๐Ÿˆ Community
corati
Member

Client asking me to create a Lastpass account

Well, I sent a proposal and the client asked me to create a Lastpass account, supposedly so he can give me access to his translation website. Why would I need to do that? I've worked on translation platforms and nobody ever asked me to create this kind of account.

Anyway, I told him I can't do the job since I'm not going to creat a Lastpass account.

At the same time he was speaking to another translator on Skype (he was speaking to both of us) and she said she created the account.

What do you think? Am I too cautious?

21 REPLIES 21
petra_r
Member

I create accounts to work on client platforms / interfaces / sites / whatever all the time. I use generic email addresses and once only passwords, not had an issue with any of it. I would only bother once hired, but with a contract and without giving a client any access to my credentials I don't see why not.

elastella
Member

LastPass is a password manager - very odd request. There was an article in The Guardian last year about people getting hacked.

 

Not too cautious.

Well, the thing is, the client hadn't sent an offer yet (but sent the work!) and he said to create the account and then send him the Lastpass email. I don't know, I felt that it was a little strange, since I could create any password or he could create a password for me (which is usually the case). When I googled "lastpass" I saw it was password managing site so I didn't feel like doing it!

vladag
Community Manager
Community Manager

Hi Corinne,

 

Could you please pm me a screenshot of the client's request and a link to their job post, so I could check and also get a confirmation from our team?

Untitled

Hi Vlad, I'm doing it asap

I wouldn't mess with that client. Too much trouble, too little commitment. And, telling that "some other freelancer did it" to me is a bit of a red flag. If it's legit, why does the client need to try to coerce people to do it? That's a con man's trick. "Look all your friends are jumping off the cliff, it'll be fine." 

I've never used lastpass, but it looks like you can synch your passwords with the cloud app? Maybe his angle is to get her to install it and then steal her passwords.

Yes Jennifer, that's what I thought!

Gut feeling is generally 99% right.

 

Button up the contract first and then, perhaps, Lastpass. But your worries make me worried. I would move on to the next one.

Well, Nichola, I told him I won't do it, anyway!


@Corinne L wrote:

Well, Nichola, I told him I won't do it, anyway!


 Good! You already wasted a whole lot of time (unpaid) on this client, who I bet doesn't even need Lastpass.

iaabraham
Member

I would never install this for a client without a contract. One of my long-term clients needed this, and I went ahead and got it, but I was never comfortable with it because of all the access/permissions it needs. As soon as our contract ended (a couple of years later!), I uninstalled it.

 

I think it allows you to log into something using the client's details but without being able to see their login information (password, etc.). So it's just for their peace of mind (obviously doesn't help us!).

versailles
Member

Lastpass is a legit password manager. Not my favorite one but a well known solution. I too don't understand this request but as long as you don't install any software that the client sends to you, you're fine.

 

But obviously, no contract, no install.

-----------
"Where darkness shines like dazzling light"   โ€”William Ashbless
raina5
Member

A longterm client asked me to set up with Lastpass so I could use some of her sites but so she wouldn't have to give me her passwords.  Lastpass sometimes prompts me to use it instead of my usual log in to different sites, but i just ignore it. i only make use of it when i am accessing this clients sites. I think its a legit site and i haven't personally had any negatives by signing up. 

no, we know it's a legit site. The question is what this guy's angle is for requiring a translation person to sign up and give him her credentials. 

Well, let's say he wants me to create this Lastpass account to give me access to the platform without giving me his credentials. The thing is, each and every client gave me a password to access their translation platform, so it seems to me like an unnecessary complication. And also I'm not at all tech-savvy (I'm still wondering how to send a screenshot to Vladimir), so it's already an effort for me to speak through Skype, to add someone on Skype etc and after that, being asked to create and account and being sent the link to the work, and all that without a word about the offer, really it's too much for me!

 

Greetings all.

 

It sounds like most of the comments here are from Upwork contractors vs the hiring clients. It is actually good to hear your side of this. I was recently looking for ways to add people as administrators to help me manage social media and came accross Lastpass as what appears to be a very solid way to do so without actually giving away my social media passwords. It presents itself as being a way I can quickly or temporarily grant access to someone to help. I never dreamed that it could be a way to work *against* the person that is helping, but rather a way to protect myself as a tip toe into the water of handing over personal accounts.

 

All comments on this thread are valid and I am certainly not trying to put any of them down, just wanted to offer the other side.

 

Any other solutions out there that some of you have found that allow you to work with a client's account in a controlled manner wherein the client can cut off access if something goes wrong? If you are reading this now perhaps you would be the last person to ever need to be "cut- off"... I am just coming from an IT security perspective where access control is crucial. You also deserve, as a contractor, to be protected from any fake "clients".

 

Thanks for any feedback!

John

 

Hi John - I don't think the discussions in this thread would relate to your situation.

The client should've explained to the freelancer

a) What is LastPass

b) Why do they need the FL to set up an account and install it

c) If needed, provide instructions on how to create an account and use LastPass

 

At this point, the freelancer would've had enough info to decide whether they want/need to do this or not, and if yes, they could set up the account after being hired and having an active/funded contract in place. The client just didn't communicate this properly and the whole thing sounded like a sketchy theft attempt (which it may have been).

 

But you probably don't even have to worry about this - I'd dare to assume most social media managers are using some kind of a password management tool anyway. Considering they're managing multiple accounts for multiple clients - how else would you keep track of the passwords in a secure way.

 

Cheers

Forgive me for asking what may be an ignorant question...

 

But don't social media platforms have official methods for delegating authority to assistants, without requiring them to actually masquerade as you and use your password through a work-around such as Lastpass?

 

For example, on Upwork (which is not a social media tool, I realize), a client can add as many people as he wants to a team that allows other people authority to do things such as hiring and managing freelancers. And those team members don't need to log in AS the main client. They have their own login accounts.

Hi Preston - depends on the platform, as far as I know.

 

FB, LinkedIn, and G+ all have a "manager role" which you can assign to your SM Manager's personal FB/LI/G+ account. For Twitter, though, you actually need the username and password since there's no built-in account sharing or delegation.

 

No clue how it works for Instagram, Pinterest, etc. - I just assumed password sharing was a common thing for those platforms as well.

 

There's also the issue of how the posts appear in the feed when they're posted by the assistants vs. posted through owner's account. If some platforms post under the assistant's name, that's maybe something the clients will want to avoid.

Not sure what a "reseller panel" is, but it sounds like you're saying LastPass has some bugs. Quite possible, and I've ran into some annoying issues myself.

There are always alternatives such as 1Password, Dashlane, etc.

 

In general, I don't think there's anything wrong with password management tools. They just need to be properly explained and communicated to the freelancer.