The LastPass Authenticator app is a multifactor authentication app for iOS and Android that can be used as a secondary layer of security when accessing your LastPass vault, third-party apps or websites, as well as assigned SSO apps or your LastPass workstation if you are a LastPass Business user.
What is the LastPass Authenticator app used for?
The LastPass Authenticator app is a mobile app that can be used for multifactor authentication for any online account you create (on any website, not just for LastPass).
Once enabled, the LastPass Authenticator app adds an extra layer of protection on top of your standard username and password for that website. When you log in, you are using something you know and something you have to prove it's really you, which means you are using two-factor or two-step verification. If you are also using biometrics through your authenticator app or security key, you are using something you have AND something you are, which means you are using multifactor authentication, and therefore stronger than two-factor authentication.
Here's how it works:
- When you create an account on a website with a username and password, the password is something you know.
- If you choose to enable multifactor authentication for your account, you are guided through pairing an authenticator app (or security key) with your account. The authenticator app or security key is something you have. If you are using biometrics through an authenticator app or security key, it is additionally something you are.
- Going forward, you will log in to your account with your username and password (something you know), and when prompted, use your authenticator app or security key to verify it's you (something you have and something you are).
The authentication methods available (for example, push notifications + face or fingerprint, TOTP, SMS passcode, and so on) will vary depending on the features included in the authenticator app or security key you're using.
Tip: If you have a LastPass account, you can use passwordless login, which allows you to leverage the LastPass Authenticator app instead of entering a master password to access your vault, SSO apps, and/or workstations.
Feature and Compatibility
The LastPass Authenticator app supports various different authentication methods:
- One-tap push notifications + face or fingerprint identification
- TOTP (6-digit, time-based one-time passcodes)
- SMS passcode (6-digit code sent through text message)
- Phone call/Call Me (available only when the LastPass Authenticator app is enabled as a multifactor option to protect your LastPass vault –
learn more) - YubiKey security key (supported on USB, USB-C, and Lightning ports and/or NFC-enabled key)
- FIDO2-compatible authenticators (desktop biometrics and security keys) for
multifactor authentication - FIDO2-compatible authenticators (desktop biometrics and security keys) for
passwordless login
The LastPass Authenticator app is also TOTP-compliant, meaning it is compatible with all apps and websites that support Google Authenticator. That means you can conveniently manage multifactor authentication for multiple services, all from LastPass.
Restriction: If you have a LastPass Business, LastPass Business Max, or LastPass Teams account, the ability to perform these actions may be limited due to policies set by your LastPass admin.
Related Articles
