Why am I not being prompted for Multifactor Authentication?

If your account is enabled to use Multifactor Authentication and you are not being prompted to authenticate upon logging in, this is expected behavior if your device is set to trusted or you are accessing the offline version of your LastPass Vault (with the exception for the YubiKey and Sesame authenticators).

To be prompted for Multifactor Authentication again, you can revoke trust or disable offline access for your device.

Revoke trust for a device

  1. Log in to LastPass via the web browser extension and access your Vault.
  2. Click Account Settings in the left navigation.
  3. Click the Trust Devices tab.
  4. In the "Label" column, locate your device (the default auto-generated name will be alphanumeric, unless you re-named it), then uncheck the box for "Enabled". When finished, close the Account Settings window.

  • You may be logging in to the offline version of your LastPass Vault (if your authenticator settings are enabled to allow offline access).
  • Your device has been set to trusted, which does not prompt for Multifactor Authentication for up to 30 days

Disable offline access

  1. If you have not done so, log in to LastPass.
  2. In your web browser toolbar, click the LastPass icon LastPass then click Open My Vault.
  3. Select Account Settings in the left navigation.
  4. Click on the Multifactor Options tab.
  5. Click the Edit icon Edit option to the right of your desired multifactor option.
  6. For the "Enabled" option, use the drop-down menu to select Yes.
  7. For the "Permit Offline Access" option, use the drop-down menu to select Disallow, which requires the use of Multifactor Authentication and to be connected to the internet when using LastPass.
  8. Note: If this option is selected and you are not connected to the internet and/or is not available, you will be unable to access your Vault. Learn more about offline access.

  9. Configure all other required fields for your authenticator (if applicable), then click Update when finished.
  10. Enter your Master Password, then click Continue.
  11. If you have already set up Multifactor Authentication for this authenticator, you are done.  If you have not, follow the steps to enroll your device. Instructions will vary depending on the authenticator app you have selected.


Enable Multifactor Authentication (Users)

Manage Account Settings

Why am I being prompted for Multifactor Authentication when I set my device as trusted?

How do I disable Multifactor Authentication as a user?