I am a FREE user of LastPass and I am not looking for support ... I am simply trying to report a security bug. Here's what I stibbled on by accident.
I am using LastPass with Opera browser and have Lastpass set up to use Microsoft Authenticator App for MFA. I had a problem with my computer (hard disk failed) so I went to use another backup computer and installed Opera browser on that and when I went to login to LastPass on Opera it didn't ask me for MFA code. This could be because I had already loggied in using Opera on a different computer?
I installed Firefox browser and LastPass did ask me for my MFA code to login to that browser.
So, the question is ... why was I not asked for my MFA code when logging in to Opera?
Does LastPass only check the browser version? ... and ignore MFA requirement if already logged in to same browser version on different computer at same location?
I do not know the answer to this, but it has me worried about security of LastPass.
I think someone should do some testing and try and find/fix this issue if there is an unknown bug in the software. Thank you for listening.
