HELP FILE

What are the system requirements for LastPass Workstation MFA?

Workstation MFA is a feature that allows LastPass admins to protect their users' workstations with a second layer of security. Once set up, users can log in to their workstations using their Windows or macOS account password, then an authentication prompt is sent to their mobile device via the LastPass Authenticator or YubiKey for verification.

In order to set up LastPass Workstation MFA, the system and account requirements below must be met.

Attention: It is recommended to set up a Windows or Mac test environment and implement the "Offline Mode" feature during the configuration process. Once you have successfully deployed and used Workstation MFA on a test environment, you can configure and deploy to a production environment.

Windows

For LastPass admins:
  • An active LastPass Business + Advanced MFA add-on trial or paid account with end users provisioned via the LastPass AD Connector
For end users:
  • A machine running Windows 10 or later
  • A server running Windows Server 2019 or later
  • An active LastPass Business + Advanced MFA add-on trial or paid user account that has enabled and enrolled the LastPass Authenticator for multifactor authentication to protect their Vault (instructions here)
    Tip: LastPass admins can enable the "Require Use of LastPass Authenticator (Advanced MFA add-on)" general policy to prompt users to set up and enroll the LastPass Authenticator the next time they log in to their LastPass Vault (instructions here).

Mac

End users will be required to have the following:

  • A Mac running either of the following macOS versions with a 64-bit processor required:
    • macOS Catalina (10.15.2)
    • macOS Big Sur (11.2)
  • An active LastPass Business + Advanced MFA add-on trial or paid user account that has enabled and enrolled the LastPass Authenticator for multifactor authentication to protect their Vault (instructions here)
    Tip: LastPass admins can enable the "Require Use of LastPass Authenticator" general policy to prompt users to set up and enroll the LastPass Authenticator the next time they log in to LastPass (instructions here).