nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Need concurrent logins from 2 machines in different locations

livius

I have a need to enable concurrent logins from my laptop and from my VM running in AWS.

My experience is has been as follows:

login from laptop
then, login from VM in AWS
within a minute, laptop session is logged out

The same experience happens if I start from the VM in AWS.

My laptop is typically in NY area, while the VM is in Ohio. The behavior of logging out of the prior device is reasonable from a perspective of mitigating account takeover. However, it is impacting my ability to work efficiently as I often need access to my vault on both endpoints concurrently. (I give remote demos, routinely switching back and forth between laptop browser and VM browser.)

I have not been able to find a setting where I could "whitelist" two machines for concurrent login, regardless of where they are located.

Is there a way to enable concurrent logins from endpoints in different locations?

Find more posts tagged with

Accepted answers

rachael.orovets

Hi @Livius Feinbaum,

Could you try checking this setting to make sure it is disabled, which should then allow you to be logged in to LastPass in multiple browsers/instances?

Open your LastPass Vault
Click Account Settings on the left side menu of the Vault
Click Show Advanced Settings
Scroll down to the Security section and make sure "Log out of other devices upon login from a different device" is NOT enabled.
ClickUpdate, then enter your master password to save the change.

All comments

livius

I am familiar with the 'Destroy Sessions' feature. AFAIK, that feature only reports on active sessions; it does not report on source IPs that have been logged out from previously. When I click to 'Kill' a session, the record for that session is removed from the list.

How does LP "know" that a device is new, or a location is new? There must be some list of previously logged-in-from devices & locations that LP uses to know when to trigger the verification email?

rachael.orovets

You can view all devices and IP addresses where you accessed your LastPass account using the LastPass web browser extension or by logging in to your online web Vault. If you happened to leave an account open on another device or are unsure whether you did so, you can view all of your active sessions, and destroy those sessions if needed. Here's a help article showing how to access/use this feature:https://support.logmeininc.com/lastpass/help/how-do-i-view-and-manage-my-active-lastpass-sessions-lp070013

livius

Hi Rachel,

I'm learning a lot of LastPass goodness from you today!

That's interesting. How do I see the list of "recognized" IPs (or devices, or locations) from which I've logged in previously?

rachael.orovets

Currently there isn't a way to whitelist IP Addresses in LastPass, although when signing in from an unrecognized IP address LastPass will send a verification email to your LastPass account email (or security email, if you have one set) to verify this login:https://support.logmeininc.com/lastpass/help/why-am-i-nbsp-seeing-a-message-error-nbsp-please-verify-your-email-in-lastpass

livius

Hi Rachel,

Ah! This will greatly help. I never explored the Show Advanced Settingsoptions. Thank you!

IS there any thought given to providing an option for whitelisting my IP addresses? I've gone ahead and also defined Only allow login from selected countries as a way of limiting approved source IPs to just those in US (though, geoIP resolution is known to have flaws). It would be more secure if I could define just my specific source IPs.

Regards

Livius

rachael.orovets

Hi @Livius Feinbaum,

Could you try checking this setting to make sure it is disabled, which should then allow you to be logged in to LastPass in multiple browsers/instances?

Open your LastPass Vault
Click Account Settings on the left side menu of the Vault
Click Show Advanced Settings
Scroll down to the Security section and make sure "Log out of other devices upon login from a different device" is NOT enabled.
ClickUpdate, then enter your master password to save the change.