How do I reset my master password using SMS account recovery for LastPass?
Using SMS account recovery will trigger the master password recovery flow as long as at least one of your browsers has captured a Recovery One Time Password which is created by logging in to your online web vault (via the LastPass website) and/or the LastPass browser extension at least once.
Troubleshooting: Before proceeding with the recovery options below, please be sure you have temporarily disabled pop-up blockers; otherwise, you must allow pop-ups from the LastPass website when prompted in your web browser toolbar.
Before you begin: Be sure you have
already set up SMS account recovery before proceeding.
Results: You have successfully reset your
master password.
What to do next:
Create new Recovery One Time Passwords on trusted devices (strongly recommended)
Create new Recovery One Time Passwords for account recovery (in case your
master password is ever forgotten) by doing the following:
- Log out of LastPass on every trusted computer and/or mobile device where you have installed LastPass and accessed your LastPass vault. You can check your active sessions for all devices.
- Log back in with your new master password.
What to do next:
If you are using a public/untrusted computer (recommended)
Clear the browser cache on all web browsers where you accessed LastPass in order to clear the Recovery One Time Password that was created from accessing the LastPass website.
What to do next:
If you use temporary, one-time passwords (optional)
Generate new temporary, one-time passwords because all OTPs you generated previously are now invalidated and no longer listed due to your vault being re-encrypted from your master password change.