HELP FILE

Use Temporary (One Time) Passwords

When accessing LastPass from a public computer, you may not want to use your Master Password, because someone else may be able to access it (using a keylogger to capture your typed keys or other malware). Additionally, you may not know what kind of security is implemented on that computer. To solve this problem, LastPass provides you with the ability to generate One Time Passwords (OTPs) in which each password will only work for one logon session. This means that even if someone else gets access to a previously used OTP, they will not be able to use it to log on to your account.

To use the One Time Passwords, you generate a list of temporary passwords ahead of time, and cross them off (if they are printed or stored elsewhere) as they are used each time you log in to your account. You can also invalidate OTPs if you are concerned that they have become compromised. Please note that you can only log in with a One Time Password from the One Time Password login page at https://lastpass.com/otp.php.

Generating One Time Password(s) does not invalidate or replace your existing Master Password – it just provides a single-use password to be used to log in via the One Time Password login page. If you lose your list of OTPs, you can still log in as usual with your Master Password, but you cannot log in to the One Time Password login page with your Master Password. Additionally, you are not able to export your LastPass Vault if you log in using a One Time Password.

Note: If you are concerned that your LastPass account has been compromised, follow these steps.

Generate One Time Passwords

To generate a list of One Time Passwords, do the following:

  1. Log in to LastPass and access your Vault by doing either of the following:
    • Go to https://lastpass.com/?ac=1 and log in with your username and Master Password.
    • In your web browser toolbar, click the LastPass icon LastPass then click Open My Vault.
  2. Select More Options in the left navigation.
  3. Go to Advanced > One Time Passwords.
  4. Enter your Master Password, and click OK.
  5. Click Add a new One Time Password. Enter your Master Password again, then click OK.
  6. Repeat the previous step as many times as you as desired to generate a list of One Time Passwords.
  7. If desired, click Print, and keep the passwords in a safe place, crossing them off as you use them. If you find it more convenient, you can click Print and save as a text editor file that you can update as you generate new One Time Passwords.

Log in Using a One Time Password

Please be aware that you can only log in to LastPass using a One Time Password on the specific One Time Password login page.

  1. Navigate to the One Time Password login page at https://lastpass.com/otp.php.
  2. Enter your username and a One Time Password (that you generated).
  3. Click Log In.
  4. If prompted, complete steps for Multifactor Authentication (if it is enabled for your account).
  5. You are now logged in to LastPass. It is recommended that you cross the One Time Password you used off your list and/or generate a new one for future use.

Clear One Time Passwords

If you are concerned that someone may have gotten access to your One Time Passwords, you can invalidate them by doing the following:

  1. Log in to LastPass and access your Vault by doing either of the following:
    • Go to https://lastpass.com/?ac=1 and log in with your username and Master Password.
    • In your web browser toolbar, click the LastPass icon LastPass then click Open My Vault.
  2. Select More Options in the left menu.
  3. Go to Advanced > One Time Passwords.
  4. Enter your Master Password, and click OK.
  5. Click Clear all OTPs.
  6. The system indicates that you no longer have any One Time Passwords. You can now either close the browser window or create new One Time Passwords using the Add a new One Time Password link.

Related

What is the difference between a One Time Password and a Recovery One Time Password?

How do I set up all account recovery options for LastPass?

Recover Your Lost Master Password

How do I set up and use mobile account recovery on Android?

How do I set up and use account recovery in the LastPass app for iOS?