If you were talking to someone whose organization is considering LastPass Enterprise, what would you say?
How would you rate it and why? Any other tips or advice?
I am satisfied with all aspects of LastPass expect that the changes are not immediately synced to the users. If you are over one thousand employees, I am not sure if you should use LastPass. If you have less then I would recommend this solution. I would rate this solution an eight out of ten.
On a scale of one to ten, I would rate LastPass either an eight or a nine because it's beneficial for us and it checked all the security audit boxes. We are talking about substantial organizations here. If you're tiny, then you can get away with a more straightforward setup.
I would recommend this product to a colleague or a coworker, either within the company or at a different company. This is based on how easy it is to use, and that the subscription is a fair price. I would rate this solution a seven out of ten.
I have known LastPass for so long that it feels natural. That said, I have some advice with respect to using it. First, it has to be secured with a security key. Next, ensure that you master the password sharing features. Finally, I suggest disabling the form fields because it tends to over-interpret what it should be doing. I prefer to have more control than that. The secure notes feature is very important, so be sure to familiarize yourself with it. I would rate this product eight and a half out of ten.
I would advise someone considering this or a similar solution to look at all of the key functionalities and see what you really need. If you're a small organization looking for a solution that will work but may not have the bells and whistles, LastPass is definitely for you. If you're a bigger organization and you want a lot more functionality and the bells and whistles, if you are willing to pay for it you can get it. It's really what suits you as an organization. You just need to determine what your functionality is and you go with that solution, because if I was a smaller organization we definitely would stick with LastPass. It does the job. I would rate LastPass an eight out of ten. It's a good product. There are a few little functionality improvements that could raise it to that next level.
Make sure you have two-factor authentication enabled. Not everyone in the company uses LastPass because a license is required. We have half to two-thirds of the company on it. The people on the company primarily using it are either in IT or production operations. We are SOC 2 compliant. Thus, we have to be able to demonstrate that we are pretty well locked down. We don't need staff to maintain it. The two biggest things with it are ordering more licenses and rotating passwords when someone leaves the organization. Most important criteria when selecting a vendor: * SOC 2 compliance * Uptime * SLAs * Terms of service * Indemnity * Functionality.
If you're looking for a password management solution that can hold your passwords and share passwords among employees, one that is cloud-based - and even without the internet you can still access passwords - and if you need a solution that that has the best price for the best product, LastPass is the one. But if you're a person who works in IT who wants to put passwords in privileged accounts and manage them with automation and everything that an enterprise password manager is required to do, LastPass is not the solution for you. You have to search for something else. In our organization, the roles of the LastPass users are just below executive level. Their decisions, and what they do, can influence the company. They manage LastPass themselves. In the Sharing Center is the Shared folder. If somebody is going to change a password, they need permission to do so. In our case, they all have permission to change a password. If a password is changed, it's changed. That's it. I don't really see the need for a person to maintain LastPass. The two main reasons my company cannot move to LastPass are because of the synchronization issue and the poor communication. I rate LastPass at eight out of ten. It offers everything you need for a password management solution. The con that makes it less than a ten is the communication with support and sales. Normally, you just contact sales at a company and you can reach them easily, to start gathering information, to talk with them about your plan and, sometimes, to get a demo, based on your plan. I didn't have that with LastPass.
The big pro is it was one of the only ones, when I looked two years ago, that had the ability to hide passwords and autofill them, from different users. That's the big feature we've needed. That's why we went with LastPass. I would rate it about seven out of 10. It has a lot of good features. But being the most expensive on the market definitely does not make it the best of the best, or the prime. If it had the best features and the best price, or a competitive price, it would be great. But LastPass is now probably the most expensive enterprise password manager on the market, so it's hard to give it a higher rating. But it does have a lot of good features.
You should make sure you know what you are doing before you sync with AD, or you could have a mess on your hands to clean up.