LastPass Authenticator is a multifactor app for Android, iOS, and Windows mobile devices. It supports 3 ways to log in:
- Time based 6-digit codes
- One-tap push notifications
- SMS 6-digit codes
LastPass Authenticator is also TOTP compliant, meaning it’s compatible with all apps and websites that support Google Authenticator. That means you can conveniently manage Multifactor Authentication for multiple services, all from LastPass Authenticator.
For LastPass admins, it is recommended that you complete the steps for enabling Multifactor Authentication in the Admin Console.
For LastPass users, it is required that you follow all steps in Enable Multifactor Authentication (Users) before proceeding.
Please note that if you have more than 1 Multifactor Authentication option enabled for your account, you must select your desired default authentication option from the drop-down menu at the bottom of your Multifactor Options window in order to be prompted to authenticate with your preferred option when logging in to LastPass.
Topics in this article:
- Enable Multifactor Authentication in your LastPass account.
- Click the Edit icon for the LastPass Authenticator.
- For the "Enabled" option, select Yes from the drop-down menu.
- For the "Permit Offline Access" option, use the drop-down menu to choose from the following:
- Select Allow if you wish to allow access to LastPass even when you are offline. This will store an encrypted Vault locally so you can log in without using Multifactor Authentication in case of a connectivity issue.
- Select Disallow to prevent offline access, which requires the use of Multifactor Authentication and to be connected to the internet when using LastPass.
- When finished, click Update.
- Enter your Master Password, then click Continue.
- When prompted, click Enroll.
- When a new web browser window or tab appears, click Set up mobile app, then proceed to the next steps.
- If you have already used LastPass on your phone for a different account or application, tap Add new account. Otherwise, do the following:
- Tap the Add icon on the bottom of your device screen.
- Tap Scan Barcode.
- Using your mobile device's camera, scan the barcode displayed on your web browser window.
- From your computer, click Set up text message.
- Enter your mobile phone number and click Next.
- A text message is sent to your mobile device containing a verification code. Enter the code into your web browser, then click Finish text setup.
- Click Activate, then click Done.
- In your Vault, click OK on the confirmation messages.
- Open the LastPass Authenticator app on your mobile device.
- On your desktop web browser, log in to LastPass.
- You can verify your login in the following ways:
- On your mobile device, tap Approve in the Mobile Authenticator app to verify your login, which automatically logs you in to your LastPass account on your web browser. If desired, check the box to enable the option, "Trust this device for 30 days" and provide a device name, then click Authenticate. Learn more about managing your trusted devices.
- On your web browser, enter the 6-digit code displayed in the mobile app. If desired, check the box to enable the option, "Trust this computer for 30 days" and provide a computer name, then click Authenticate. Learn more about managing your trusted devices.
- On your web browser, click Send SMS passcodes to have an SMS message containing a verification code sent to your mobile device. Once received, enter the code in your web browser, (if desired, check the box to enable the option, "Trust this computer for 30 days" and provide a computer name) and click Authenticate. Learn more about managing your trusted devices.
If your phone number has changed or mobile device used for authentication is lost, you can click I've lost my device on the Multifactor Authentication window. Once redirected, you can enter your LastPass email address and click Send Email to be sent an email with a set of instructions on how to disable Multifactor Authentication. If you do not receive an email, you may have a secondary security email enabled where the email was sent instead, and/or check your spam/junk email filters. If you are an Enterprise user, your account may have policies enforced that prevent disabling Multifactor Authentication via email. For these users, please contact your LastPass admin to disable it for you.
With LastPass Authenticator’s Cloud Backup feature, you can restore your multifactor tokens if you lose or upgrade your mobile device. Combined with our unique, one-tap verification experience, LastPass Authenticator gives you all the security you need from your LastPass Authenticator app, without any of the frustration.
Enable cloud backup
- Open the LastPass Authenticator app on your mobile device.
- Tap the Options icon in the toolbar.
- Toggle to enable the option, "Backup to LastPass".
- If you have not yet installed the LastPass Password Manager mobile app (for iOS or Android) installed, you will be prompted to download and log in. Once logged in, switch back to the LastPass Authenticator app, toggle the option to enable "Backup to LastPass" again, then the backup will begin and display a confirmation message at the bottom of the screen once it is complete.
- If you already have the LastPass Password Manager mobile app, you are prompted to confirm your email address, then the backup will begin and display a confirmation message at the bottom of the screen once it is complete.
- Once enabled, you can tap the Options icon in the toolbar of the LastPass Authenticator app and tap Backup Now anytime you want to create a backup.
Restore from Cloud Backup
- Install both the LastPass Password Manager (for iOS or Android) and LastPass Authenticator (for iOS or Android) apps on your mobile device.
- Open the LastPass Authenticator app, then tap Restore from backup.
- If you are already logged in to the LastPass Password Manager app, tap to confirm your account email address.
- If you are not logged in, the LastPass Manager app will open and prompt you to log in. Once logged in, your account(s) in the LastPass Authenticator app will be restored.