MFA (Multi-factor Authentication) is a method that allows you to establish multiple security layers during credentials’ verification on services or websites.

LastPass users getting blank page or unable to use MFA/2FA code Instead, they only get a blank page or are unable to get a verification code. But it seems that this feature is not working properly.Ĭurrently, many LastPass users cannot use MFA or 2FA.

LastPass also allows you to establish an MFA or 2FA method for websites and services that require login credentials. This way, you can avoid saving them in a browser, protecting yourself against security breaches. LastPass is a password manager that allows you to keep your passwords stored in a ‘safe space’. LastPass is one of the most useful tools for those who want to keep their passwords safe. Original story (published on July 14, 2022) follows: If we expect people to be reachable and to be able to execute work related tasks at all hours, then they need to be supplied with company controlled equipment or there needs to be a clear statement that the risk of allowing someone's personal devices access to company resources is clearly understood.New updates are being added at the bottom of this story……. This goes to a deeper culture issue that exists at LastPass, and many other organizations where people feel, or there is a perception that they must be available 24x7 and setting boundaries is frowned upon. Without seeing the SOC 2 report we really don't know what assertions they made or what tests were performed and we certainly don't know the content of their acceptable use standard. Ostensibly LastPass passed a SOC 2 examination where an outside firm found that their attestation of controls were sufficient, and according to their SOC 3 report ( ) there is an acceptable use standard in place. Either one only really keeps honest people honest.įor all we know Last Pass might have an acceptable use policy that prohibits the accessing of data without the use of a managed device, so why was this engineer accessing corporate assets from their personal device?

Put another way, administrative controls like policies are simply the signs that tell us to keep out of certain areas, the technical controls are the locks on the doors. Counterpoint to the linked article: Administrative controls like policies are only as good as the technical controls that support them.

Lastpass two factor authentication