As a user, once LastPass Workstation MFA has been set up, you can sign in to your Windows workstation by entering your user account password then authenticating on your mobile device using the LastPass Authenticator app (or YubiKey via the LastPass Authenticator app) for verification.
Remember: Authentication methods will vary depending on how your account is set up and/or policies that are enforced by your LastPass Business admin.
- On your workstation, enter your Windows or Mac user account password, then proceed to sign in.
Result: You are prompted for multifactor authentication.

- By default, a push notification is sent to via the LastPass Authenticator app on your mobile device. To choose a different authentication method, select the Having trouble? drop-down menu and choose any of the available options (depending on the policies enforced by your LastPass admin):
Authentication Method |
Instructions |
Push notification via LastPass Authenticator app (default) |
Tap Accept when prompted. |
TOTP (time-based, one-time passcode) LastPass Authenticator app |
Select Enter passcode, then enter the time-based, one-time passcode (TOTP) provided via the LastPass Authenticator app. |
Phone call via LastPass |
Select Call me, then answer the phone call made by the LastPass automated system. Press the # key to verify your authentication.
|
YubiKey (only via the LastPass Authenticator app) |
Select YubiKey, then do the following:
- Insert your YubiKey device into the USB port of your computer.
- Wait until your YubiKey touch-button shines with a steady light and hold your fingertip on the touch-button for one (1) second to authenticate.
Important: To use YubiKey with Workstation MFA, you must configure YubiKey as a backup authentication method via the LastPass Authenticator app during the enrollment flow.
|
Remember: The last authentication method that was used will be served by default the next time you log in to your workstation.
Results: You are now signed in to your Windows workstation.