nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

MFA

douglas.lowenthal

I have a premium account and use the Lastpass Authenticator for MFA. If I add a Yubikey, what will be the default MFA, or will I be given an option ? Thanks.

Find more posts tagged with

Accepted answers

douglas.lowenthal

Thank!

All comments

douglas.lowenthal

I would like to have the key as a backup for the Authenticator app.

dabonz1965

I just bought a yubikey I think you should disable the 2FA security authentication app and just use your key

ahudspeth

@douglas1000Option to make it default (or whichever you choose) is in Account Settings, Multifactor Options then at bottom will be drop down to select your Default Multifactor Option (this will only display enabled MFA's).

I recommend Yubikey of course, but you will need a backup method as I don't believe that it allows you to register 2 Yubikeys to your Vault at this time (I have not attempted but was only able to register one on the Enterprise portion which mirrors the Customer Premium offering).

I do suggest a backup of LP MFA or Google Auth (or whatever QR scanner you want to scan it with is your call). You COULD actually scan the QR code and register it to a different Yubikey (Yubikeys can store QR codes too) so you use one for Yubikey and the other Yubikey can either connect or NFC to your phone to expose the QR code it stored from your Google Auth QR scan.

Good luck! AKHBGT

ahudspeth

If my iPhone is lost and I log into LP from my laptop with the Yubikey plugged in, will LP use the key for MFA ? Do I tap the button? If the key is not plugged into the laptop, will MFA happen if I hold the key up to my phone? - It will prompt for MFA into laptop, then have you press to create the key in the field. When MFA, it will prompt for NFC when needed on mobile when that challenge is needed.

I have FaceID enabled for passwordless login on my iPhone 11 and the Authenticator app enabled on LP. If the Authenticator app doesn’t work for some reason, will the key actuate MFA?If Authenticator is your Default Authentication type then it will be triggered, then hit "Enter Code" if it's not working, and then select "Use Alternative Multifactor" and you will see YubiKey as an offering (if enabled). Make sure you have the NFC up to the phone already when you hit YubiKey, it won't prompt you if you didn't get it up there fast enough and will cancel you out of the auth sequence quickly.

douglas.lowenthal

Thanks. I am dense but the LP instruction articles are obtuse at least to me. I have a Yubikey 5 NFC. I will plug it into my laptop and enable it for MFA in LP.

If my iPhone is lost and I log into LP from my laptop with the Yubikey plugged in, will LP use the key for MFA ? Do I tap the button? If the key is not plugged into the laptop, will MFA happen if I hold the key up to my phone?

I have FaceID enabled for passwordless login on my iPhone 11 and the Authenticator app enabled on LP. If the Authenticator app doesn’t work for some reason, will the key actuate MFA?