LastPass: Set Up Duo MFA on Chrome, Firefox, Edge, Safari, or macOS app

This article discusses how to set up Duo Multifactor Authentication (MFA) with the LastPass browser extension, macOS app, or the LastPass login page in Chrome, Firefox, Microsoft Edge, or Safari.

Table of Contents:

• Setting Up LastPass Duo MFA
  • Using the LastPass Login Page
  • Using the Browser Extension or macOS App
• Logging in for the First Time
• Disable Multifactor

Setting Up LastPass Duo MFA

When setting up LastPass and logging in, you can either use the browser extension (on this page) or go use the LastPass Login page (on this page).

Using the LastPass Login Page

1. Navigate to the LastPass Login page.
2. Your email address should auto populate as indicated below.
   
3. Important! Remove the "@" and domain name (e.g., umn.edu, d.umn.edu) of your email address.
4. Select Ok. 
   
5. Now that you have completed your initial LastPass setup, you can Log in for the First Time (on this page).

Using the Browser Extension or macOS App

1. Open the LastPass extension  or macOS app  and log in.
2. The login should navigate to the screen shown below. Verify your email address.
   • Note: If using macOS app, this screen opens in Safari.
     
3. Enter your Master Password.
4. Click on Begin Enabling Duo Security.
5. Your registered email address should auto populate as indicated below.
   
6. Important! Remove the "@" and domain name (e.g., umn.edu, d.umn.edu) of your email address.
   
7. Select Ok. You will see a page showing that initial setup is complete.
   
8. Now that you have completed your initial LastPass setup, you can Log in for the First Time (on this page).

Logging In for the First Time

1. Log in to LastPass.
   1. If you used the LastPass Login page for setting up, navigate to the LastPass Login page.
   2. If you used the browser extension  or macOS app  for setting up, then log back in using it.
2. Have your Duo registered mobile device ready for the next step.
3. Important! A Duo mobile push notification will be sent to your mobile device and you will also see the display shown below.
   • There is no Passcode to enter.
   • Warning: Do not click on Disable Multifactor. Doing so could keep your setup process in a loop. For more information, see Disable Multifactor (on this page).
     
4. Accept the Duo push notification on your mobile device. You should now be logged into your LastPass vault.
   • If you are using Duo for the first time, see Duo: Use Duo Security to Sign In
5. If using browser extension: Select Open My Vault.
6. Select Account Settings.
   
7. Open the Multifactor Options tab.
   
8. Click on the edit pencil icon next to Duo .
9. (Windows) If you primarily use a Windows computer to access LastPass, make the following changes:
   1. Enabled: Yes
   2. Permit offline access: Allow
   3. Use Duo web SDK when possible: Yes
      
10. (Mac) If you primarily use Mac computers to access LastPass, make the following changes:
    1. Enabled: Yes
    2. Permit offline access: Allow
    3. Use Duo web SDK when possible: No
       
11. Click Update and follow the prompts to complete Duo MFA setup.

Disable Multifactor

During the login process to LastPass, clicking the Disable Multifactor when doing a Duo push for LastPass WILL NOT result in disabling MFA. 

• Duo is now a global policy so it cannot be disabled by users. 
• If you need to disable Duo for LastPass, you will need to request an exception from University Information Security (UIS).