Productivity - Setup Guide

How to set up LastPass

Otto's honest, no-fluff walkthrough. Every step here is what we'd actually do if we were sitting at your keyboard. Real gotchas first, real steps second, and a link to the personalized version at the bottom.

Read these before you start

• August 2022 breach: attackers exfiltrated encrypted customer vault backups. URLs stored in vaults were unencrypted; passwords, notes, and form fills were encrypted but subject to offline brute-force attack. Users with strong master passwords (14+ chars, PBKDF2 iterations at 100k+) are likely safe; users with weak master passwords or older accounts with low iteration counts are at ongoing risk [source: blog.lastpass.com/2022/12/notice-of-recent-security-incident].
• The company was accused of downplaying the breach severity for weeks before full disclosure, further damaging trust.
• LastPass's PBKDF2 iteration count default was upgraded to 600,000 after the breach, but older accounts remained on lower iteration counts unless users manually upgraded. Many did not.
• Free tier restriction to a single device type (2021 change) makes it useless for most people (you cannot use it on your phone AND your laptop on free).
• Migration away is easy: LastPass has a Chrome extension export, and Bitwarden and 1Password have native LastPass importers.

The 7-step setup

1. 1

   Create your LastPass account

   Sign up at the link below. Free tier available - no card required. Use your business email so you can invite teammates later.

   Open LastPass signup
2. 2

   Complete the initial onboarding

   Skip the marketing questionnaires when you can. Fill only the fields that actually configure the product - name, timezone, your first workspace or project. If LastPass pushes you into a setup wizard, take it - it usually accelerates the first productive session.

3. 3

   Connect your existing tools

   Wire LastPass into the rest of your stack. The integrations that most people set up first: SSO (SAML, OIDC on Business), Active Directory, Azure AD, Okta, Duo, browser extensions for all major browsers, mobile apps, desktop apps. CLI exists but less mature than Bitwarden's.. Do these before importing data - clean integration first, data second.

4. 4

   Import your existing data (only what you'll actually use)

   Do NOT bulk-import everything. Import the last 30 days of the ONE workflow you're moving over first. Prove it works. Then import more. Big-bang migrations are how LastPass deployments die in month 3.

5. 5

   Set up your first real workflow

   Pick the single most-frequent task you'll do in LastPass - the daily-driver workflow. Configure it end-to-end. Use it live for a week. Do not touch any other feature yet. Adoption failure comes from teams trying to use everything on day one instead of the one thing that actually pays.

6. 6

   Add your team (if applicable) and set access

   Once your solo workflow works, invite one teammate at a time. Watch them use it. The friction points you missed are the ones they hit. Fix those before scaling to more users. Never invite 20 people at once - you'll get 20 confused people and 0 useful feedback.

7. 7

   Compound with the right pairings

   Do NOT recommend LastPass to new customers. Recommend Bitwarden (free, open source, better free tier, no breach history) or 1Password (paid, refined UI, strong for teams) instead. If a client is currently on LastPass, recommend migration to Bitwarden with the note about master-password strength and iteration counts. Explain the 2022 breach honestly if asked. This brief exists for coverage; it should almost never be a positive recommendation.