Folks, we're going to jump right in. My name is Tara Shaufler and I am the Awareness and Training Program Manager in the Information Security Office. And joining me is Steve Niedzwiecki. He is our Associate Chief Information Security Officer and we are going to walk you through getting started with LastPass. And we have so much to talk about. So I'm going to make sure that we kinda stay right, right on target here and just kind of get going with it. Now, you'll notice on here, we will have time to take your questions. Feel free anytime during the presentation to type that into the questions box. And we are going to take time at the end to answer all those questions. We found in the past that things can kinda get derailed sometimes when we stop a million times to answer questions throughout the presentation. So feel free to type them in at anytime and then we'll take them all right at the end. So of course, today we're gonna talk about what is LastPass. We'll talk about the benefits of using it, we'll show you just briefly kind of how to get started with it. We'll explore LastPass. We'll share some best practices with you. We have a ton of resources. We have a KB article that walks you through all getting started, and directs you to additional resources. So again, do not feel like you're going to have to memorize a bunch of this stuff. But we want to give you a feel for kind of how the setup works and then just kind of exploring the vault and all that good stuff. Okay, so right off the bat, let's talk about what is a password manager, because that is what this is all about. So right here it's a, it's a service that remembers your passwords so you don't have to. Now, I always ask people think about how you are currently managing your passwords. Everybody... You're doing some sort of password management right now. It might not be good. Mine wasn't fantastic until I started using this product. Some people they them write down, maybe they write them down on sticky notes. We hope you don't do that. Maybe you use a spreadsheet. Again, not a great practice. Maybe you do what I used to do and that was I reset my passwords a lot because I would forget them. Or one of the, one of the really bad things that people do is they make really insecure passwords because they wanted to be able to remember them or they reuse them all over the place. So not great password hygiene. And we want you to utilize a product like this and to help you improve your password hygiene. And what LastPass is, is it is an encrypted electronic vault. You'll hear us say vault a lot. And that's just kind of referring to LastPass and its, its encryption and a place for you to hold all your data. Keep in mind, you're the only person that holds the decryption key to this vault. The decryption key is your master password. We're going to talk about how you set up that master password. Everybody's always concerned about the security of this product. And I don't blame you. We're the Information Security Office, we're concerned about it too. If you use a really good product, the encryption and decryption of your data actually takes place locally on your device. Princeton never has the key to you vault. LastPass never has the key to your vault. You have the key to the vault, that decryption key, which is the master password I just mentioned. So you're going to want to make sure that you create a really long, strong, and unique master password. You're going to want to make sure that you protect that really well, and we're going to talk you through that. So the other wonderful things about LastPass, the simplicity. And I know sometimes people are like, this is not simple. This is, I'm kind of... this just seems like so much. And initially, I have to tell you initially, there is a little bit of a learning curve. You have to invest a little bit of time into it. But once you do, I really do believe I truly do believe that it's going to save you time down the road. I no longer have to worry about resetting passwords all the time. I'm not constantly typing in my passwords because LastPass is remembering them for me and filling them in for me. So once you really get the hang of it, you're going to find that it actually simplifies things. The security of it, as I mentioned before, we are all about security. We want, wanted to bring a secure product, Princeton. And the really nice thing about using an encrypted password manager like this is that it helps you generate passwords that are really hard to crack. So the passwords that LastPass helps me create are much stronger, longer and stronger than I would typically make on my own. So that's really beneficial. The other thing is people do worry. They say, well how... what if I got a virus on my, on my laptop and somebody got a hold of my data. They're going to get a hold of a whole blob of just encrypted data, which is incredibly difficult to be able to, to crack. Last class uses AES-256 bit encryption, which is the best encryption technology available at this time. So it's a really strong product. We really do believe in it. And again, I always like to say to people, but you have to be so careful about your master password, that decryption key, because if you gave that away or you made it really simple, Guess what? The best product out there isn't going to save you. Somebody is going to be able to get into your vault. However, something that does help save you is multifactor authentication like Duo. Which we use here at the university in front of so many applications because somebody gets a hold of that master password, They enter ig in to try to get your vault and they get prompted with a second... You have to provide a second factor. So you're going to want to set up multi-factor on your vault as well because that's going to help protect it. It really helps protect your vault. And the convenience, it is super convenient to be able to login to LastPass. Have it work in the background. And it's going to offer to save passwords to your vault as you type them in for different sites. It's also, once your vault is populated, going to offer to auto-fill those passwords in as you visit sites. So that's really convenient, as well as the fact that you can install the app on your phone, on your smartphone, you can install it on a tablet. You can install it on so many devices. And Steve's going to talk to you a little bit more about that. So just being able to have your passwords with you wherever you go is very convenient. Okay, so this is my public service announcement. I'd like to tell people before you get started with LastPass. I want you to turn off browser password saving. So you're probably all familiar with this. You're browsing the internet with your favorite browser and you get a pop up that says, would you like, say Firefox, Would you like Firefox to save your password? Yes or no, whatever. So that's what we're talking about here. I'm going to use an example of how to turn that function off in Chrome because it's a pretty popular browser, I'm not going to go through every browser out there. You can always do a quick Google search like how to shut it off in Firefox or Safari or whatever. But your gonna want to shut this off. So my examples in Chrome, you open up the Chrome browser, you look along the header all the way to the right. You're going to see three vertical dots. And you're gonna click on that and it's going to give you a drop down menu. And you'll see that there's an option for settings. And you're going to want to click on that. When you do, you're going to see another screen. And under the section that says autofill, you'll see there's a tile that says passwords. You click on that and you're going to see that there's a little slider next to "offer to save passwords". That was by default on. I turned it off. Then underneath that, it was also on to auto sign in. So it saves it and it auto signs me in. Turn those off because you're going to see when you start using LastPass, that LastPass is going to do a similar thing where it pops up and asks you whether you want to save your passwords to the vault. And it would get very confusing. And besides, we really don't want you to be saving your passwords in the, in a browser. Browsers have gotten better with their security, but they are not built with, I mean, they're not built for security. They're built for browsing, right? So LastPass is built with security in mind and it's built as as a password manager. So the other thing I wanted to... I want you to know under number three here, if you look down that page just a little bit further, like under the yellow section, go down just a little further. It says saved passwords. If you've been saving passwords in your browser, they would all be listed there. And so many times, Steve and I, when we've done live classes and people who have kinda walk through this and they're like, okay, let me look at my browser... We hear people go "Ahh.." like that because they say, "oh my goodness, I didn't know. I didn't realize that I had all these passwords saved in my browser." So the idea here is if you have been saving them there, is to get them out of there and get them in the LastPass. So ok, great. You turn off browser saving. Now I'm going to explain the different kinds of LastPass accounts available at Princeton. There are two different types. And then we're gonna walk through how, just very briefly how you would go about setting them up. So there are two types of accounts of Princeton. LastPass versions. There's an enterprise version and there is a premium version we call Personal premium. So the Enterprise version that is really for use for faculty and staff. And faculty and staff should use that version to store passwords they use for university business. The premium version, faculty and staff are also the eligible to setup a personal premium account. The cool thing is that you can link your personal premium account to your enterprise account. That's what I've done. So every single time that I log into enterprise, I have my personal premium there as well. I can see both. Now, a lot of folks would say, why the heck would I want two vaults? Well, because if you leave Princeton then your enterprise account is going to go away and you won't need it because you've been storing all your your university passwords there and now you don't work here and you don't need them. So you don't want to mix in all your personal stuff in there and then lose that. So you have your personal vault, and you have your enterprise vault with your, with your Princeton stuff. And like I said, you can link them together. So you can just do one log in and you can see everything but should you leave. The one goes away. The personal premium you can keep. And then it's up to you whether you want to continue to pay $3 a month for a premium. While you're at Princeton. Princeton is paying for that. Same for students. You will be eligible for personal premium. You don't, you don't deal with enterprise at all. You just do personal premium and you use that for everything, your personal and your university stuff. You put all right in there. But once you leave the university, once students leave, once faculty or staff leave, it would, if you don't want to pay for the premium product, which has a few more bells and whistles than the free product, then you know, you, you don't have to pay for it. It's just that account's going to revert back to a LastPass free version, which is also a, still a great product. It offers the same level of security, but you're not going to get all the same bells and whistles. But they're pretty close, right, Steve? Very, very close. They're very, very close. Its still really good product. So no...No, no fear there. But if you decide you want the premium, and if you go right out to LastPass's website, they tell you about... what the differences are. All right. So LastPass for faculty and staff. Gonna walk through how la... how you set up. LastPass for faculty and staff then we're going to jump in and we're going to talk about students. And students. A lot of the things here are going to be the same. Essentially what's going to be different really is there... you get an invitation to enterprise. You're not going to get an invitation. You're going to have to initiate the process and we're going to show you that. Okay? So creating your new Last Pass enterprise account. So for faculty and staff, you have already received, if you've been here for the last, I guess, maybe two years ago, when we started rolling this out, you would have received an email invitation containing a link to create enterprise account. Now, if you need a new invitation, which you don't want to be having to dig that out from. Way back. You would email helpdesk at Princeton that edu. And you would just ask them, say, I need a new invitation and they'll generate that and get it out to you. The invitation is shown here when it looks like and what you want to keep in mind. As the two areas there where it says complete the activation of your enterprise account. Cuz you're gonna want to click on that. And underneath it says what your username is, Which is your Princeton.edu email address and then the temporary password as well. Quick No. Just reiterate. Faculty and staff. Folks receive an invitation for last pass enterprise. Students. We're going to talk about what you do and how you should visit Princeton's last past portal, which is last pass.com, forward slash partner premium, forward slash Princeton. Wow, that is a mouthful. And you're going to initiate the process and you're going to get the email through there for last best premium. Faculty and staff, we're going to talk to you also as you go through this process, how you can get your premium account as well. It's all kind of packed together and we'll talk about that. Alright, so enterprise, you get your enterprise email. You click on the link to complete the activation. You keep in mind that username and temporary patchwork. She going to need that in the next screen. So you get a dialogue box to set your master password. This is the master password that's going to protect all your other passwords. You're going to want to make it long, strong and unique. You'll notice what you have to fill in here. Your, your email, if you're Princeton email address should fill in automatically. And then it says old password. What they mean is the temporary password that you got in that email. You're going to paste that in. Then you're going to enter your new master password, the one that you create yourself. So you go in, you create that long strong password. Hello. There you see it does tell you what the minimum requirements are for that password. See create your pet, you create a password, you retype it, and you can also give yourself a reminder hint. Again, not a bad idea to write this Pat master password down if you have physical safe and like slip it in there in case you ever need it. There are ways to recover your password. But I just personally, I think it's not a bad idea to have that as long as you haven't really secure place. I got like a physical safe, not a bad idea. So you fill in all these fields and then you would hit save master password. Couple of more steps. And this step is going to be similar for, for students where everybody needs to, if unless you're already a last pests user, download a browser extension. So after you filled out that last screen for your math, setup, your master password, you get a little congratulations box that popped up, as you can see here under number one. And it's going to say if you're new to last fast, you're going to want to visit the download center, which is last pass.com forward slash download. And it's shown here under number two. Now, when I was walking through this process, my default browser was Firefox, because as you can see here, it on number two at the very top, and I know it's a little bit on the small side. It says Last pass for Firefox. It knows that that's the browser that I'm using at that time. And there's a red box that says Quick Install. That's what you wanna do. You click on quick install and then you would get the pop up for number three that says you're almost done. They want you to now login to that browser extension. What does the browser extension look like? It looks like C Number four, the little red box. That in the upper right hand corner there, it looks like a little, little black square with three horizontal dots. That's your browser extension icon. And you're going to see that in this case, we just installed it for Firefox. You're going to want to install the browser extension on all browsers at ease. I happened to be a Chrome user. I also use Firefox. I made sure that I went and I opened up Chrome as well. And I went to last pass.com forward slash download. And it did the quick install for Chrome. So I also, when I open my Chrome browser, I see that little, that little shortcut at the top, that little, that little box with the three horizontal dots. You click on that. Every time you click on that little box there it drops to open your login and not see, you would just log into less fast switches here, Princeton email address as well as your hash password. Now, with enterprise accounts, you're prompted the setup multi-factor authentication, which is fantastic because as I was telling you before, that's how you really can lock down your account. We recommend everybody sets up multi-factor. So number one here you get a screen that says set a duo and they want you again, enter your master password. He do that, you click on begin enabling Duo. And then it's going to want you to confirm your Duo username, which is, it's going to, you're not going to have to put that in. It's going to be there for you, which is your net ID. Hit OK. And then it says congratulations, and that's, there's not too much more. Next, you're just going to log into the browser. So let's show you what that's like, please. I want to just mention again that we have a KB Oracle that walks you through this. We just want to give you a taste of what it's like. You know, basically that you get an invitation, you set up your master password, download the browser extension, and then you login. So just giving you an idea of, of kind of the process. So you're not totally foreign to it when, when you do it. Okay, so number one here, see it says click on the browser extension. It's going to want you to login again. So you're going to click on that browser extension. It drops down that, that dialogue box where Has your email address, you type in your master password and click login. Now you have just set up duo, so great. It's going to prompt you for multi-factor, which we see everybody, I think everybody should be used to seeing that. We use it for a lot of different applications at Princeton. So you would get a push for most of us to an app on our phone. And we would disapprove that. And then the first time you're logging in to LastPass, you're going to get for, for LastPass enterprise, you're gonna get the option now to link a personal premium account. Now some folks, maybe they're already last pass users and they have a personal premium account. They have the option here to link an existing account. Or you can set up that new account right here and you could just say, No, create a personal account and then they're linked. So pretty cool, you can do this all in one shot, setting it up. Or if you say, you know what, I just wanted to do the enterprise account for now, you can just say, remind me later I want to skip and you still can get that personal premium account later. It's not like you can't go back and do it. So this is just a way to kind of set up your enterprise and your personal premium and link it all in one shot. So there you go. So that's the setup for faculty and staff. Students. Yours is a little bit difference, little more streamline. What you're gonna do is you're gonna go out to last pass.com, partner premium, bored slash Princeton. And again, this is in our KB article. We're going to talk about all that at the end. So folks know, because I know we're throwing a lot of information at you. What you're going to see is what we call the last pests, Princeton left passport. And here you're just going to have to put into different things. The first thing is you're going to put in your email address. And the second thing is going to be a personal email address. Like for me, it's Tara shuffling in Gmail or whatever. Right. So I put that in and then you hit Submit. Now, what's going to happen is you're going to get a confirmation email and that's going to be sent to your Princeton me inbox, basically validating that you're part of Princeton. So great. You get the email. And then what's going to happen there is similar to what you just saw with enterprise. You're going to set a master password to create your account. Then you're gonna get the option to redeem. Now you're free upgrade because it's taking it, it's taking your countenance. It's, it's upgrading it to personal premium. And then you're going to be prompted to go to last pass.com forward slash download and you're getting stall that browser extension. And then you can login the last best and use it. Now, keep in mind there are, we also have information about setting up duo because again, that's not going to be automatic for you folks, for personal premium like this. But we do highly recommend that you use either Duo or another. Another vehicle for multi-factor. So again, for everybody, for faculty, for staff, for students, we have a knowledge-based article about this. We have a web page that's dedicated to all things. Last guess, Princeton.edu forward slash last pass. And you didn't go there to get a lot of information that we're giving you today. Alright? So now I'm going to let, I'm gonna stop sharing for a minute and I'm going to let Steve do his portion. Now it's my turn. Okay. So I'm going to walk you through the last pass vault and how you interact with blast paths with your browser. So first, what do you want to know is that the last finesse extension in your browser has color codes. Red means that you're logged in and it's ready to do its thing and I'll walk through what that thing is in a moment. Gray means you're logged out. So if you're logged out, it's not going to offer to help you is not going to save your passwords. It's not going to auto-fill your passwords. So you need to be locked into it and have it be read. If you see yellow with some kind of alert, it typically means when you tried to log in, you may have typed your master password incorrectly. I could also mean perhaps UB reused a password and a new account that is already in your vault. So you wanted to be red because that's when it's going to do the work for you. Once you're logged in, you click on the last past extinction icon in your browser, and we're going to click on open my vault. And then it opens your vault in a new tab in your browser. And that's what you see here. You see some tiles here that I'll represent different entries that are currently in this fault. And there's so many choices on the left that we're going to go through a little bit. There's a search box at the very top. You can click any kinda keyword on any of the entries in your revolt, and it will bubble those up to the top. So if you want to look at the password or change something in the entry, you could do it that way. You can change the view right now we're in the tile view, which he sees big kind of card-based entries. You can click that icon next to it that will make it into a list view. And it just kinda changes the view. So whatever you prefer, you wanna add a folder to your eye, to your thought. There's a plus sign in the bottom right hand side. And you click on the plus sign, you're going to see an option to add a folder. When you click on that, you can create folders. You'd give it whatever name you want. And then once you create the folder, you can drag and drop entries into that folder. If you want to organize your vaults, you can have that folder available. So then we create entries in the future. You can put it in those folders specifically. So once you create the folder name and click on save, and then it's going to be in your vault and be available for you to drag entries into it. But most of the time we're not going to interact with the vault directly. You're gonna interact with through the browser extension. And so here's an example of the first time we're going to log into something after you install the extension. We're going to use the example of Trello.com. It could be any website, it can be Amazon, it could be Princeton, it could be Facebook, whatever. When you go to troll, you're going to put in your existing username and password. And you see up on the top right the black specks last pass extension is red, so I'm just going to Help you out. So we put in our existing username and password, we type, we push slogan. And last pass is going to offer to save that entry into your vault. And you would just click on add and then it's going to be in revolt. And that's the simplest way, and that's the way I recommend you add all your passwords to the volt as you go about your day and your weeks and over time as you start using last past, all your entries will show up there. You can injure the manual and you wait, do you do that? Is back in the vault. You click on that plus sign and choose add item. And it's going to bring up a menu of different kinds of items you can add, but I'll do a password now. We're going to click on password. And it brings up the dialog for all the details. You need to have a password entry. You have to add the URL of the site because that's how it associates those credentials with that website. So whatever the URL is for the site, given a name, you can add it to a folder. You don't have to. It'll just fall to the root of your, of your vault and then put in your username and password. And then click on save, and then it's going to show up in your vault. And once you have this extension installed and you have entries in your vault, you'll see here on the right hand side, this is looks like a Facebook login page. On that username and password fields. You see that the last pass icon is also in that field. And that has a little, little number at one of the top of that, which mean represents how many entries for this website exist in your vaults. To get more than one, it'll drop down a list of tiles and you can choose among them. There are other kinds of infield icons. So here's the one on the left for the password. If you had multiple passwords for Facebook, when you clicked on that, that icon, that last pass icon, it would show a list of them and you can scroll among them and choose which one you want to log in. For Princeton, I have, I think 18 passwords. And when I click on it, I can just scroll down and choose the one you want and then be able to login without having to remember the password. The middle is the form fill icon. I can create form fills for a number of things. Shipping addresses, different kept different kinds of shipping addresses. If you want mailing addresses, you can even put credit cards into your last pass so that you can autofill credit card information when necessary. And lastly is the generate a password icon. And that one allows you to create a unique long strong passwords that are very, very good. And we're going to use that in the next example. Cuz we're gonna update our Trello password. So SFS will help you change passwords, but you have to do it from the site itself last passed, can't change it from within the vaults. But when you change it within the site, but I'd be Trello or Amazon, Princeton, or Facebook. It we'll see that you've updated and offered to add the updated password to the vaults. So here we went back to Trello, we went to our accounts page and we chose change password and you're going to get dialogue that's going to look like this. Once the old password, you see here in the red box, the infield icon, when you click on that, the tile comes up for the existing entry that we had added into our volt. So when you select that, it will fill the password. And now you see the generate, the password generator icon. And when you click on that, You see this pop up and you can click on the big red button that says generate, fill. It's going to, it's going to fill the password with the current settings for the password generator, but let's look at those settings first. So at the bottom of that box you see more options and we're going to click on More Options. And then here is the dialogue to, to create a password. You see the length slider here you can set the password up to a 100 characters. You can choose easy to say and easy to read if it's something that it will be less random. If you choose those options, you can select the character sets that password should contain. Now last past doesn't know what the requirements are for Trello. So you have to pay attention to what the site says. If you need, you know, all four than Jekyll, four boxes, if you need just three, you can choose three. The best case, it's a set. What DO four, you're gonna have a better password. And you see the password it creates here is, this is the first, maybe third of it. It's just a random, It looks like a random string of characters. And you can have a password like this, because you don't have to type it in manually ever again, once you have last pass, it will auto-fill when you go to Trello and a future. And it's really great and let you have random passwords, unique passwords, and really strong power, but very strong password that will be very, very difficult to do. However, you only want to use the password generator like this. If you're going to use only interact with this password into browser if you ever going to have to type it. Now I learned a lesson when I first update of my Netflix password and made it some 60 character string, that was random characters. And then I got a new Apple TV and I had a type that password and using that little tiny remote, the little slider. And it took me I probably tried five or six times and I just gave up because I was I just couldn't get the password right. So I went to Netflix. I logged in with that password and then I change it to a passphrase, which was like string of words that was long and unique, but very good password, but something much easier to type with a little remote entry. So just a little caveat about password generate, but if you're only going to interact with it through the web, then use ice in these tools and give you great passwords. And when you click on fill, it's going to fill it into both the new password, built, the new and then that confirm password. And then when you save it, last past sees that you saved it and offers to update it. When you click on Update, the new password will be in your vault. Another great feature of blast passes that you can share passwords securely. You can share passwords with anyone who's also a last pass user. Doesn't matter the version. It could be enterprise, it could be premium, it could be the free version, but as long as their last patch user, you can share password with them. And the way we enable passwords can be shared in our enterprise environment is through shared folders. So when you go into the vault here, on the bottom left, you see slay the highlighted the Sharing Center. And that's where you go to, to add a shared folder. And when you're in the Sharing Center, you click on the plus sign on the bottom right and click and then add a shared folder. Just do the dialogue, you just give it a name. In this case, we're going to call it a team folder and then click on Create. And then we have a fault. We, so we now have a shared folder, but we haven't shared it with anybody yet. So then you have to click on that manage icon next to the shared folder name. And it's going to bring up a dialog like this where you can invite people to participate in a shared folder. And you type in there, their name or their email address into the invite users or groups field. In our case, we only really have users that you can populated with. We haven't put any groups into the last pass enterprise environment. So you have to invite the individuals in your work group separately. Individually. You also have to give them a permission that you want for this shared folder. You can give them read only access so they can use all the passwords that are in the shared folder. They will be able to change them. You give them administrator. Then they can update passwords that exist. They can add new ones, they can delete existing ones, they can even change the permissions within this folder shared. There's also a high passwords options, which is pretty nice if you have, like temporary workers that you need to share password width, but you don't want them to know it. They'd be able to use that password, but they wouldn't be able to see it. And that way when they leave, you wouldn't have to change the password. I'll always a best practice to have at least two administrators on a shared folder because if one person leaves and they're the only administrator, then they're not going to make any changes that folder in the future. So this one invited me who was set to read only and high passwords. And you see, I was added to that list. And you can go through and just keep adding the individuals that you want to share the folder with. And then click on save and you have a shared folder and the users who shared it with will get an email with an invitation to participate in the shared folder. And that shared folder, we'll just show up in their vaults as basically another folder in the list. And there'll be available to choose to login with. When you go to those sites. Linked personal accounts, satire showed you when you're signing up with enterprise, you can create a personal account and link it. Or you can say, I'm going to do this later. So if you didn't do it at initial time, you can go back and link one within the vault. If you haven't LinkedIn account yet. When you log into your vault and you'll see on the bottom left there's a link account option. If you have already linked one, you won't see that. So if we click on Link account, a dialogue pops up that allows you to create a new one. If you haven't created one already. But if you have one that you did separately, just wants a last pass.com created a personal account. You would put those credentials in there. You put your personal e-mail account for associated with that vaults and then your personal master password. And then click on Link account. And then it's done. And you see one consolidated view of everything that's in your personal vault with your enterprise fault. And that's what it looks like here in the center. It says, Last Pass live training at dot plus 12 at gmail.com. And so that's in this example, the personal Last Pass account. And it just shows up at a full as a folder within your enterprise vaults. And you can drag and drop, drop among them. If you have a bunch of Princeton accounts, their personal accounts that are in your Enterprise Vault. You can then drag them into your personal folders. In this, within this view. You sign if you create if your lincoln personally, how after the fact like this, it doesn't automatically updated, upgraded to premium. So you do have to go to that same portal that students will use, the little aspects.com slash partner premium slash Princeton. Putting your Princeton email address, put in the email address of your personal vault and that will upgrade it to premium and it'll keep getting extended wire employed at Princeton. Some additional features. As Tara mentioned, there's you can put it on a lots of different devices. You could put it on your iOS and Android phones and tablets. You can even put on, put it on your Apple Watch. And I've seen people use it. And you can put other things like we said, the form fills. You can put payment cards in there, but different kinds of addresses. And you see on the left here, there's passwords of notes and addresses, payment cards, bank accounts, Wi-Fi passwords. I have all my kids social security numbers in there because I can't remember them all the time. Different credit cards. My other laws, Wi-Fi password, which I can ever remember, I always forget. So at least I haven't Now in the vault. And in this case is an example of Amazon, you selecting an address to ship something to. And that way it'll pop up as a form fill and you just choose the one you want and you have it there available for printf, for Amazon. Lastly, my favorite feature of one of my favorite features of last passes, a security dashboard, which is also available in your fault as a link on the bottom left. And act will do analysis of your passwords and let you know which ones are weak, which ones you have reused. The more than one entry in your vault that has the same password. And it'll show you ones that are associated with compromised sites. So if you had your LinkedIn password in here and it knows that LinkedIn was passed, was compromised five or six years ago, and it doesn't know if you ever change that password, so it's going to recommend that you do. Then going forward it will know that year you have a good password. So any password you have in there with no big breaches like Target and Adobe and LinkedIn, it will tell you that you should change your password, and that will give me the score. And over time, you can see how you improve your password hygiene. And that as I had. Okay, fantastic. So as a recap, and basically the main things that you want to do, we want to make sure that you're creating along strong and unique master password because this is going to be protecting all of the data in your vault. Best way to use last task, as Steve described is and passwords as you go throughout your day so long in the last class in the morning and start to visit sites and type in passwords. It's going to offer, it's gonna pop up an offer to save terrible. And then the next time you visit those Pat, those those pages, it's going to already be in your world and it will offer to just autofill it for you. So it's a really, it's, it's a very easy way for you to be able to start to populate the contents of your ball, teens, your passwords using the password generator. This is something that I made sure that I went back in and and did once I started using last passes because I did realize using that security dashboard that I thought I had. Really strong passwords and they were maybe not as good as I thought. So I went back to the individual pages like Steve showed you with the Trello example. I went back to whatever website it was. Let's say it was Amazon and I change my password there. But I use the password generator function that they have, that we have available to us in last pass to be able to choose along strong password for me, fill it in and then save it to my ball. So it really works out really nicely. I like to use that feature as well, just when I'm signing up for new services, I always hated having to think up a new password. So now amazon logged into them browser extension. It's going to be an option for me. It should pop up and I can use that password generator so that I can just get at last pass to think up one for me and then save it to my ball. So pretty cool. And another thing that has come up so many times is sometimes, especially with work that we do at Princeton, we sometimes need to share passwords. And I know it's really easy for us to just say, just don't do it, you're not allowed to. But we understand that sometimes you do need to share a password and how are you going to do that safely? I certainly hope you're not an email because it's not safe to put it on sticky notes isn't safe either. So the best way if you have to share passwords is by creating a shared folder. Sharing that folder out like Steve said, and then sliding whatever passwords into that folder and make sure that you set up your set it up the way you want. Maybe if like you said, if it's for a temp or something, maybe you want to make sure that you share it with them, but the password is hidden, so when they leave, doesn't matter, right? They never saw the password. It was just allowing last best to fill it in for them and for their use while they were here. For enterprise users take advantage of setting up both in enterprise and a personal premium account and then linking them. Cuz that's really handy. And then like we said, if, if you do leave the university and your enterprise account goes away, then you still have your personal premium account. But while you have both of them, it's really nice to be able to just log into one and see them both and take advantage of those additional features. Things like the form fills, I think a really great, I love being able to store different addresses in there and do a lot of shopping for my parents and they have two different addresses. So it's always a great like when I'm doing my Amazon shopping and stuff, I can grab whatever I need from there, wherever website and what what else? Resources. So as I mentioned before, we through so much information at you. But we do have a web page called Princeton.edu forward slash the last pass. And we have our training views there which we're going to be switching out because some of the stuff recently changed, we're actually going to switch it out with this video. And so you can come back and check this out again if you need to. On that page, we have links to last pass has their own video library with a lot of joyously short little pieces of They explain different features. So that's really nice. Like maybe you just want a little more information about sharing folders so you could watch a video about that. So we don't want to recreate the wheel. They do a lot of great videos too, so you can go out there and get that information. There. We have a link to last past Support Center. We, which which also is searchable. So you can look up if you, maybe you don't want to watch a video, but you just, you like just kind of written instructions. Same thing. They have a lot of great written instructions there. They also offer free last past webinars on a regular basis that you can sign up for there. They're open to. For everyone. They can, you can always jump on one of those. And Princeton has a last pass KB article, which we'll link to on that page which talks about everything I spoke about in the beginning about kind of the process of setting it up. If you need help. If you need help with your enterprise account, you would go to the support and operation center at Princeton, which you can reach I eat how or help desk at Princeton.edu. And for personal premium accounts you've been wanna contact last passed directly. And this is the, the link to set up a support ticket. You can just go right in and create a ticket blink for that ticket is also available on our Princeton last pass page. And other trainings, we offer other information security trainings throughout the year. So you can always visit our Information Security page by going to Princeton.edu forward slash Training and logging in there. And then you'll see we have a bunch of great things going on the spring as well. And then you for, for faculty and staff, you can always invite us to your staff meeting even virtually now, we still do that. So always happy and to join a meeting with you and we can customize training content. We can talk DEA for 15 minutes. We can talk to you for an hour, so can always reach out. And now we are happy to take your questions. We have about 12 minutes and I believe that we have some hole, but Steve, you want me to read them? Sure. Okay. So the first one, if we turn off password saving, will the autogenerated Chrome passwords no longer work? They will know they will still work actually, correct. See flake. You do. You're just turning off like you're not saving anymore, but if you've already saved stuff in there, you still would have them as an option C, you would really need to clean them out as well. Yeah. And if you turn off autofill so they will they will problem. Then auto injected the way last pest wants to. If you add them both turn on autofill, they're going to compete with each other and you're going to have a bad experience. So that's why we recommend turning off the browser. And saving an autofill. But they will, they will go away and you could still read them in your browser until you delete them, right? Okay, the next one is retiring. Consider a, considered leaving the university. That's a good question. And I think we're going to have to get back to you on that one because while you do retain university credentials when you retire, I'm not absolutely certain that you retain your last pass account, but we can let you know. I don't believe I wouldn't think they would retain their enterprise account. I don't think so, but I want to confirm. I don't think anyone's asset versus not quite, sir. Alright. We ask, we can get back to you on that. Alright. Next question. Is there a way to remove explorer from our computers? If you're dominator and explore the Nope, it's built in, it will eventually go away. Microsoft has now standardize their built-in browser as something called Edge, which is a much better browser than an explorer. I don't believe there are any applications on campus that require Internet Explorer anymore. There were in the past, but I believe we've upgraded them all such that they don't need KHe any longer. So you can eat is whatever your favorite browser is. Safari, Chrome and Firefox Edge. Okay, next question is, does linked, does linked premium account to have non Princeton email as Logan? Yeah, it does. Enterprise. Our enterprise accounts are all associated with the prince edu domain. So your personal account would have to have a personal non Princeton email address. Okay, next question, what will happen to my passwords once I leave Princeton University and decide not to continue with last pass. When the enterprise account, they will go away, that account will, will get disabled and ultimately disappear. Your personal account will remain and remain available to you as a premium version until that that expiration date. Till you reach the expiration date, after which it reverts to a free account. And it can remain that way as well, and you can continue to use it, but it won't go away. Unless you go in and ask for it to be deleted. It'll remain there basically for probably forever. Next question. If if it says link to personal count, is is it the premium version? I think I set it up when I first used glass pass. Actually in the KB article, there is. I actually have some screenshots bear that walk you through kind of how you can tell whether you have a premium or not? Off the top my head, I don't remember the exact steps, but I know that there are documented in the KB article. So again, if you go out to Princeton.edu forward slash last pass, you'll see the link there to the KB article. Check that out and you'll be able to take a closer look and you'll be able to tell whether you've upgraded to premium or not. Okay. Alright, question about I missed how you said we can set this up on all our devices. Do we have to do the same thing on every device? We did? Yeah, essentially so that each browser that you use, you want to install the last pests extension. And you just do that. You start your Firefox OS pass.com slash download and choose the quick install that you'll see at the top of the page. And then if you're also use 40x to the same thing. So you do that for each of the browsers you use commonly on each of the machines you use. So whether it be your machine and your university machines, wherever you want to use last passionate. I don't want to have that extension installed. And I love installing it on my phone, that app on my phone. And then I use a fingerprint reader to be able to get into it really fast. That's really nice. So there are times when you want to get something really fast, like what was it? C, We always laugh about the the pin number for our travel card where we're standing in the hotel lobby and you just you can't remember it but it's like, ooh, I saved it unless passed. So you could just quickly get into the app and like, you know, because you can write yourself secure notes. So that's where my secure notes, so I don't have to feel like a more on all the time. Think remember it by now. Okay, so the next question is, sitting login to last pass first thing every morning or is it running in the background whenever you turn on your computer on. So you would have to log on to right in your browser. When you log into the extension, it'll stay logged in for as long as that browser is running. So if you just lock in machine at the end of the day and leave your browser running. It will stay logged into glass pass, so it doesn't go away. And so you reboot your xin or shut down that browser session. Otherwise it stays locked in for you. So another question, It sounds to me like we should stay logged in all all the time, at least in the beginning so that you can continually add passwords to the ball. Pretty much. I have to say that when I log onto my computer in the morning for work, I soon as I open my browser, I log in the last class because I know that it's going to save me so much time everywhere I go because it's going to start is just going to keep filling things in for me. So yeah, absolutely. I mean, even now being a user for a couple years now, I still when I when I fire up a a web browser, I log into it. You do too, right? Yeah, that's how you're going to get the most benefit from from the from ask us a question. We be sending us a copy of this recording. I'm not actually going to send it out, but I will be very soon. I'm adding it to both the what? Well, I mean, I could send it out if it's helpful to you folks. I mean, I certainly can, but I wasn't planning on doing that. We're going to add it to our last past webpage, as well as we have a video library on the Information Security website, and I was going to add it there too. So you'll have it in two spots. So it will totally be there. Okay. Oh, did I miss the instructions for setting a dual authentication for students? You did not miss that. We didn't actually walk through that that part. Apologies, but we didn't actually have time to do that whole portion as well. But there are instructions for them. We I don't know if I have it linked directly in the KB article, but last cost absolutely has that. And it's, it's very straightforward when you're logged into your vaults. There's a settings option on the bottom left and the dialogue pops up. They'll be able to factor tab. And you can use that to enroll your device as the multifactor solution. It could be Duo, It could be, could be the last fast mobile app itself or many other of the competing multi-factor products out there. See you have an option whether you, what you want to use for that, but it's pretty straight board is very so if you've setup multi-factor on anything, other accounts, it's pretty straightforward. But absolutely that is the last PAT last pest has instructed the step-by-step instructions for it. Next question, do you need different master passwords for enterprise in premium? So ultimately to master passwords. That's interesting because if you go through the process of where, where I showed you initially where you get your enrollment, You're in your email invitation for enterprise. You set up your master password, you go through installing the pass, the extension. Then you log in. The first time you log into enterprise, you get a couple different off the public's right. First you have to set up multi-factor. Next you get the option to link your personal blink, a personal premium account. If you set up that linked personal premium account at that time, you can use the same password. It we'll just use that same password you have on your enterprise as well as your personal premium vault. You kind of treat it as one. If you decide later, you're like, I'm just gonna do enterprise for now and I'm going to do the personal freemium thing later, and then I'm going to link them. Then you're going to have to have to master password. But they cooked into saying they're just they're just technically separate. You're not going to stop it literally will. You technically could get Wow, it was around that was a long explanation period where I probably could you just say you don't have to have Kim. Sorry. Hey, I can't win. Well, all right, so I've been using Key Pass. Can I have last pass Encke paths at the same time? I believe you can. I don't know that you do not keep us is not web-based, it's application-based, so you certainly have them separate. You can also import your Key Pass database into last class and there are instructions on there. On the last pass. Sites, port site to import many different password managers, including pitting one of competing ones that are browser-based that you might be using today. Okay, we're down to the wire here. We got a couple more questions we're gonna try to get through. Alright, so on a phone you install a last pass an app on the phone or in the browser on the phone or both? I did just the last pass app on the phone. That's all I needed. It's just yeah. There's no there aren't extensions for the mobile devices. You know, you can't do it that way at all. Oh, yeah. You're right. You really can't. Okay. So yes, very easy answer. On just the app. Is there a last task, Password Manager app on Google should bes, yes, absolutely. That is when we are talking about that as an exit. Sorry. That is the question. Okay. Alright, EQ setup Duo Than share a password to They need Duo and well, now, now they don't be recommended A's some multi-factor, but they don't they won't be required. Okay. Great. I think we Wow. We're right on time, Steve. It is 12 o'clock now, not through all of our questions, which is pretty cool. So could you just advance to the next one for me? Thank you, sir. And that's it. That concludes our last pass winter session training. So thank you so much for your attention. Thank you for sticking it out with us. Again, this is being recorded. We will when the recording is available, I'll just e-mail you folks though. If you want to go out and watch parts again, feel free. We're going to put it out on the Princeton.edu ports. I've last pass site, as well as on the information security doctrines and.edu site, which is right here listed on this slide. We have a page that's dedicated to it's just all video, so we'll post it there as well. And then if you have questions, you can always reach out to the information security team at InfoSec at Princeton.edu. With that, let me see if there might be just a thank you, but maybe we had another question. You are welcome. We are always happy to answer questions. And again, feel free to reach out if you have anymore. But other than that, we're going to sign off. Alright. Thank you so much everyone.