I lost my phone! How do I disable Multifactor Authentication for LastPass?
If your phone number has changed or the mobile device you used for authentication is lost, you should immediately disable Multifactor Authentication for your device (via email) so that you can log in and access your LastPass account.
Note: Disabling Multifactor Authentication via email is not supported for all authenticators.
For lost or stolen devices, it is strongly recommended that you change your Master Password once you log in to your account. You can also re-enable Multifactor Authentication once you've logged in to your Vault.
If you are a LastPass Enterprise user, your account may have policies enforced that prevent disabling Multifactor Authentication via email. For these users, please contact your LastPass admin to disable it for you.
The LastPass Authenticator cannot be disabled via email using these instructions. To access your account, you can use SMS account recovery to log in, then disable Multifactor Authentication for your device. If SMS recovery had not previously been set up, please contact Customer Care by clicking a contact option at the bottom of the article.
- Log in to LastPass with your username and Master Password from your desktop or another device.
- When prompted, click the If you lost your device, click here to disable authentication hyperlink on the bottom of the Multifactor Authentication window.
- When prompted, enter your Master Password, then click Continue.
- An email is sent containing a link that will allow you to disable Multifactor Authentication. Check your inbox, then click the link within the email.
If you do not receive an email, you may have a secondary security email enabled where the email was sent instead, and/or check your spam/junk email filters.
- Once clicked, a confirmation window appears informing you that Multifactor Authentication for LastPass has been disabled for your authenticator. You can now log in to LastPass with your username and Master Password, and will not be prompted to authenticate.