On the security tab, you can have LastPass notify you if your LastPass password ever changes, or if someone changes a website’s username or password in your LastPass vault. Other forms of multifactor authentication, like the physical YubiKey device, require a LastPass premium subscription. Google Authenticator (for Android and iOS) and the printable grid are free to all users. We’ve covered setting up two-factor authentication in LastPass before. Even if someone discovers your password, they’ll need more information to log in. Two-factor authentication is key for securing your LastPass account. LastPass recommends you use 500 password iterations and not exceed 1000. A larger value will make the login process take longer (especially on slower platforms, such as older versions of Internet Explorer and mobile browsers), but brute-force attempts at cracking your password password will also be slowed.

Essentially, the more iterations you use, the longer it will take to check if any password is the correct one. You can also increase the Password Iterations (PBKDF2) value. This option is automatically enabled if you haven’t logged into your account via Tor in the past 30 days. You’ll also find the option to disallow logins from the Tor network here.

If you travel, you can select other countries to allow logins from, too. For example, if you live in the United States, you can only allow logins to your account from the United States. On the General tab, you’ll find an option to only allow logins from selected countries.

Lastpass 2 factor