Information Technology Services
UCOP Password Management
What is a password manager?
A password manager is an application that stores, retrieves, and manages complex passwords in a safe and encrypted format. Most password managers work as browser plug-ins and will automatically enter login information and passwords to sign you into your online accounts.
UCOP uses LastPass for password management. You no longer must remember multiple passwords because LastPass remembers them for you. This makes it easy to have unique passwords for every account you have.
According to a Verizon Data Breach Investigation report, 81% of data breaches are caused by poor credential (username and password) management. A password manager is the next step, after DUO multifactor authentication, in securing UCOP's credentials and improving our security posture.
Account breaches can happen when using weak passwords, reusing old passwords, or sharing passwords across accounts. LastPass helps prevent that. With LastPass it's easy to have a strong, unique password for every online account and improve security.
In addition to passwords, LastPass can also be used to store secure notes and software keys.
Why use a password manager?
A password manager makes your internet experience easier and safer. With a password manager, it's easy to have a strong, unique password for every online account and improve your online security. LastPass stores login information for various accounts and automatically enters them into web forms to save you time.
This helps prevent:
- The need to remember multiple passwords
- Poor password behavior such as low complexity or password reuse
- Cyberattacks such as keystroke logging
Why LastPass?
- Your UCOP credentials are all you need to remember to access all your account credentials! It’s like having a UCOP login for the entire internet!
- You can bring your passwords with you between the web on your desktop and mobile. The passwords on one platform sync in real time on other platforms. This means, for example, if you change a password for a web page on the web browser on your PC, it will automatically update the password on your tablet and mobile LastPass account.
- LastPass is compatible with every major operating system: Windows, Mac OSX and Linux. Note that UCOP only officially supports LastPass on Microsoft Edge, Firefox, Google Chrome and Safari on PC’s and Macs.
- LastPass is secure. The latest algorithms are used to encrypt passwords. LastPass never sees your passwords in plain text and your primary password never leaves your machine.
- Your passwords are encrypted and decrypted at the device level. LastPass can’t see them, and neither can anyone in Information Technology Services (ITS). Even if your LastPass data is intercepted or compromised, your passwords are still safe.
- DUO multifactor authentication provides an extra layer of security for your LastPass account.
- LastPass can also securely store other critical pieces of information such as notes and small pictures, including work-related travel documents and itineraries, software keys, etc. We do not recommend storing information such as bank accounts, social security numbers, etc.
Training Videos
Several training videos are available for LastPass. None of them is more than 15 minutes. We recommend watching one or more videos if you wish to learn some of the more advanced features in LastPass. Free live training is also available.
- LastPass Business User Demo: A general introductory video for business users
- Live, Recorded and Self-paced training: Learn LastPass your own way. Note: registration is required for this training
- Generating Secure Passwords: best practices for creating and using secure passwords.
- Sharing: how to share logins among team members. This is useful for systems that require administration.
- Secure Notes: in addition to securely storing passwords, LastPass can store secure notes. This introductory video explains how.