Set up and configure all account recovery options so that you can regain access to your LastPass vault if you ever forget your master password.
Account recovery requires access to your email account or phone number based on your verification settings and one of the following account recovery methods:
Important: LastPass Support has no knowledge of a user's master password. It is not possible for LastPass Support to reset or change a user's master password if it is forgotten.
Learn more at Why can't LastPass Support reset the master password for my account?.
Recovery option #1: Log in to LastPass from your desktop using automatic recovery
When you log in to LastPass from your desktop, LastPass creates a locally-stored secure secret on each web browser where you log in or in the LastPass for Desktop app, which can be used in the account recovery process if you ever forget your master password.
LastPass automatically creates a secure secret - previously known as a recovery one-time password - when you log in the LastPass browser extension and/or vault (that is, the LastPass website or the LastPass for Desktop app). For your security, LastPass doesn't allow viewing this secure secret.
- Log in through the LastPass browser extension (recommended)
This login method is recommended so that you can manage extension settings and preferences to customize LastPass to only work on devices that you trust. Additionally, logging in using the extension creates an encrypted cache of your vault data locally, and generates a sharing key for creating and using shared folders.
LastPass recommends that you log in through the extension on multiple web browsers (as often as you can), and, if possible, from multiple devices that you trust, which will store the secure secret locally in the LastPass extension's repository for each browser. Additionally, logging in from multiple trusted devices ensures that you have multiple secure secrets.
- Log in to your vault through the LastPass website
This login method is recommended if you cannot install the LastPass browser extension on your device or browser. Logging in by accessing your vault (through
https://lastpass.com/login/
) from multiple browsers will store the secure secret in each browser's local storage so that it can be used for account recovery (as long as you have not cleared your LastPass cache or browser's local cache since the last time you logged in to LastPass).
Warning: If you are using a public or untrusted computer, LastPass recommends that you use one-time passwords to log in to LastPass instead of the LastPass website. If you do log in to the LastPass website on a public or untrusted computer, be sure to clear the cache of the browser you used to access LastPass before you leave the computer (to clear the secret code that was captured from your login session).
- Log in to your vault through the LastPass for Desktop app
Use this login method if you cannot install the LastPass browser extension locally. Logging in by accessing your vault through the LastPass for Desktop app will store the secure secret in each device's local storage so that it can be used for account recovery (as long as you have not cleared your LastPass cache since the last time you logged in to LastPass).
For more information, view What is automatic recovery in LastPass?
Recovery option #2: Log in to LastPass from your desktop using a one-time password
One-time passwords (OTPs) can be used during the account recovery process if you forget your master password and need to reset it.
For more information about OTPs, view One-time passwords overview.
Recovery option #3: Set up mobile account recovery on iOS or Android
- Download the LastPass Password Manager app (download for iOS | download for Android)
- Log in to the app and set up mobile account recovery
Important: Regardless of how you use LastPass (that is, LastPass browser extension, website, desktop app, or mobile app), LastPass strongly recommends to set up mobile account recovery, which will allow you to reset your master password using biometrics (face or fingerprint) from that device – even if you decide you will never use the LastPass Password Manager app for iOS or Android – setting up mobile account recovery acts as a safety net that can be used to reset your master password in case you forgot it.
Recovery option #4: Manage your master password hint/reminder
Warning: If you don't set up any recovery options and you are unable to recover your master password, you will need to create a brand new LastPass account and re-enter all of your vault data.
Information about account recovery for LastPass Business and LastPass Teams admins
- If your user has logged in to LastPass on any device, a secure secret is automatically created for them. If your user has not logged in to LastPass, automatic recovery is not available. Super admins can share end users' recovery keys with other admins.
- The Text/SMS verification for account recovery verifies the user through an SMS code instead of using the email validation option. By default, account recovery through email is used when your user starts the account recovery process from a device where they previously logged in to LastPass.
- Automatic recovery is not available on a device that has not been used before to log in to LastPass. If the user has created a one-time password, they can use their OTP for account recovery instead.
Related Articles