In short: LastPass is a cloud password manager for businesses. Forever Systems supplies LastPass Business, licensed per user, plus the LastPass MFA add-on, which extends multi-factor authentication from the vault to apps, VPNs, workstations and identity providers. We help you pick the right set-up, roll it out and manage users and renewals on one account.
What LastPass does
LastPass is a password manager that keeps each person's logins in an encrypted vault, fills them in automatically in the browser and on mobile, and generates strong, unique passwords for new accounts. In a business account, IT sits above those vaults with an admin console: it can enforce policies, share credentials with teams, see weak or reused passwords across the organisation, and remove someone's access the moment they leave.
LastPass uses a zero-knowledge model. Vault data is encrypted and decrypted on the user's device, so neither LastPass nor your administrators can read what is inside an employee's vault. LastPass describes this as device-only AES-256 encryption with PBKDF2-SHA256 hashing and salting of the master password.
For many UK organisations the real problem is not the lack of a vault but the spreadsheet, the browser-saved passwords and the shared logins that nobody rotates. A managed password manager deals with all three, and gives you evidence of good password practice for Cyber Essentials and cyber insurance questionnaires.
The LastPass products we supply
We supply two LastPass products. Both are licensed per user.
| Product | What it is | Who it suits |
|---|---|---|
| LastPass Business | The business password manager: a vault for every user, shared folders, more than 100 security policies, directory integrations, reporting and single sign-on for up to three cloud apps | Any organisation that wants to get passwords out of spreadsheets and browsers and under central control |
| LastPass MFA | An add-on to LastPass Business that extends multi-factor authentication beyond the vault to VPNs, workstations, on-premises apps and identity providers | Organisations that want one MFA tool for logins as well as the vault, often to meet insurance or contractual requirements |
How this compares with LastPass's published plans If you look at LastPass's own website you will see three business plans:
| LastPass plan | Main differences |
|---|---|
| Teams | Up to 50 users, a smaller set of policies, no directory integrations and no single sign-on |
| Business | Unlimited users, 100+ policies, directory integrations, Families for employees and SSO for up to three apps |
| Business Max | Everything in Business plus unlimited SSO apps, advanced MFA capabilities and LastPass's SaaS, AI and web monitoring features |
LastPass Business with the MFA add-on gives you the advanced MFA capabilities without moving plan. It does not include Business Max's unlimited SSO or its monitoring features, so if you need those, tell us and we will confirm the options before you buy.
How LastPass is licensed
LastPass is licensed per user. Each licence gives one person their own vault, usable on as many browsers, computers and phones as they need, so a new laptop or phone does not change the bill. The MFA add-on is also per user and can only be added to LastPass Business.
LastPass Business includes LastPass Families for employees: each user can have a personal Families account, plus five licences to share with family and friends. Keeping personal passwords in a separate personal account makes offboarding cleaner, because work credentials stay in the business vault.
- Term: LastPass publishes its business plans as annual subscriptions. We confirm the term and renewal date for your organisation when we quote.
- Changes: add users as people join; we handle the changes for you and review numbers ahead of renewal.
- Trial: LastPass offers a 14-day trial, which we can set up so you can test it with a pilot group before committing.
Prices depend on the number of users and whether you add MFA, so ask us for a quote. For background on user-based licensing see per-user vs per-device licensing.
Moving to LastPass
LastPass runs in the cloud, so there is no server to host. Most of the work in a move is not technical; it is finding where passwords live today and getting them into the right place:
- Browser-saved passwords: LastPass can import from browser exports, so staff do not have to retype everything. Once imported, we recommend switching off password saving in Chrome and Edge through your device management.
- Another password manager: LastPass can import from common password managers. We plan the order so shared credentials move first and nobody is locked out of a supplier portal mid-switch.
- Spreadsheets and documents: shared logins are rebuilt as shared folders by team, then the spreadsheet is retired.
- Directory: connecting Microsoft Entra ID, Active Directory, Google Workspace, Okta or OneLogin means new starters get an account automatically and leavers lose access when they are disabled.
The detail of policies, shared folders and rollout is covered on our LastPass Business page.
Buying LastPass through Forever Systems
When you take LastPass through us, the licences sit on your Forever Systems account alongside your other software, on one invoice and one renewal calendar. We set up the account and policies, help migrate passwords from browsers or another password manager, and handle user changes, upgrades to the MFA add-on and renewals.
Comparing options? See all the tools we supply in password managers and identity, MFA and privileged access, or browse every vendor on our vendors A to Z.
Explore LastPass
How Forever Systems supplies your software licences
Forever Systems Ltd supplies business software subscriptions to UK organisations from one account, with one monthly invoice and a UK team who know the products.
- The right edition first time: we check what you need before you buy, so you are not paying for features you will never use
- Monthly or annual terms where the vendor offers them, and help timing renewals and commitments
- Licence changes handled for you: add or remove users, upgrade editions and true-up without starting a new contract
- Deployment and support from engineers who run these products every day, not just a reseller account
- Consolidated billing and renewal reminders so nothing lapses unexpectedly
We work with businesses, schools, charities and public sector organisations of all sizes.
Need a licence quote or a second opinion on your renewal?
Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.
Contact usFrequently asked questions
Is LastPass licensed per user or per device?
Per user. Each licence covers one person on all of their browsers, computers and phones. The LastPass MFA add-on is also licensed per user and requires LastPass Business.
Is LastPass still safe to use after the 2022 security incident?
LastPass disclosed a significant security incident in 2022 and has since published the changes it made. Vaults remain encrypted on the user's device under a zero-knowledge model. We recommend strong master password policies, MFA on every vault and directory-based offboarding, and we can talk through alternatives if you prefer.
What is the difference between LastPass Business and Business Max?
Business Max is LastPass's published plan that adds unlimited single sign-on apps, advanced MFA capabilities and LastPass's SaaS, AI and web monitoring features to Business. Through us, adding the LastPass MFA add-on to Business gives you the advanced MFA capabilities; ask us if you also need unlimited SSO or the monitoring features.
What is the difference between LastPass Teams and LastPass Business?
LastPass Teams is limited to 50 users and has fewer policies, with no directory integrations or single sign-on. Business has no user limit, more than 100 policies, directory integrations, SSO for up to three apps and Families accounts for employees.
Can you move us from another password manager?
Yes. LastPass can import from common password managers and browser exports. We plan the move, migrate shared credentials into shared folders and help staff with their personal vaults.