

This will simplify access for team passwords, such as social media accounts, IT administrator credentials, or shared portal logins.Īdmins will have the ability to turn this feature off for their end-users through a new policy, called ‘Don’t show TOTP in vault’. In addition, for shared sites that require two-factor authentication, LastPass offers the ability to share TOTP in order to allow users to access the same site (using the same site credentials) without disabling a secondary form of authentication. LastPass will store the TOTP next to the password of a site to provide simple access to protected sites. With TOTP, users can secure websites and applications with two-factor authentication to prevent data breaches. TOTP differentiate from the LastPass Authenticator or LastPass MFA application as it is only for Vault site entries as opposed to externally saved sites or applications. When a user is logging into a website or application, a TOTP requests that the user provides a verification code to ensure that the individual requesting to login is who they say they are. Time-based one-time passcodes (TOTP) are a form of two-factor authentication (2FA) that add additional security for each login.

LastPass now offers the ability to create a time-based one-time passcode (TOTP) in the LastPass vault for Enterprise and Identity users.
