How does LastPass verify computers?

Get first access to testing new builds and betas for LastPass

Moderators: admin, anatoly_LP, chantieLP, robyn, JoeSiegrist

How does LastPass verify computers?

Postby Hungry_Man » Thu Nov 22, 2012 6:43 pm

I enabled Two Factor Authentication via Google Authenticator. I then set my computer to not need to use Two Factor Authentication since I use it often and it doesn't leave the apartment. How is this computer trusted though? What is that based on?

In short: How does lastpass verify that "this computer" is "this computer"? IP? MAC? User ID?
Hungry_Man
 
Posts: 51
Joined: Fri Jun 22, 2012 3:12 pm

Re: How does LastPass verify computers?

Postby jonat » Thu Nov 22, 2012 10:27 pm

It stores an authentication token in "trusted storage". The method varies by OS.
jonat
 
Posts: 2209
Joined: Thu Dec 09, 2010 8:42 pm

Re: How does LastPass verify computers?

Postby Hungry_Man » Thu Nov 22, 2012 10:30 pm

Are there any more details available? Specifically for Windows I suppose. How is the token generated, for example?
Hungry_Man
 
Posts: 51
Joined: Fri Jun 22, 2012 3:12 pm

Re: How does LastPass verify computers?

Postby jonat » Fri Nov 23, 2012 10:30 pm

I don't know how the token is generated. Now that I think about it some more, it seems to be some sort of ID generated by LastPass and stored on their server, since you can review a list of trusted computers in Account Settings.
jonat
 
Posts: 2209
Joined: Thu Dec 09, 2010 8:42 pm

Re: How does LastPass verify computers?

Postby Hungry_Man » Sun Nov 25, 2012 5:39 pm

Yeah, it's accessible on the web server so I'm not really sure how it works. It has to be storing the identity of the computer somehow.
Hungry_Man
 
Posts: 51
Joined: Fri Jun 22, 2012 3:12 pm

Re: How does LastPass verify computers?

Postby Bubbly » Sun Nov 25, 2012 11:38 pm

Does it really matter? The important factor is that it doesn't work correctly everywhere.

I'm in another country right now and have been on the same IP for a month, I have had to reauthorize over 10 times by now.
Bubbly
 
Posts: 237
Joined: Fri Jan 13, 2012 12:45 am

Re: How does LastPass verify computers?

Postby Hungry_Man » Sun Nov 25, 2012 11:45 pm

As it works for me, what matters is whether it's secure or not, yes.
Hungry_Man
 
Posts: 51
Joined: Fri Jun 22, 2012 3:12 pm


Return to LastPass PreBuild & Beta

Who is online

Users browsing this forum: No registered users and 1 guest