HELP FILE

Grid Multifactor Authentication

Grid Multifactor Authentication is an option for those who do not want to utilize mobile devices. With Grid Multifactor, you will print a sheet that is used to look up specific matching values when logging in to LastPass, and provide a code derived from your Grid to log in and access your account when prompted by LastPass.

It is required that you follow all steps in Enable Multifactor Authentication before proceeding.

Please note that if you have more than 1 Multifactor Authentication option enabled for your account, you must select your desired default authentication option from the drop-down menu at the bottom of your Multifactor Options window in order to be prompted to authenticate with your preferred option when logging in to LastPass.

Topics in this article:

Set up and configure

Use Grid Multifactor Authentication

Disable authentication for a lost grid

Admin Console administration

Set up and configure

Note: Please follow all steps in Enable Multifactor Authentication before proceeding.

Once you have clicked the Edit icon for Grid Multifactor Authentication, you can then finish the set-up process as follows:

  1. For the "Enabled" option use the drop-down menu to select Yes.
  2. For the "Permit Offline Access" option, use the drop-down menu to choose from the following:
    • Select Allow if you wish to allow access to Grid even when you are offline. This will store an encrypted Vault locally so you can log in without using Multifactor Authentication in case of a connectivity issue.
    • Select Disallow to prevent offline access, which requires the use of Multifactor Authentication and to be connected to the internet when using Grid Multifactor Authentication.
    • Note: If this option is selected and you are not connected to the internet and/or https://lastpass.com is not available, you will be unable to access your Vault. Learn more about offline access.

  3. For the "Permit Mobile Device Access" option, use the drop-down menu to choose from the following:
    • Select Allow if you want your mobile device to bypass Multifactor Authentication.
    • Select Disallow to prevent your mobile device from bypassing Multifactor Authentication.
  4. For the "Grid section, you can do the following:
    • View and print – Click to display your Grid containing a sequence of letters and numbers to be used as one-time passwords, then save and/or print it.
    • Download as CSV file – Click to begin automatically downloading your Grid as a .CSV file, then save and/or print it.
    • Reset – Click to reset your grid so a new one can be generated.
  5. For the "More Information" section, you can choose to be directed to this article
  6. Click Update when finished, then enter your Master Password and click Continue.
  7. Click OK to verify that your account settings were successfully updated.

Use Grid Multifactor Authentication

  1. On your desktop web browser, log in to LastPass.
  2. Open your Grid.

  1. When prompted, enter the values requested in the prompt by locating the letter and number requested on your Grid. Using the example Grid above for the following image, you would need to enter the following:
    • Z7 = w
    • N3 = x
    • T5 = k
    • P4 = k

  1. Optionally, you can check the box to enable, "Trust this computer for 30 days" and provide a computer name, then click Authenticate. Learn more about managing your trusted devices.
  2. Once all 4 values have been correctly entered, you will be automatically logged in to your LastPass account.

Disable authentication for a lost grid

If you have misplaced your Grid or feel it has been compromised, you can click I've lost my grid on the Multifactor Authentication window. Once redirected, you can enter your LastPass email address and click Send Email to be sent an email with a set of instructions on how to disable Multifactor Authentication. If you do not receive an email, you may have a secondary security email enabled where the email was sent instead, and/or check your spam/junk email filters. If you are an Enterprise user, contact your LastPass Administrator to disable it for you.

Admin Console administration

You can configure various policies that involve this authenticator within the Admin Console, including the requirement of its use and/or additional customization settings. For more information about configuring and enforcing policies, please see detailed instructions for LastPass Teams and Enterprise.