LastPass is a password management application to simplify access to enterprise applications for users but also increase centrality and ease of management of access for administrators with task automation, convenient and secure password sharing, and other features.
$0
Yubico YubiKeys
Score 9.5 out of 10
N/A
Yubico YubiKeys make the internet safer with phishing-resistant multi-factor authentication (MFA) by providing simple and secure access to computers, mobile devices, servers, and internet accounts. The Yubico YubiKey stops account takeovers at scale by mitigating phishing and ransomware attacks, and delivers users authentication with a simple touch or tap.
For any business that is remote - this is an absolute must. Businesses that are brick and mortar that don't have a lot of passwords or not a lot being used across the board, this may not be something a company like that would have a need for. But anything remote or with many employees using logins to outside websites and apps, this is the way to go.
YubiKeys are incredibly effective for protecting against phishing attacks, as they require physical interaction and can't be remotely compromised. They're ideal for safeguarding high-value targets (executives, IT admins, those handling sensitive data), enhancing remote access security, and often help meet industry compliance regulations. However, the initial hardware cost may be a concern for large-scale deployments with many low-risk users. Users prone to losing small items or scenarios involving older, incompatible systems might pose logistical challenges. Nonetheless, YubiKeys remain robust when addressing phishing-based attacks and securing privileged accounts. Consider a targeted rollout balancing security gain against potential hardware costs and user needs.
LastPass has been a game changer for me. I keep more than 100 passwords for financial sites for my company and many of those sites will automatically log you out if you've been idle for 10 or 15 minutes. Typing and re-typing credentials is not only extremely inefficient, but it also adds the risk that you could type them incorrectly and have your account locked. LastPass fills in all my credentials automatically and helps me to generate secure passwords for new sites. I will always want this software on my machine because it makes my life so much easier.
I login to LastPass when I turn on my computer in the morning and I use it throughout the day. I cannot express how much easier, quicker, smoother (running out of adjectives) this is than our old Excel spreadsheet. I don't bookmark pages anymore, I put them in last pass as all I have to do is search for the site name, press launch and because I have auto signin for most of the sites, I'm in and doing my business in seconds. Truly a blessing!
I give slightly better than average rating because of the complexity in using a Yubikey. It is not as easy as native push notifications for 2FA products, however, it provides much better strength. Rating this higher or lower would be a disservice to people reading this review. If you are in the market for a hardware 2FA tool, Yubikey will be a great asset in your toolbox.
LastPass is part of the essential lifeblood of our operations. It's so immensely necessary and useful that I can't imagine doing my job without it. The peace of mind it delivers along with convenience and the constant updates to the latest and greatest features make this product all around amazing. I can't recommend it enough.
Educating users on password management and the basics of the solution is key to then have them successfully start using it themselves. Many have taken it further and now use it for personal passwords as well.
The has been the first and only password management software that I have used so far, and haven't found a need to change it. I have seen promotions for other software like Roboform and Dashlane but have not had the desire to test how these work because I'm comfortable using Lastpass.
Duo and Yubico YubiKeys actually work very well together. We have chosen to use these two products together to make safe and secure MFA (including Passwordless) available to all users. The ease of use that Duo allows for both OTP import and WebAuthn enrollment makes it possible for modern and legacy applications to be protected by Duo MFA via Yubico YubiKeys as the second factor.
It has been really helpful to be able to evolve how we use LastPass as we grow and change departments, add departments, add personnel, and levels of security. Having some flexibility has been great to get us what we need and not have to change platforms, which for a growing company is always a pain.
Mitigating MSP compromising is the biggest thing. We have not had a breach before LastPass for Business, and certainly not since. Many MSPs get compromised due to recycled passwords and having them stored insecurely.
Another positive is that we are a reseller. When we see a client using autofill in a browser, which is insecure, we can offer them this solution, and being users ourselves, helps with the selling points.
When onboarding new employees, being able to add them to LastPass for access already conditions them that this is the only way to manage passwords for our customers. This mitigates, if not fully eliminates, the possibility of security breaches.
