Last Pass country restriction, can it be defeated by a VPN

Question

For extra protection, I have restricted the last pass to my country, but I wonder if using a VPN will defeat this restriction?

Paul

glenn.dobson · Answer

Hi @paulsiu

It would require a number of things in order to make this work, the main one being the user would need to enable this setting in their account: Don't require email verification from unknown devices and locations.

If you are thinking someone could use a VPN to access your account, they would need:

* to know which countries you allow
* that you have disabled email verification of new devices and locations
* that you do not have MFA enabled
* and of course your Master Password.

paulsiu1887 · Answer

Hi,

Thank you for the reply, but you misunderstood my question. There is an option in lastpass to only allow login within a particular country. So if I enable it so that the country is US, then users from outside of the US for example won't be able to hack into my account. However, my thought if the hacker were to VPN so that the appear to be in the US, they will bypass that protection. Is that correct?

Paul