Configuring LastPass Password Manager

Ronald van Erven Version 1.0

Phone: 61 8 6304 3808E: r.vanerven@ecu.edu.auW: ecu.edu.au/infosec LastPass is part of LogMeInInc

Cybercriminals are increasingly targeting businesses to get access to company information through the practice of phishing.

Multi Factor Authentication (MFA) and LastPass Password Managers are complimentary security measures to mitigate the risk ofcredentials being stolen. MFA is also sometimes referred to as Two Step Verification (2SV) or Two Factor Authentication (2FA).

There are many password managers available. ECU has selected LastPass as it is currently the industry standard.

Not only financial institutions are using MFA. Also google, twitter and facebook advise users to use strong passwords incombination with MFA.

Why MFA and a Password Manager?

Microsoft Authenticator Google Authenticator Lastpass Authenticator Lastpass Password Managerwww.lastpass.com

Source: google.com

Why MFA and a Password Manager?

Lastpass Authenticatorwww.lastpass.com Lastpass Password Manager

www.lastpass.com

ECU bought LastPass enterprise and ECU staff is entitled to a free premium subscription to separate ECU and personal passwords

Install the mobile app, to have access to all your passwords where ever you are.

This instead of having them on a sticky note, an address book or excel sheet.

Once configured you will receive an invitation from LastPass with 3 steps

Once configured you will receive an invitation from LastPass with 3 steps

ecu_email_address@ecu.edu.au

Once configured you will receive an invitation from LastPass with 3 steps

Getting started – Access Your Vault

Press Log In

Getting started – Access Your Vault

Chrome

Firefox

Safari

Do you have the latest Firefox version? Older Firefox versions do not work with LastPass. Check with the servicedeskIf you can upgrade.

Check the working of the browser extension, If it is greyed out, you need to log in.

Ensure your browser extension is working in order to recover your account if you forgot your master password.

Download it from the ECU Software Center. Of course, Microsoft internet explorer and edge are available as well!

Getting started – Access Your Vault

Check if your browser extension is working

Getting started – Access Your Vault

ecu_email_address@ecu.edu.au

Getting started – Access Your Vault

Take the tour

Get started via instruction video’s on the LastPass website

Check your email address.

Make sure you are an Enterprise user. If not contact the IT ServiceDesk

Getting started – Access Your Vault

Create and link your free premium personal LastPass account

Get started via instruction video’s on the LastPass website

Three things to remember when using LastPass:

(1) Configure a recovery phone number(2) Enable Multi Factor Authentication(3) Use the security challenge to improve your password quality

Configure a recovery phone number

Access to more configuration options

TIP 1. Configure a recovery phone number

• Click the GENERAL tab• Scroll down• Go to RECOVERY PHONE option• Enter your mobile phone number• Press UPDATE

TIP 2. Configure Multifactor Authentication (MFA)

TIP 2. Configure Multifactor Authentication (MFA)

Press a pencil to configure your preferred authenticatorFollow the instructions.

TIP 3. Use the security challenge to improve your password quality

Click to access the Security Challenge

TIP 3. Use the security challenge to improve your password quality

Top Tips:

• Try to improve security by using passwords of 16 characters or more

• Monitor if your account has been found on the internet.

or find us at ecu.edu.au/infosec

Contact the IT Service Desk:+61 8 6304 6000 or itservicedesk@ecu.edu.au

The InfoSec TeamEnabling safe digital business is our goal

Karen Owens Wade Hams Ronald van ErvenYvonne Wallwork Andy Tilbury Allan Cantlay