You can enable and use passwordless login to the LastPass Password Manager app.
LastPass passwordless login on mobile
Using passwordless login from a mobile device allows you to log in your LastPass vault through the LastPass Password Manager app for iOS or Android using your device's stored biometrics (face ID or fingerprint) instead of manually entering your master password.
Overview
LastPass uses your unique facial or fingerprint features to retrieve your master password from your device’s secure storage, allowing you to bypass manually entering your master password when accessing your vault.
To set up, you will be prompted in the LastPass Password Manager app to enter your master password just once, then verify your identity using face or fingerprint. This will associate your master password with your biometric features in the LastPass Password Manager app.
Once configured, you need to use only biometric identification (face or fingerprint) to log in to LastPass from that specific mobile device.
Remember: If you have enabled a multifactor authentication option to protect your LastPass vault, you will be prompted to authenticate before you can access your vault, regardless if passwordless login is enabled.
Your master password remains available to log in to LastPass instead of using passwordless login. This is a backup method for when your mobile device's biometric sensor fails or does not recognize you.
Enable passwordless login on mobile
Passwordless login for vault on mobile is available for all LastPass plans, including LastPass Free.
Personal accounts
Users of LastPass Free, LastPass Premium, and LastPass Families can enable passwordless login for their vault on mobile.
Business accounts
Users of LastPass Teams and LastPass Business must have their LastPass admin enable the "Enable biometric login on mobile app" policy to make the feature available. Once the policy is enabled, users can enable passwordless login for their vault on mobile.
Restriction: LastPass Business accounts that have enabled federated login with a third-party identity provider cannot simultaneously enable passwordless login for the vault.
Additionally, you can enable passwordless login for mobile on as many mobile devices as you'd like. Since your biometric settings are stored locally per device, you just need to repeat the steps to enable passwordless login in the LastPass Password Manager app on each mobile device.
Restriction: Using facial recognition for biometrics on Android devices is not supported when using passwordless login for mobile in LastPass.
Differences between vault passwordless login for mobile and desktop
It's the same feature as on desktop but for mobile platforms. On mobile (using the LastPass Password Manager app for iOS or Android), it allows the access to the vault by leveraging biometric features (face or fingerprint) instead of manually entering your master password.
There are some key differences worth noting, listed in the table below.
Passwordless login feature differences | |
|---|
From mobile | From a desktop |
Log in to your vault using the LastPass Password Manager app for iOS or Android. | Log in to your vault using either the LastPass browser extension (requiring version 4.96 or later) or LastPass website. |
Requires the use of the LastPass Password Manager app for iOS or Android (which uses the device's stored biometrics). | Requires the use of the LastPass Authenticator app (which uses established authentication methods), desktop biometrics (Windows Hello or macOS Touch ID), or security keys (USB hardware key). |
Supports using face or fingerprint through the LastPass Password Manager app only. | Supports using any of the available authentication methods through the LastPass Authenticator app, desktop biometrics, or a USB security key. |
Controlled by the "Enable biometric login on mobile app" policy for LastPass Teams and LastPass Business accounts. | Controlled by the "Allow passwordless login" policy for LastPass Teams and LastPass Business accounts. |
Differences from the current face or fingerprint unlock functionality in the LastPass Password Manager app
The LastPass Password Manager app currently offers the "app lock" security feature. It locks the LastPass mobile app and re-prompts you to verify that it's really you (using face or fingerprint, a PIN code, or your master password) before you can access your vault. When unlocking the app, your face or fingerprint is used after you have already logged in to the mobile app.
With passwordless login for mobile, your biometric features are associated with your master password and therefore your face or fingerprint is used in place of manually entering your master password every time you log in to your vault. In this case, your face or fingerprint is used as login credentials for the mobile app.
You can verify your stored biometrics using only the LastPass Password Manager app for iOS or Android when using passwordless login for mobile. This is different from using passwordless login from your desktop, which requires the use of the LastPass Authenticator app to access your vault.
To summarize, unlocking the LastPass Password Manager app means you have already logged in to it and are using your face or fingerprint to unlock your vault again, whereas using passwordless login on mobile is the act of logging in to the mobile app using your face or fingerprint.
App unlock | Passwordless login |
|---|
Security feature. | Login method. |
Located in the LastPass Password Manager app under Settings > Security > Unlock with Face ID/Touch ID. | Located in the LastPass Password Manager app under Settings > Security > Log in with Face ID/Touch ID. |
Used to access your vault again after you have already logged in to the LastPass Password Manager app. | Used to log in to the LastPass Password Manager app. |
Can use face or fingerprint, PIN code, or master password to unlock your vault. | Can use face or fingerprint to log in to your vault (with your master password as a backup). |
Level of security compared to entering the master password manually
Using face or fingerprint to log in to LastPass is just as secure as using your master password for authentication. However, keep in mind that anyone who has face or fingerprint entries stored on your device is able to access the LastPass Password Manager app once you enable passwordless login for mobile on that device.
Face and fingerprint information (as well as your master password) is stored only locally on your device, and is never sent to LastPass.
If you ever lose your mobile device, you can delete that specific device from Account settings. This immediately logs you out of your LastPass account in the LastPass Password Manager app on that specific mobile device. See Disallow a mobile device from accessing LastPass for information on how to delete a mobile device.
Related Articles
