Services / Passwords & identity / LastPass
LastPass
Passwords & identity · lastpass.com
Five second factors on offer: security key, authenticator app, approval in an app, hardware token and text message. The strongest is a security key.
Recommended setup
Security key + app backup
A security key only answers the real site, so it can't be phished. Set up a second method too, so a lost key doesn't lock you out.
KeySecurity keyBest option
AppAuthenticator appSupported
PushApproval in an appLastPass Authenticator, Duo, RSA SecurID, Symantec VIP, SecureAuth Authenticate
TokenHardware tokenYubico OTP, Windows Fingerprint, Smart Card
SMSText messageSupported
Not offered: phone call, email code.
Switch it on
General steps; menu names vary. LastPass's own guide has the exact screens.
- Sign in to LastPass and open your account's security settings. Look for two-step verification or two-factor authentication. LastPass's own guide shows the exact screens.
- Choose authenticator app. A QR code appears.
- Open your authenticator app, add an account and scan the QR code. Type the 6-digit code it shows to confirm.
- Choose security key. Insert a USB key, or hold an NFC key to your phone, and touch it when it blinks. Register a spare key too.
- Save the backup codes. Keep them in your password manager or print them; they're your way back in if you lose your phone or key.
Before you start
!
Availability of 2FA options depends on your account type.
!
U2F is available through Duo integration on all plans.
!
Yubico OTP is only available on paid plans.