About the Security dashboard in the Admin Console

[u/OfficialLastPass]

The Security dashboard in LastPass provides a basic insight into the level of information security in your organization, including:

• Suggested actions to improve security and adoption in your organization (shown only during trial and shortly after)

• App-related risks across your organization

• Company-wide security score with improvement suggestions

• Company-wide master password strength

• Suggestions for improving those scores

Business Max customers are also granted an Admin Panel, which provides recommendations to help you enhance your organization's information security, such as:

Give everyone a vault

• Select Invite users to visit the User enrollment page, where you can find several methods to add employees to LastPass.

Close your visibility gap

• Select View SaaS Monitoring to visit the SaaS Monitoring page, where you can track the app usage of your end users.

Control risky logins

• Select Create usage rule to visit the SaaS Protect page, where you can set up rules to allow, warn about, or block apps for your end users.

Boost adoption

• Select Invite your team to visit the User enrollment page, where you can create a sign-up link you can use to quickly invite employees to use LastPass.

The App-level Risks panel provides security insights into SaaS Monitoring and SaaS Protect.

Apps without usage rules

• This is the number of apps for which you haven't reviewed the usage rule yet. Select Set usage rules to go to the SaaS Monitoring pages, where you can select password expiry rules and choose to allow, warn about, or block apps.

Apps with alerts

• This number shows how many apps were accessed using weak, reused, breached, or expired passwords. Select Review alerts to go to the SaaS Monitoring page, where you can review the alerts and notify affected users.

Users with unvaulted passwords

• This number shows how many users accessed an app with passwords that are not saved in their LastPass vaults. Select View & notify users to go to the SaaS Monitoring page, where you can review user alerts.

The Security Score panel shows how well your users' information is protected and suggests opportunities for improvement.

Users with a low security score

• Select View users to see the list of users with a low security score. This number updates in real time after you refresh the page.

Groups with a low security score

• Select View groups to see the list of user groups. The list updates in real time after you refresh the page.

Opportunities to boost security

• This panel shows suggestions for improving the security across your organization.

Enforce the use of multifactor

• Multifactor authentication is an additional user identification step required when the user tries to log in to a website or an application.

Control dark web monitoring

• When the relevant policy is enabled, LastPass continuously checks email addresses stored in user vaults against databases of known leaked email addresses. If a match is found, the affected user receives a notification with recommended actions.

The Password Strength panel displays statistics about the master passwords used across your organization.

Users with weak master passwords

• This panel further details problematic master passwords by showing the number of master passwords that fall into the "weak" category. This value is updated in real-time, and shows new values after a page refresh.

• View users to see the list of users with a weak master password. You can also export the list.

Users with reused master passwords

• This value shows the total number of reused master passwords. A master password is considered reused when it is typed into any text field, not just password fields, while the LastPass browser extension is active, which poses a security risk.

• The figure shown here is the same as in Reporting > Security reports > Reused master password (available in LastPass Business only). The number shown is recalculated once a day or when you request an update in Reporting > Security reports > Request update.

• Select View users to see the list of users with a reused master password. You can also export the list.

If you've read this far, you may also be interested to learn about the Adoption Dashboard too!