u/OfficialLastPass

Core idea:
Privileged Access Management (PAM) tools and password managers solve different security problems, and many organizations benefit from using both.

Key differences:

• Password managers:
  • Used by everyone in a company
  • Store, generate, autofill, and share everyday credentials (e.g., email, SaaS apps)
  • Provide visibility into password strength, reuse, and breaches
  • Focus on productivity + general access security
• PAM solutions:
  • Used for high-risk privileged accounts (admin, root, service accounts)
  • Control and monitor sensitive system access
  • Offer advanced capabilities like:
    • Just-in-time access (temporary privileges)
    • Session recording and monitoring
    • Credential injection (users never see the password)
    • Automatic password rotation

How they’re typically used:

• Large enterprises: often deploy both PAM and password managers
• Small to midsize businesses: usually don’t need PAM complexity and are better served by a business-grade password manager

Where LastPass fits:

• Secure vaults for storing and sharing credentials
• Visibility into SaaS and AI tools employees use
• Access controls by role or group
• Monitoring for weak or breached passwords

Bottom line:

• Use PAM if you need tight control, auditing, and protection of privileged system accounts
• Use a password manager if your challenge is managing everyday credentials across users and apps
• Many organizations need both—but most SMBs mainly need a password manager

Passwords and sensitive information can easily be shared in your LastPass Vault. When it comes to Families, Teams, and Business Users if the admin allows it, you have the option share entire folders.

In this video we demonstrate how to securely share individual or multiple credentials and folders with others. Learn to manage recipient permissions, accept or reject incoming shares, and utilize the sharing center to organize and collaborate on sensitive information within personal, family, or business accounts.

https://www.youtube.com/watch?v=CEZxNLDJVxQ

Dark web monitoring is now automatically enabled when you create a LastPass Premium or LastPass Families account. This function continuously scans hidden internet forums, illicit marketplaces, and chat rooms to detect if your personal or organizational data has been leaked, stolen, or put up for sale.

• Dark web monitoring checks the following number of emails depending on your LastPass plan: You can start, stop, or add new email addresses that you would like to have monitored.
  • LastPass Free: 10 email addresses
  • LastPass Premium, Families, Teams, Business, or Trial: 200 email addresses
• If you have a LastPass Business account, the ability to perform these actions may be limited or prohibited due to policies enabled by your LastPass admin.
• Are you a LastPass admin for a LastPass Business account? You can manage the "Control dark web monitoring" policy and its settings for your end users.

To add more credentials to your Dark Web Monitoring:

1. Log in and access the LastPass Security Dashboard by doing either of the following:
   • While logged in to LastPass, select the active LastPass icon  in your web browser toolbar, then select Security dashboard in the menu.
   • Log in at https://lastpass.com/login/ with your email address and master password, then select Security Dashboard in the left navigation menu.
2. In the Dark Web Monitoring pane, enable monitoring for the email address you want to monitor.

LastPass Dark Web Monitoring can give you an early warning system against identity theft and corporate breaches.

User and admin activity reports now show more information on users who aren't part of your company anymore, and users who have never been in it but were added to a shared folder (external users).

• General reports in LastPass (Business/Teams) provide visibility into user and admin activity within your organization.
• They are created from the Admin Console and help admins monitor usage, behavior, and security-related activity.

Reports can include more than just active users:

• Former users (even if they’ve left the organization)
• External users added to shared folders (with names/emails shown)

This means reports provide a broader historical and sharing context—not just current employees.

Additional notes / capabilities:

• Reporting is part of the new Admin Console experience for Business and Teams.
• Admins can also leverage:
  • Other reporting views (e.g., security or login activity)
  • Enterprise API for more advanced/event-based reporting

These reports are available for download and help teams audit usage and identify trends or potential issues.