LastPass passwordless login enables you to access your vault using biometric authentication, security keys, or the LastPass Authenticator app instead of your master password on desktop and mobile devices. This feature is available for all account types, with business accounts requiring admin policy enablement.
For more information about the technology behind passwordless login, see the LastPass Technical Whitepaper (PDF).
You can use passwordless login to log in to LastPass in the following ways:
Passwordless login is available for all account types:
Personal accounts (LastPass Free, LastPass Premium, LastPass Families)
Users with a personal account can immediately enable passwordless login for their vault on a desktop.
Business accounts (LastPass Teams, LastPass Business, LastPass Business Max)
LastPass admins must first enable the "Allow passwordless login" policy before users can access this feature.
After the policy is enabled, end users can enable passwordless login for their vault.
Restriction: LastPass Business accounts that have enabled federated login with a third-party identity provider cannot simultaneously enable passwordless login for the vault.
Tip: LastPass Business Max admins can also enable passwordless login for workstations using Workstation MFA.
Limitations and compatibility
Desktop
- You can use either the LastPass browser extension or the LastPass website.
- Currently, you can use a FIDO2 authenticator for passwordless login (desktop biometrics or a security key) on only one device. If you want to enable passwordless login on a second device, you must use a different FIDO2 authenticator for each device. For example, if you set up passwordless login using a security key on Computer A, you can only set up passwordless login using desktop biometrics on Computer B.
- If you are using LastPass MFA, you must disable it before you can enable passwordless login with a FIDO2 authenticator.
- To use passwordless login from a desktop, all multifactor authentication options must be disabled except for the LastPass Authenticator app.
- If you want to change your FIDO2 authenticator for passwordless login (for example, switch from a USB security key to desktop biometrics or the other way around), you must disable LastPass MFA before you re-enable passwordless login.
Mobile
- Use the LastPass Password Manager app for iOS or Android with your mobile device's supported biometric authentication methods. The LastPass Authenticator app is not required for this process.
- FIDO2 authenticators are not supported when using the LastPass Password Manager app for iOS or Android.
Set up passwordless login
The following table shows setup instructions for passwordless login from a desktop or mobile device.
Related Articles
Enable the LastPass Authenticator app for passwordless login
Manage devices using passwordless login
Disable passwordless login for vault
Use passwordless login when your device is offline
Use desktop biometrics for passwordless login in LastPass
About logging in to the LastPass Password Manager app using biometrics
Passwordless login FAQs
About passwordless login for workstations
Log in to the LastPass Password Manager app using biometrics