In short: LastPass Business is LastPass's password manager for organisations. Each user gets an encrypted vault that works across browsers and phones, while IT controls more than 100 security policies, shared folders, directory integrations and reporting. It is licensed per user, with an optional MFA add-on, and Forever Systems supplies, deploys and manages it.
What LastPass Business is
LastPass Business is the organisation-wide version of the LastPass password manager. Every user gets their own encrypted vault with a password generator, automatic filling in the browser and on mobile, secure notes and sync across all their devices. On top of that, administrators get a web console to manage users, groups, policies, shared folders and reports.
Administrators cannot see inside employees' vaults. LastPass encrypts vault data on the device using AES-256, with the master password hashed and salted using PBKDF2-SHA256, so only the user can decrypt it. What IT can see is the health of the organisation's passwords: weak and reused credentials, and whether users have set up MFA on their vault.
What is included
| Area | What LastPass Business includes |
|---|---|
| Vaults | A vault per user, unlimited devices, password generator, autofill, secure notes and encrypted file storage |
| Sharing | Shared folders for teams, with access that can be revoked in real time |
| Policies | More than 100 configurable security policies, such as master password strength, allowed countries and IP addresses, and MFA requirements for the vault |
| Users and groups | Group-based user management, with policies and shared folders applied by group |
| Directory integrations | Automated user provisioning from Microsoft Entra ID, Active Directory, Google Workspace, Okta and OneLogin |
| Sign-in | Federated login with your identity provider, and single sign-on for up to three cloud apps |
| Reporting | Advanced admin reporting, with SIEM integrations including Splunk and Microsoft Sentinel |
| Monitoring | Dark web monitoring of vault credentials against a database of compromised credentials |
| Personal use | LastPass Families for employees: a personal account for each user, plus five licences to share with family and friends |
LastPass's own Teams plan, for up to 50 users, has fewer policies and no directory integrations or SSO. For most organisations above a few people, Business is the sensible starting point.
How LastPass Business is licensed
LastPass Business is licensed per user. A licence covers one person on every browser, computer and phone they use, so the bill follows headcount, not devices. Credentials for service accounts and shared mailboxes can sit in a shared folder rather than needing a licence of their own.
- Term: LastPass publishes Business as an annual subscription; we confirm the term and renewal date when we quote.
- Adding users: new starters can be added during the term; with a directory integration they are provisioned automatically.
- MFA add-on: LastPass MFA can be added per user to extend MFA to VPNs, workstations, on-premises apps and identity providers.
- Trial: a 14-day trial is available, which we can set up for a pilot group.
Prices depend on user numbers and term, so ask us for a quote.
Requirements and deployment
LastPass is a cloud service: there is nothing to host on your own servers. Users need the LastPass browser extension for Chrome, Edge, Firefox or Safari, and the iOS or Android app for mobile autofill. The admin console runs in a browser.
For a clean rollout we usually:
- Agree the master password policy and require MFA on every vault, using the LastPass Authenticator or another authenticator app.
- Connect Microsoft Entra ID, Active Directory or Google Workspace so accounts and groups follow your directory, and consider federated login so staff do not need a separate master password.
- Create shared folders by team and move credentials out of spreadsheets and documents.
- Turn off browser password saving through your device management so passwords land in LastPass rather than in Chrome or Edge.
- Review the security dashboard after the first month and chase weak and reused passwords.
Who LastPass Business suits and how we help
LastPass Business suits organisations of almost any size that want simple, browser-first password management with central control: professional services firms, schools and academies, charities, retailers and multi-site businesses. It is particularly useful where several people share logins to supplier portals, social media or line-of-business systems.
We supply the licences on your Forever Systems account, configure policies and directory sync, migrate existing passwords from browsers or another password manager, and handle new starters, leavers, add-ons and renewals. Compare other options in password managers.
How Forever Systems supplies your software licences
Forever Systems Ltd supplies business software subscriptions to UK organisations from one account, with one monthly invoice and a UK team who know the products.
- The right edition first time: we check what you need before you buy, so you are not paying for features you will never use
- Monthly or annual terms where the vendor offers them, and help timing renewals and commitments
- Licence changes handled for you: add or remove users, upgrade editions and true-up without starting a new contract
- Deployment and support from engineers who run these products every day, not just a reseller account
- Consolidated billing and renewal reminders so nothing lapses unexpectedly
We work with businesses, schools, charities and public sector organisations of all sizes.
Need a licence quote or a second opinion on your renewal?
Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.
Contact usFrequently asked questions
How many devices can a LastPass Business user have?
There is no device limit. A licence covers one person on all of their browsers, computers and phones.
Can administrators see employees' passwords?
No. Vaults are encrypted on the user's device and LastPass uses a zero-knowledge model. Administrators manage policies, shared folders and reports, and can remove access, but cannot read private vault contents.
Does LastPass Business include single sign-on?
Yes, for up to three cloud apps, plus federated login so staff can sign in to LastPass with their existing identity provider. Unlimited SSO apps are part of LastPass's Business Max plan; ask us if you need more than three.
Can we use LastPass Business with Microsoft 365 and Entra ID?
Yes. LastPass Business can provision and remove users from Microsoft Entra ID or Active Directory, and federated login lets staff sign in to LastPass with their Microsoft identity instead of a separate master password.
What happens to a leaver's vault?
With a directory integration, disabling the user in Entra ID, Active Directory or Google Workspace removes their LastPass access. Credentials in shared folders stay with the team, and your policies control what happens to the personal vault.