Many of you would know I use LastPass software to manage my login passwords. One of it’s best features is password management across multiple devices like PC’s, TV, Tablets and Mobile Phones.
Last Saturday I knew I was spending the day at a water park. I was taking my ipad so I could continue working during the day.
The night before, I checked my ISP connection and LastPass access. All good, or so I thought.
On arriving at the park, I tried logging into my admin management console.
Sure enough, LastPass required me to login. I had made sure I knew the email address and password (Super Admin) for my LastPass account.
Success: You have logged in BUT the login to your LastPass account is from a device or location that we did not recognize.
WTF = I logged in with this iPad last night, why are you saying this to me?
Then comes the unbelievable message: Please check your email to grant access from this device.
This would be the singular most dumb thing I have ever read.
I need my passwords to access my emails.
Frankly.. I’m f****d.
On arriving back to the office that evening and an entire day’s work lost, I found this email..
LastPass Verification Email
Someone, hopefully you, recently tried to login to your LastPass account from a device or location that we did not recognize.
We prevented access until you have reviewed the details of the login attempt:
Account: *email address*
Time Friday, February 26, 2016 at 7:29 PM EST
IP Address *.***.***.***
If this was you, please verify this new location or device by clicking here:
Verify My New Location
Or, copying the following URL and pasting it into your browser:
If this was you, but you’re having trouble logging into your account, please try the steps listed here: Help, I’m having trouble logging into my account!
If you do not recognize this login attempt, someone may be trying to access your account. Please carefully follow our recommendations here: Help, someone is trying to hack into my account!
I can offer two suggestions.
- LastPass presents the user with options when setting up the account to verify devices.
- A second master password for devices
I understand LastPass is trying to protect me.
LastPass is checking the IP address of the device / user.
The reason my login failed was that the night before when I checked, the device was using the WiFi in my office.
LastPass is generally very good. There are free and paid versions. I commenced using the free version but upgraded to the paid sometime ago.
It took over from my insecure browser password manager and generally worked well over a number of years.
LastPass = Pass
Credit where credit is due.
Two weeks after airing my frustration with LastPass validation, they wrote to me with a fix… hooray
INTRODUCING LASTPASS AUTHENTICATOR!
Two-factor authentication goes beyond passwords to add another layer of protection to your account. Now with LastPass Authenticator, it’s easier than ever to use two-factor authentication and boost your security!
Get the app free for a one-tap login to LastPass or pair it with other supported sites like Facebook, Dropbox, WordPress and more.