More information on the technicalities of OTP technology

Customer forum for LastPass Enterprise

Moderators: admin, azitnay, anatoly_LP, chantieLP, JoeSiegrist, robyn

More information on the technicalities of OTP technology

Postby manja » Mon Apr 18, 2016 9:27 am

I would like to know more about the recovery OTPs in lastpass. Please explain to me what happens behind the scenes, technically.
manja
 
Posts: 2
Joined: Mon Apr 18, 2016 9:08 am

Re: More information on the technicalities of OTP technology

Postby jpenny84 » Mon Apr 18, 2016 10:04 am

Information on how one time passwords work can be found here: https://lastpass.com/support.php?cmd=showfaq&id=4735
jpenny84
 
Posts: 8669
Joined: Tue Mar 06, 2012 9:10 pm

Re: More information on the technicalities of OTP technology

Postby manja » Tue Apr 19, 2016 3:41 am

Hello

Thanks for your reply. I am looking to understand how does the Email or SMS token activate the OTP.

So there is an OTP which is generated when you login to the browser extension and it is hidden somewhere, not being accessible to user. When I forget my password, I click on the "Forgot Password" link and I enter my Email ID. Then I get an Email with a link. I click on this link and the hidden OTPs are suddenly activated and I can login.

Now please tell me how the Email link does it?
manja
 
Posts: 2
Joined: Mon Apr 18, 2016 9:08 am

Re: More information on the technicalities of OTP technology

Postby dmitrijLP » Sat Apr 23, 2016 9:40 am

manja Wrote:Hello

Thanks for your reply. I am looking to understand how does the Email or SMS token activate the OTP.

So there is an OTP which is generated when you login to the browser extension and it is hidden somewhere, not being accessible to user. When I forget my password, I click on the "Forgot Password" link and I enter my Email ID. Then I get an Email with a link. I click on this link and the hidden OTPs are suddenly activated and I can login.

Now please tell me how the Email link does it?


SMS recovery is basically the same as desktop recovery as it uses the OTP cached via add-on enabled in your browser, you can check this very detailed reply from Amber explaining how it works:

https://community.spiceworks.com/topic/ ... -forgotten

https://lastpass.com/support.php?cmd=showfaq&id=9722
dmitrijLP
 
Posts: 1332
Joined: Mon Jun 23, 2014 8:46 am


Return to LastPass Enterprise

Who is online

Users browsing this forum: No registered users and 2 guests