Open the standard code-based method
- Sign in to your LastPass vault.
- Open Account settings → Multifactor Options.
- Select the Edit icon beside the option labeled Google Authenticator. This is the standard time-based code setting used for this setup with Sign In.
- Set Enabled to Yes and follow the enrollment prompts.
A Teams or Business administrator can restrict available methods. Follow your organization’s policy.
Add LastPass to Sign In
Use Sign In, our authenticator app, for codes on your iPhone.
- If the service displays an enrollment QR code on another screen, open Sign In and tap Add → Scan QR Code.
- If it offers a setup key instead, choose Add → Enter Setup Key. Label Service as LastPass and Account with your account name, then paste the secret into Key.
- Review the entry and tap Add Account.
- Enter the current code when LastPass requests it and save the settings. Confirm that the method is enabled.
Keep the setup key private. If you only have one iPhone and no manual key is offered, open the enrollment page on a second screen.
Choose offline access deliberately
Permit Offline Access → Allow keeps an encrypted local vault available without MFA during connectivity problems. Disallow requires internet access and MFA, so an outage can prevent vault access.
Keep another way in
LastPass recommends multiple authentication options, ideally on separate devices. Review the methods available to your account before replacing your phone.
If you lose authenticator access, consult LastPass’s official recovery instructions or your business administrator. Do not assume a standard set of printable backup codes is available.
If a code does not work
Make sure the LastPass entry in Sign In matches the account you are using. Wait for a fresh code, then enter it before it changes. If fresh codes keep failing, check that your iPhone uses automatic date and time.
Keep a working sign-in session and your recovery information available while resolving the problem. Adding an entry to Sign In does not finish enrollment: the service must accept a code and confirm activation.