Skip to main content

Account Migration from Family to Business (MSP)

Purpose

This guide outlines how to seamlessly migrate a user from a LastPass Family plan to your MSP-managed LastPass Business account. It ensures users retain all vault content while switching to a business license and aligns with MSP best practices. This guide assumes the email alias used in the Family Account is the same as the Business Account you are migrating to.

Prerequisites

  1. Set up Federation and SSO for Lastpass MSP.
  2. Protected users group should be assigned only to Licensed Business Premium Users.

Steps

1. Export the User’s Vault Data

  • Export user vault via My Vault → Account Settings → Export using CSV or encrypted file export format.

  • Store the exported file securely; you’ll need it for import (if in any case the passwords don't appear after conversion)

2. Prepare a Temporary Admin Account

  • Create a temporary admin user in your MSP’s LastPass Business instance.

  • Provide these credentials to the client for validation after migration.

3. Record Existing User Permissions

  • Document the user’s family-related permissions, shared folders, or admin roles to replicate later.

Ex:

image.png

4. Remove the User from the Family Plan

  • From the Family dashboard, select the user and click Remove from Families.

  • Confirm action. The user's account downgrades to a free license but retains vault data.

One user account should be assigned as an admin to remove other users. 

image.png

  • Accept the confirmation and proceed removing the users from the current plan

Removing these users from any plan will convert their accounts from licensed to free. 

Removing users from an account won't delete the account data – it'll just reduce the features that come with a free account.

5. Trigger Activation via SSO/Provisioning

    • The user will receive an activation email since AD provisioning and SSO (federation) is enabled.

    • The user must click the link and log in using their existing credentials.

    • They will see a prompt: “This account will be converted to a Business account” Select OK.

    • On re-login, their license status changes to Business. 

6. Repository Access & Permissions

  • Re-assign any roles or permissions noted earlier.

  • If using shared folders/groups, reassign access as needed within your MSP-managed tenant.

7. Verify Migration

  • Ask the user to log in and verify that all their passwords, shared folders, and settings are present.

  • Use the temporary admin account to confirm: license has changed to Business, and vault contents are intact.

8. Import Vault Data (Optional)

This is optional only if there are issues during the accounts conversion from free to business.

  • Log in as the temporary admin.

  • Import the user’s vault data via My Vault → Import using the previously exported file. Ensure proper vault contents (passwords, notes, shared items) transfer accurately.

 

Back to top