How to set up a YubiKey with LastPass

Authored by: Support.com Tech Pro Team

1. Introduction

How to set up a YubiKey with LastPass

2. Set Up

1. Plug your YubiKey device into the USB port of your computer.

1. Log in to LastPass and access your vault by doing either of the following:
2. In your web browser toolbar, click the LastPass icon

1. and select Open My Vault.
2. Go to https://lastpass.com/?ac=1 and log in with your email address and master password.
3. Select Account Settings in the left navigation.

1. Select the Multifactor Options tab.

1. Click the Edit icon

1. for Yubico.
2. Click within the YubiKey #1 field.

1. Lightly press your YubiKey device button (that has the Wi-Fi icon or "Y" in the center) to automatically fill in the YubiKey #1 field.

1. Once filled, you can specify your YubiKey preferences as follows:
2. For the Enabled option, use the drop-down menu to select Yes. Once enabled, you will be prompted to enter the YubiKey data the next time you log in to LastPass from your mobile device or desktop.
3. For the Permit access from incompatible mobile devices option, controls whether mobile devices lacking an NFC reader will be allowed to bypass YubiKey. This setting only applies to LastPass accounts that utilize either iPhone 6S or older (running iOS 10 or earlier) or select Android devices that lack an NFC reader. Choose one of the following:
4. Select Allow if you want to use older mobile devices to access the LastPass mobile app, which will require you to enable at least one (1) additional authentication option to protect your LastPass vault so that when you access LastPass from a mobile device lacking an NFC reader, you can still authenticate by using your other enabled authentication option when prompted (and won't be locked out due to multifactor authentication).

1. Fastpath: Selecting this option will require you to cancel the setup for YubiKey, enable another authentication option for LastPass, then return to the setup process for YubiKey.
2. Select Disallow if you want to prohibit access from older mobile devices to the LastPass mobile app (due to being unable to authenticate with YubiKey).
3. For the Permit Offline Access drop-down menu, choose one of the following:
4. Select Allow if you want to allow access to LastPass even when you are offline. This will store an encrypted vault locally so you can log in without using multifactor authentication in case of a connectivity issue.
5. Select Disallow to prevent offline access, which requires the use of multifactor authentication and to is connected to the Internet when using LastPass.
6. If this option is selected and you are not connected to the Internet and/or https://lastpass.com is not available, you will be unable to access your vault. Learn more about offline access.
7. Click Update when finished.
8. To disassociate a YubiKey device with your LastPass account, clear the entire YubiKey input field of all characters and click Update.