One of the most useful features offered by LastPass is the ability to securely share usernames and passwords with other people.
Sharing Passwords within Clark
Whether passwords need to be shared with one Clarkie or a whole Clark department, the best method for sharing passwords is by using Shared Folders. Passwords can be stored within a Shared folder and access to the folder can be restricted to certain individuals.
Anyone can create a shared folder and can manage access to the passwords within it. By default, any individual added to a shared folder has access to view and edit all passwords within the folder, though you can modify this. Additionally, if you want to just share access to a single password in the folder, that is possible too.
Here are some handy links to LastPass instructions on Shared Folders:
- How to create a shared folder
- How to invite users to a shared folder
- How to manage/edit/remove user access to shared folders
Sharing Passwords outside Clark
It is possible to share passwords to individuals outside the Clark community. To prevent accidental sharing of large quantities of passwords to outside parties, sharing Shared Folders to parties outside of Clark is not permitted. Instead, each password must be individually shared. An important caveat to note is that passwords within Shared Folders cannot be shared on their own and must first be “cloned” to a non-shared folder by right-clicking on the password and selecting “clone”. Keep in mind that the cloned password is not linked to the password in the shared folder, so changes to either will need manual updates. We recommend you share passwords with people outside of the Clark community for a limited period of time. Once the recipient has the credential they need, sharing should be disabled.
How NOT to share sensitive passwords
- Never share passwords by email
- Never share passwords by text message
- Never share your personal Clark password or MFA information with anyone
- Never leave passwords recorded in unsecured areas. Examples: post-it notes, white boards, shared digital resources such as OneNote or Word documents on a file share, or any locations where unauthorized individuals may have access
- Avoid recording or sharing passwords in third party applications such as chat windows, browser plug-ins, Outlook, Dropbox, Google Docs, or other systems not explicitly designed for password storage
- Immediately change passwords that may have been compromised, particularly if they were subjected to any of the insecure sharing methods above