Security

Goal: To have an effective and reliable tool for managing and sharing secure passwords for your entire team.

Ideal Outcome: Your business activity will be easier to manage since you will be able to create different passwords for various accounts and manage them from the same place. Also, you will be more effectively protected against hacking.

Pre-requisites or requirements:

N/A

Why this is important: Many people tend to use the same password for all their accounts and, usually, it is something very easy to remember. In other words, you are using insecure passwords which could mean loads of trouble in the future. It is important to have a way of managing these passwords and sharing them with your team members while staying safe from external threats.

Where this is done: LastPass & 3rd party apps (accounts you are signed up to).

When this is done: Once, for your existing accounts and every time you sign up on a new account.

Who does this: You do it. Nobody else can do it for you.

• Environment setup

1. Go to www.lastpass.com

• Sign Up for LastPass teams

The first task is to create a team account on LastPass. You can either choose a free 14-days trial account or a paid one.

1. Click here to sign up on LastPass.
2. Once you have activated your trial (or your paid account), the first thing you need to do is set up a Master Password (don’t get kinky, it’s not about that).

3. The Master Password should be unique and easy to remember—this will be, essentially, one of the only passwords you will need to remember from now on (LastPass will take care of the rest.) Check out this useful guide to learn how to create a powerful, yet easy to remember password.
4. After you have set your Master Password, download the LastPass extension for your browser from here.

• Create secure passwords with LastPass

During this task you will learn how to use LastPass with both new and old accounts.

1. Try using LastPass extension for a new account.
2. Choose an online app and create an account. In our case, we will create a new Buffer account.
3. Enter your email address.
4. Click on the browser extension of LastPass ⇒ “Generate password”, then copy the password.

5. Paste the newly generated password and create your account.
6. Next, you will see LastPass popup asking you if you want to add your account to the app. Click “Add”.

7. For your existing accounts where you have unsecured or shared passwords, you will need to update them.
8. Go to one of your existing accounts. For this exercise, we will use our Sumo account.
9. Click on your account settings.
10. Click on the LastPass browser extension ⇒ “Generate secure password”, then copy the new password
11. Update your password.

12. The LastPass popup will appear. Click “Add” to add your account to LastPass or “Update” if your account is already in LastPass.

• Log in to your accounts with LastPass

Choose one of your accounts (a new one or an updated one) to log in with LastPass. For this part we will use the Buffer account we have just created.

1. Go to the website where you want to log in.
2. In the form field you will see the LastPass icon. Click on it and choose your account.

3. Select the account you want to log in with.
4. LastPass will automatically fill in the email & password fields for you.

• Sharing login information with your team

The last part in learning how to use LastPass is finding out how to share login information with the members of your team.

1. Firstly, you will need to create a shared folder in LastPass.
2. Open your LastPass dashboard
3. Go to the “Sharing Center” and click on “Add a new folder” at the bottom right of your page.

4. Use this new folder to share accounts that several people need to have access to. For example, it wouldn’t be of any use to have your social media accounts and your billing app in the same folder so we recommend you to group these folders by departments in your company and name them accordingly. We will name ours “Social Media”.

5. Create the folder.
6. Once you have the folder, it’s time to manage it and invite your team members to it.
7. Click “Manage” to open the settings for your folder.
8. Invite users (your team members) and send them an email (tick the “Send email” box to enable this option). Before sending the invite, make sure you have ticked the appropriate boxes:

• “Read Only” access is for the users you want to enable to just use the logins in the folder.
• “Admin” access is for the users you want to enable to add and edit the logins in the folder.

9. After you click “Invite”, there are two options:

• The team member you have invited to your shared folder is not a LastPass user, in which case they will be prompted to join.
• They are already LastPass users, in which case they will be prompted to join the shared folder.

10. After you are done with inviting your team members to your LastPass folder, it’s time to add the sites to the folder.
11. In the LastPass dashboard, go to “Sites”.
12. Select the accounts you want to add to the shared folder.

13. Click on “Actions” ⇒ “Move to folder” and choose your folder. In our case, it’s “Social Media” shared folder.

14. Save the changes.

And that’s it. Everybody with access to the LastPass shared folder will also have access to these accounts and you will be able to manage passwords more easily and securely.