Lastpass Program

By Nick Lewis, Internet2 Program Manager, Security and Identity

More campuses are looking to complement their existing information security and identity management efforts by adding the NET+ LastPass program, a trusted, easy-to-use password manager. The program has been growing for nearly five years, with 39 campuses now signed up.

There have been many changes during the last five years at campuses, Internet2, and LastPass. This includes the recent acquisition of LogMeIn (LMI) by Francisco Partners and Evergreen Coast Capital Corporation, which we have discussed with LMI. To keep up with all of these changes, as mentioned in the June 2019 NET+ update, the NET+ LastPass program is now being updated.

If your Master Password for LastPass is ever lost or forgotten, there are several account recovery methods to use to restore access to your Vault. If the recovery options below do not allow you to recover your Master Password, you will need to reset your LastPass account (to keep the same username) or create a brand new LastPass account and re-enter all of your data. Open the LastPass for Windows Desktop application and log in with your LastPass email and Master Password. Select Applications in the left navigation. Hover over the application, then click Launch. Click within the username field of your application, then hold CTRL + ALT + F on your keyboard.

LastPass keeps your information private, secure, and hidden (even from us). People Trust LastPass. Businesses Use LastPass. Average Rating on the Chrome Web Store. Based on 27,600 Reviews. LastPass is priced as a flat annual fee that is based on ‘actual campus size’ (FTEs + students). The package includes unlimited licenses of LastPass Enterprise for your faculty/staff and unlimited licenses of LastPass Premium for anyone within your community (anyone with a college-issued email address). Here is a tutorial on how to use LastPass 'password management service' in 2019. We will download and install LastPass for Firefox but this tutorial will wo.

We are sharing several program updates, action items for your campus, and a request for your feedback. Highlights include:

Lastpass Program
  • A draft of the updated NET+ LastPass agreement is ready for campus review. We have scheduled a townhall on April 7, 2020 at 2 p.m. ET to answer questions about the updated agreement. We look forward to hearing your questions and feedback.
  • All NET+ LastPass campuses will be transitioned to the updated program on their upcoming renewal.
  • Pricing is increasing to align with product improvements and the market. This is the first pricing increase for LastPass services through the NET+ program in five years. Campuses will have a 5 percent price increase when they transition to the updated agreement.
  • If your campus would like to take advantage of the current lower pricing for a new NET+ LastPass subscription, your campus will need to sign-up for the NET+ LastPass program before April 27, 2020.
  • If you would like to be involved in the NET+ LastPass service advisory group or in a service evaluation for LastPass MFA or Identity, please let us know.

Changes to the NET+ LastPass Program
We are also updating the NET+ LastPass program, in part to streamline operations for campuses signing up and making payments for the services. Your LastPass experience will remain the same, but campuses will now enter into the updated NET+ LastPass agreement directly with LMI. As part of this, payments will be made to LMI directly. Additionally, along with the core LastPass Enterprise service, we’re now including new LastPass products — LastPass Identity and LastPass MFA — to the program.

When creating an updated NET+ LastPass agreement, Internet2 and LMI started with the most recent version of the template NET+ agreement, and added in NET+ LastPass terms. This template is based on the seven years of campus feedback from the legal, procurement, and information security communities.

We have worked through the necessary changes to reflect how LMI does business. As noted above, your experience using LastPass will be no different, as core features and functionality included in the NET+ LastPass program, including premium-as-a-perk for linking enterprise and personal accounts, weren’t changed.

Benefits of the Agreement

Lastpass

A comprehensive data security addendum is one of the benefits of the updated NET+ LastPass agreement. The old security language has been showing its age and, given the importance of keeping data in LastPass secure, this was a major program improvement. LastPass now has a SOC2 and Internet2 worked with LMI to complete a HECVAT for LastPass that has been posted on the Cloud Broker Index. Campuses will need to review the agreement’s new security addendum and related information security provisions.

We are also seeking campus feedback on a couple of other areas of the agreement. These areas include: indemnification (Section 4.1 and throughout the agreement); limitations of liability (Section 4.2); customer data (Section 7 and Exhibit H-Security Addendum); customer restrictions (Section 8.2); LMI’s additional representations and warranties (Section 10.2—specifically on the revisions to the language for Section 508 of the Rehabilitation Act); and the LMI Privacy Policy, which addresses the usage and service data collected and used by LMI, and applies to all users (Exhibit C).

We would also like to get your feedback in regard to the 508/ADA compliance outlined in section 10.2. We have discussed this with LMI and this feedback will help them prioritize software development resources. The draft agreement was emailed to NET+ LastPass campus contacts for review and feedback.

Pricing Changes Coming

Pricing will increase for the first time in the five years of the NET+ LastPass program. Upon the transition, there will be a 5 percent price increase for campuses as specified in each campus’s current NET+ LastPass agreement.

New campuses signing up to the updated program will see a 15 percent fee increase above the current pricing rate to align with changes in the market and improvements to LastPass. To take advantage of the current lower pricing for a new NET+ LastPass subscription, your campus will need to sign up for the NET+ LastPass program before April 27th, 2020.
Transition Plan
We will start to work with campus subscribers to transition to the updated agreement on their renewal once the new NET+ LastPass campus agreement is complete. Although the contract is changing, no technical changes need to be made by current subscribers for the transition. Upon a current subscriber’s transition, LMI will email the campus’s NET+ LastPass contact to ensure a smooth transfer to the updated agreement.

NET+ LastPass Service Advisory Group

A service advisory group was created to contribute to the future direction of the NET+ LastPass program. This group will drive future community engagement and provide program oversight. We will start meeting monthly as we form the advisory group and get it running. We will work on how to best engage with the community and identify future needs. If you would like to be included in this group, please let us know.

NET+ LastPass Service Evaluation for LastPass MFA and Identity

Here is another exciting update: LastPass has expanded and now offers an identity solution, which includes password management, single sign-on and multi-factor authentication. The new LastPass business lineup now includes LastPass Enterprise, which offers password management and single sign-on, LastPass MFA, which offers biometric multi-factor authentication, and LastPass Identity, which includes LastPass Enterprise and LastPass MFA in one solution.

NET+ LastPass Enterprise went through service validation before starting the NET+ LastPass program. We would like to perform a NET+ service evaluation for the new LastPass MFA and LastPass Identity products to formally add them to the program. If you would like to be involved in this service evaluation, please contact us by March 31, 2020, so we can begin the scheduling.

We Need Your Feedback

NET+ programs are driven by the community, and therefore Internet2 needs and appreciates your feedback on the NET+ LastPass program updates. We are requesting campuses send us feedback on the update agreement by April 27, 2020, which will give campuses two months to review the updated agreement and provide feedback. We’ve scheduled a town hall on April 7th, 2020 at 2 p.m. ET / 1 p.m. CT/ 12 p.m. MT/ 11 a.m. PT for one hour to go over the updates and answer your initial questions.

Townhall Call-in Details

  • NET+ LastPass Community Consultation Call
  • Please join my meeting from your computer, tablet or smartphone: https://global.gotomeeting.com/join/272109277
  • You can also dial in using your phone. (For supported devices, tap a one-touch number below to join instantly.)
  • United States: +1 (872) 240-3212. One-touch: tel:+18722403212,272109277#
  • Access Code: 272-109-277

New to GoToMeeting? Get the app now and be ready when your first meeting starts.

If you have any questions or feedback you would like to discuss during the town hall, please contact me to add it to the agenda. A copy of the agreement was sent via email to the NET+ LastPass campus contacts, but please contact us for an additional copy as needed. We also welcome any feedback via email! We will work with LMI on any feedback received to finalize the program.

Contact Us

Where Is My Lastpass Vault

An email will be sent to NET+ LastPass campus contacts to notify them of the upcoming change and ask for their engagement with the details outlined.

If you have any questions, feedback, or concerns, please contact me with any questions!

Related articles and blog posts:

Is Lastpass Really Free

LastPass

Lastpass

LastPass helps your organization unlock password obstacles and protect you from cyberthreats.

LastPass is a password manager and single sign-on solution that makes it easy to log in to every web account while following best practices for password security. Through the custom-developed, affordable Internet2 NET+ LastPass packages, colleges and universities can offer school-sponsored password management to every person on campus.

Delete Lastpass Program

  • More devices, applications, networks and users increase the complexity of managing – and protecting – user access across your organization. While people just want to work efficiently, IT needs to promote secure online habits and protect the organization from cyberthreats.

    LastPass reduces friction for everyday users while increasing control and visibility for IT with an access solution that’s easy to manage and effortless to use. With single sign-on for IT’s top priority apps, and password management to capture and secure everything else, LastPass protects every access point and conveniently connects people to their work.

    Used and loved by millions, LastPass helps organizations of all sizes remove password obstacles and better safeguard their data.

    We encourage you to register for one of our weekly live trainings to learn more.

    Affordable and customizable turnkey packages

    LastPass and Internet2 have created turnkey, affordable packages designed to make it easy for you to provide secure password management to every person on campus – students, faculty, staff and even alums!

    Each Internet2 NET+ LastPass package includes unlimited quantities of the LastPass Enterprise and Premium services. Typically, LastPass Enterprise is deployed to faculty and staff, while LastPass Premium is offered to students, but the choice is yours to make.

    Give students, faculty and staff the power to secure their digital life:

    • Password saving and filling: LastPass reliably captures every password at login and fills them in during the next visit.
    • One master password: Remember the master password and forget the rest.
    • Universal access to the vault: Whether on a desktop, laptop, smartphone or tablet, accounts are backed up and synced.
    • Password generator: Create long, randomized passwords that protect against hacking.
    • Password sharing: Conveniently and safely share passwords and notes with anyone.

    Simplified deployment for IT admins:

    LastPass Enterprise offers centralized administrative tools to allow you to securely manage access at the organizational level for faculty and staff. User accounts are provisioned and managed by an Admin (or team of Admins) through a unified Admin Console. Employees are invited to activate their LastPass account and create their own master password. Accounts can be disabled or deleted by Admins when an employee leaves. Features specific to LastPass Enterprise include:

    > Admin Console
    The admin dashboard is IT’s command central, offering 100+ customizable security policies, detailed reporting, automated user management, and more.

    >*NEW* Combined SSO and EPM

    LastPass Enterprise combines SAML-based Single Sign-On and Enterprise Password Management in one solution, with one easy portal for users.

    > SSO Catalog of 1,200+ Apps

    With a catalog of 1200+ pre-integrated apps, each with an easy-to-follow configuration guide, it’s simple for IT to make critical services accessible in one convenient portal.

    > User Directory Sync
    Integrate with Active Directory, LDAP, Azure AD, Okta, OneLogin and custom APIs to automatically provision users and apply policies.

    > Security Controls
    100+ flexible security policies and multifactor authentication options to meet the needs of every organization.

    > Team Password Sharing
    Manage shared access to apps and web logins with Shared Folders and customized permissions for individuals or groups.

    > Linked Accounts
    Organizations can choose to allow employees to link a personal LastPass account to their work account for privacy and convenience. Admins can disable or delete the work account while employees can keep their personal account when they leave.

    LastPass Premium for Everyone on Campus

    Every individual on campus can sign up for a personal LastPass account using their school email address and then be automatically upgraded to LastPass Premium. LastPass Premium accounts are individual accounts that have no centralized control. Features specific to LastPass Premium include:

    > Password Sharing
    Share any single item with multiple people to give everyone convenient access.

    > Emergency Access

    Always ensure someone has access to your most important information, in case of an emergency or crises.

    > 1GB Document Storage

    Keep track of important files and safeguard your private information. Attach documents, PDFs, images, and more, all encrypted and backed up for secure, reliable access.

    Support for Deployment and Adoption

    LastPass offers streamlined fulfillment tools and educational resources to simplify a campus-wide rollout.

    Customized customer success support is provided to ensure you are getting maximum value out of your purchase.

    Security

    LastPass is a trusted Internet2 partner, and we take your security seriously. At every step, we’ve designed LastPass to protect what you store, so you can trust LastPass with your sensitive data.

    LastPass is SOC 2 Type II compliant. This detailed review of our controls and processes is a gold standard for confirming the security and reliability of LastPass.

    Plus, you can augment security for LastPass accounts with multifactor authentication.

  • LastPass is priced as a flat annual fee that is based on ‘actual campus size’ (FTEs + students). The package includes unlimited licenses of LastPass Enterprise for your faculty/staff and unlimited licenses of LastPass Premium for anyone within your community (anyone with a college-issued email address). This flat annual fee makes it easy to budget, and affordable for every school and team on campus.

    As a member of the Internet2 community, you are eligible for preferred pricing.

    For pricing questions please contact the LastPass sales team.

    Billing

    The subscription year is initially based on the 12-month period beginning the first of the month in which your service begins. In the first year, you will be billed according to the size of your institution within 30 days of account activation for your first 12 months. Subsequent year renewals will be annual based on your starting (anniversary) date. Your institution may choose to change the billing cycle after the first 12-month period.

    Systems

    Systems can leverage their collective buying power to save even more with the Internet2 NET+ LastPass packages. To buy for the entire System, simply total up the ‘Actual Campus Size’ of each member-institution and map this total to the appropriate tier on the table above. If only select schools choose to participate, then the individual package rates above shall apply based on the individual campus size of each participating institution.

    Internet2 Membership/InCommon Participation Status Changes

    If your institution is currently not an Internet2 member, but subsequently joins, your institution will be afforded the appropriate discounts upon the next LastPass renewal. If your institution is currently an Internet2 member, but subsequently drops membership, then the non-member rates will apply upon renewal.

    Cancellation

    Your campus may decide to cancel at any point during the subscription year which will cancel the automatic renewal at the end of the calendar year. No refunds are provided for during the current year of service; however, you will have until the end of the subscription term to migrate data out of LastPass as necessary. Upon termination, the university can delete all user accounts at their discretion. Barring deletion by the university, the Premium accounts will remain available to their owners, will automatically convert to LastPass Free accounts, and all Enterprise features will be deactivated.

    To subscribe to NET+ LastPass, please contact the LastPass sales team to start the sign-up process.

    Need help? Please contact [email protected]

  • Subscriber Information

    Eligible Subscribers:Higher education institutions in the United States.
    Sponsors:Duke University, University of Texas – Austin
    Email:[email protected]
    Contact:Nick Lewis

    Subscribers (44):

    • Auburn University
    • Bob Jones University
    • Brandeis University
    • Brown University
    • Butler Community College
    • California Polytechnic State University – San Luis Obispo
    • Caltech (California Institute of Technology)
    • Case Western Reserve University
    • Dartmouth College
    • Elon University
    • Grinnell College
    • Manchester University
    • Michigan Technological University
    • Penn State (Pennsylvania State University, The)
    • Piedmont College
    • Prairie View A & M University
    • Princeton University
    • San Jose State University
    • Teachers College – Columbia University
    • The Claremont Colleges, Inc.
    • University of Alabama – Tuscaloosa
    • University of California – Berkeley
    • University of California – Davis
    • University of California – Irvine
    • University of California – San Diego
    • University of Denver
    • University of Houston
    • University of Kansas
    • University of Maryland – College Park
    • University of Michigan
    • University of North Carolina – Chapel Hill
    • University of Oklahoma – Norman Campus
    • University of Pittsburgh – Pittsburgh Campus
    • University of Richmond
    • University of Rochester
    • University of Southern California
    • University of St. Thomas, Minnesota
    • University of Texas – Dallas
    • University of Texas Health Science Center – Houston
    • University of Virginia
    • University of Washington
    • Vanderbilt University
    • Vassar College
    • Wayne State University

Quick Links