I really dislike that the folders show up within each section of LastPass (i.e. Passwords, Notes, Addresses, Payment Cards etc.). I would like to categorize each section differently because the folders that I create for passwords, have little to do with the folders I would like to organize my addresses and notes in.
... View more
As an enterprise user I manage many external clients wanting access to some of their passwords that we have created or maintain within their systems. To facilitate this I permit the clients domain in our "Restrict sharing by domain" policy and add their LastPass account to the shared folder. What I have found from testing is when the user is added with Read Only, Administrator and Hide Passwords options unselected they can move the password entry from our enterprise shared folder to their own Vault, removing it from our shared folder causing us to lose access! This presents a major security/functionality issue if the client accidentally or maliciously moves the password entry from our shared folder. I found only if I select the Read Only option does it prevent this from happening. I would propose a change in functionality to restrict this behavior natively or be controlled by a policy in Enterprise licensing or an additional option below Hide Passwords that has an option like "Restrict Moving" or something similar to prevent this behavior. This would allow "Outside your Enterprise" users to add entries to these shared folders without the risk of moving all our critical passwords to their own vault. Thank you for considering my feature suggestion.
... View more