How do I disable multifactor authentication for users in LastPass Business?

If there are multifactor authentication options are already enabled for your company account – with policies enforced to require use of those options – and now you want to disable multifactor authentication for some or all of your users, you must complete the steps below to ensure a seamless experience for your users.

Disable for all users

You can disable multifactor authentication for all users, company-wide.

Log in to the Admin Console.

Log in and access the LastPass Admin Console by doing either of the following:
- While logged in to LastPass, click the active LastPass icon in your web browser toolbar, then select Admin Console in the menu.
- Log in at https://lastpass.com/company/#!/dashboard with your admin email address and master password.

Disable policies that require use of multifactor authentication.

Go to Settings > Policies > Multifactor
Toggle off all switches that require use of specific or any multifactor authentication options.

Disable all multifactor authentication options.

Go to Advanced Options > Business Options > Multifactor options.
Toggle off all the switches for all multifactor authentication options.

Disable multifactor authentication for all users.

Select Users in the left navigation.
Check the box next to Email in the user table header row to select all users.
Select More actions > Disable multifactor for selected users.
When prompted, click OK to confirm.

Results: You have now disabled use of multifactor authentication for all users within your company account.

Disable for selected users

Select your desired users for which to disable multifactor authentication.

Log in to the Admin Console.

Log in and access the LastPass Admin Console by doing either of the following:
- While logged in to LastPass, click the active LastPass icon in your web browser toolbar, then select Admin Console in the menu.
- Log in at https://lastpass.com/company/#!/dashboard with your admin email address and master password.

Disable policies that require use of multifactor authentication for your selected users.

Go to Settings > Policies > Multifactor
Next to the enabled policy, click Edit details.
Select Exclusive list of users.
Click Edit details.
Search for your desired users and/or groups, then select Add.
Click Save to save your changes to the policy.
Repeat for each policy that requires use of multifactor authentication.

Disable multifactor authentication for users who have it enabled already.

Select Users in the left navigation.
Check the boxes next to your desired users.

Tip: To sort by users with multifactor authentication options already enabled, click the Multifactor column header row for the users table.
Select More actions > Disable multifactor for selected users.
Click OK to confirm.

Results: You have now disabled use of multifactor authentication for your selected users.