. LastPass vaults are encrypted with bank-level, AES 256-bit encryption. LastPass does not have a key to unlock your encrypted data.

Can I import data from a different password manager?

Yes. Instructions on how to import data are available on the LastPass website.

What happens if I already have a personal LastPass account? 

If you already have a personal LastPass account associated with a personal email address, you are entitled to upgrade to the Premium version at no cost. The Premium and Enterprise accounts may be linked, so you can access your personal account in the same view as your Enterprise account. The accounts are not joined, but are viewable in the same window. If you already have a paid-for, personal Premium LastPass account, one additional year of Premium will be added to your account for free.

Is LastPass Enterprise or LastPass Premium mandatory?

The use of LastPass is not mandatory but is highly recommended by the SJSU IT Information Security Office.

What if I forget my master password for my Premium account?

If you cannot remember your Master Password, visit https://lastpass.com/forgot.php to enter your email and have your password hint sent to you. The information that LastPass will email you is only what you entered as your password hint when you registered your Master Password. Neither LastPass nor SJSU has access to your Master Password. LastPass cannot send you more than your password hint. If the hint does not enable you to remember your you may need to initiate the Account Recovery process.

What if I already have a LastPass account associated with my SJSU email address?

If you already have a LastPass account associated with your SJSU email address, please continue with activating your SJSU Enterprise LastPass account. Once your account is associated with SJSU’s Enterprise services, please proceed with activating a personal LastPass account with a non-SJSU email address. University-related passwords should be stored in the Enterprise account, and personal passwords should be stored in the personal Premium account. You can link these two accounts together and migrate any personal account information from your University account to your new personal account. Visit the LastPass website for instructions on how to migrate the data.

Can SJSU see my personal passwords?

No, the passwords stored in your personal account are only visible by you. SJSU nor LastPass can see them.

What happens when I leave SJSU?

When you leave SJSU, you will no longer have access to the passwords stored in your Enterprise account, and your personal Premium account will be unlinked from your Enterprise account. You will continue to have access to the contents of your personal Premium vault.

How can I use both my Enterprise and personal Premium accounts at the same time?

Within the LastPass browser extension, you have the option to link your personal Premium account to your Enterprise account. This does not merge the accounts, but instead makes your personal vault visible within your Enterprise vault. If you login with your personal account Master Password, you will only see your personal account information. If you login with your Enterprise Master Password, you will see your Enterprise account information, as well as another section containing your personal account information. For more information on linking accounts, visit the LastPass website.

Where do I get the browser extension?

The browser extension can be downloaded from the LastPass website. DO NOT CHOOSE "LASTPASS UNIVERSAL WINDOWS INSTALLER."  THIS INSTALLER REQUIRES ADMINISTRATOR RIGHTS. INSTALLING THE EXTENSION ON INDIVIDUAL BROWSERS DOES NOT REQUIRE ADMINISTRATOR RIGHTS. Please note that the preferred browsers to use with LastPass are:  Chrome, Firefox, and Edge. Internet Explorer for Windows and Safari for Macs are NOT recommended.

What do I get with a personal Premium account?

  • Unlimited sharing of passwords, items and notes
  • 1GB encrypted file storage
  • multi factor authentication
  • Priority support

What kind of encryption is used and where?

LastPass encrypts user data with the trusted algorithm Advanced Encryption Standard (AES) in Cipher Block Chaining (CBC) mode with a 256-bit key generated from each user’s master password. The AES 256-bit algorithm is widely-accepted as impenetrable and is the same military-grade encryption used by banks and the US military to secure Top Secret data. The encrypted user data is transported to LastPass servers using TLS.

Can I share passwords with other users in my organization?

Yes, you can create folders of passwords to share with other users in your organization.

Can I use it with my phone?

Yes, LastPass supports every major smartphone and tablet, including Android, iOS, BlackBerry, and Windows Mobile devices. More information is available here: https://helpdesk.lastpass.com/lastpass-mobile/

My invitation to join LastPass Enterprise has expired. How do I request another invitation?

If your invitation has expired, you may request another invitation by emailing itservicedesk@sjsu.edu

I need help, who should I contact?

For Enterprise accounts:  Contact the IT Service Desk itservicedesk@sjsu.edu

For personal Premium accounts:  Contact LastPass at: https://lastpass.com/supportticket.php