Secure Your LastPass with Microsoft Authenticator

Looking to strengthen the security of your LastPass account? We're introducing one more way for you to take your security to the next level. Today, LastPass users can now activate Microsoft Authenticator as their multi-factor authentication for their LastPass account. All LastPass users (Free, Premium, Families, Teams and Enterprise) can now use Microsoft Authenticator to protect their vault.

Why Microsoft Authenticator?

If you're a long-time LastPass user, you've likely heard us mention the benefits of multi-factor authentication (MFA). Also commonly referred to as two-factor authentication (2FA), you can add another layer of security to your LastPass vault by requiring additional information after entering your password. Even if someone were to steal your master password, they would need the MFA code generated by the app to gain access to the account.  In the case of Microsoft Authenticator, a six-digit code is generated by the app on your phone. After 30 seconds, the code expires and a new one is generated. Note that LastPass only supports the 6-digit codes and does not support push notifications with the Microsoft Authenticator app at this time. Microsoft Authenticator is a popular MFA option for businesses, and we believe in giving LastPass users as many options as possible and working to support the technology you've already invested in. Microsoft Authenticator is just one of about a dozen multi-factor options we currently support.

Enabling and logging in with the Microsoft Authenticator App

Ready to use Microsoft Authenticator? After you've downloaded the Microsoft Authenticator app to your Android, iOS, or Windows Phone, here's how you can log in to your vault to turn on Microsoft Authenticator:

1. Click the LastPass extension icon in your browser toolbar or log in at LastPass.com.
2. From the menu, open the LastPass vault.
3. Click the "Account Settings" option in the left-hand navigation menu.
4. Select the tab for "Multifactor Options".
5. Locate the Microsoft Authenticator option in the list and click the "Edit" (pencil) icon.
6. Follow the configuration instructions (explained in more detail in our support article).
7. Save the changes to your account.

Next time you log in to LastPass, you'll be prompted for the 6-digit code from the Microsoft Authenticator app. Look at the app to type in the code that's displayed. If you're on a secure computer where you don't want to enter your MFA code every time you login, select the option to "trust" the device for the next 30 days. That means your account will still be protected with MFA, but you won't have to re-enter the code on that computer for a while. As an admin for a Teams or Enterprise account, you can also mandate the use of Microsoft Authenticator for all LastPass users. Head to the Policies tab under Settings in your admin dashboard, and search for the policy to Require Use of Microsoft Authenticator. The next time users log in, they will be prompted to enable Microsoft Authenticator for their account and will be walked through the steps to turn it on. Microsoft Authenticator is a convenient way to add more protection to your LastPass account. Log in today to take advantage of this security feature!