LastPass Business Reviews

Our primary use case is for enterprise password management.

• It increased security around password management for teams and collaborative efforts with external vendors. 
• A reduction in the number of sensitive passwords stored insecurely on our local systems.

For our company:

• Enterprise admin console
• Reporting
• Integration with Active Directory

• It needs more flexibility/functionality around making enterprise changes. 
• It needs more granular admin capabilities for a global distributed company. 
• The ability to set up an account expiration limit/date would be very useful.

We have had some issues, such as our 'security score bug' and various minor issues. Our biggest issue over the years was around the stability of the LDAP sync to AD. This now seems to have been largely resolved.

There are some challenges around global administration.

Technical support is generally pretty good, but they are not easy get on the phone with quickly.

We did not previously have an enterprise solution. Various groups used ad hoc systems.

The initial setup was fairly straightforward.

You do not have to purchase licenses for your entire organization. You can scale as adoption grows.

We did not evaluate other solutions.

You should make sure you know what you are doing before you sync with AD, or you could have a mess on your hands to clean up.

Primary usage is password management and sharing of credentials.

• Sharing passwords
• Deactivating users
• Controlling company logins
• Import existing credentials from different file formats.

Off-boarding of people is easy without changing shared account passwords.

Sharing Passwords with new employees for quick onboardings.

There is no group inheritance.
The management through the plugin is poor. It consumes tons of client resources especially as an administrator.
The plugin crashes from time to time.
URL recognition is difficult especially when adding new credentials, LastPass saves the Account creation url. Also when resetting a password, Lastpass recognizes the password change, great, but it also adds the password reset URL to the site. So when using the plugin and navigating to the saved url, you always end up in the password reset URL of the respective service.
As well you need to double check the settings. You have 3 options (hide passwords, read only, administrator) but when sharing a folder with a group or user, the check boxes randomly change, so you need to open the share settings again to check the checkboxes.
All passwords can be read if you are familiar with input fields and their manipulation. This is something LastPass might not be responsible but there must be an implementation if the input field is not "Password" that it does not fill in then password.
Further more there are several websites with Javascript features in the password field like "show pass" or other fancy features which overlay the Lastpass plugin and deny the Lastpuss button in the input field to be used.
The search is poor, got better with the recent update for chrome browsers.
credentials are not sorted by letter.
You cant share single credentials out of a folder to individuals. So either you extract the single entry into a new folder and share it with former group and single person or you share the whole folder to the user. This makes it a bit messy and having in mind that the plugin is really really slow you rather want to have fixed folders with fixed groups on the folder and add indivduals in the enterprise panel --> groups section. With the limitations mentioned you end up with almost same amount of groups as users in your account.

We have been using this service for two and a half years now.

Updates for browsers are not as regular as security issues arise.

We have had stability issues several times.

The more credentials you have the slower this app is.

Support answers quickly when enterprise customers call/write. Solutions are sometimes poor and un-reproducible. For example, they ask if you can logoff, login, or restart your computer which have no effect on the error reported. As well there are problems with shared credentials not available to allowed shared users and also available to not allowed users. After filing a ticket, magically it is solved without any feedback from support why this happened. This makes it really dangerous if you trust this software and by accident recognize on a client machine that the user has access to credentials which shouldnt be in the vault of the user.

We used keepass before.

Why we switched: Because we believed in feature and usage improvement, as well as more credential control.

The installation was not at all straightforward. Naming is hard, URL recognition is painful, and auto-fill is freaking people out. Imagine you have 100 different logins for Google (Adwords, Analytics, personal, merchant), and LastPass always fills out the first match, based on the URL.

Inhouse.

If you import from sources like XML, keepass, CSV files be sure to clean the import files, this reduces the adjustments in the slow tool itself. So take some extra effort to have clean files when moving to LastPass otherwise you end up manipulating each individual entry.

We have not evaluated other options, we were more or less early adopters and haven't tried other solutions.

Consider picking another solution.