Page 1 of 1

2 stage authentication and Android

PostPosted: Fri Jan 04, 2019 9:49 am
by markmills767
Hi,

I use a Yubikey to give me two factor authentication on my Windows PC. I have a linked account on an Android device where I use Google Authenticator for 2FA

If someone hacks my master password, what is to stop them from installing LastPass on their Android device and logging into my account?

Thanks
Mark

Re: 2 stage authentication and Android

PostPosted: Fri Jan 04, 2019 12:22 pm
by FlyingHawk
They don't have your Yubikey or Google Authenticator token.

Re: 2 stage authentication and Android

PostPosted: Fri Jan 04, 2019 2:02 pm
by markmills767
OK, I disabled all 2FA except Yubikey. I installed LastPass on an Android and tried to log in. It asked me for a Yubikey and offered to disable 2FA with Yubikey. When I asked it to disable, it said it would send an email with further instructions. I didn't follow through with this.

Assuming that this is a way of recovering from a lost Yubikey, I figure that my 2FA is as secure as my email password. Am I right in this?