You seem to be experiencing an issue we have seen with certain versions of iOS 15. “Why does logging into LastPass with my YubiKey fail on iPhone/iPad, but works just fine on my computer?” If you are running into any issues with setting up your YubiKey with LastPass, we have listed a few common questions below in our Troubleshooting section. Please note that if you plan to use the YubiKey with your iPhone via NFC, then you will want to be sure that you are using an iPhone 7 or newer on iOS 11 or greater with LastPass for iOS version 4. YubiKey 5 NFC ) on Android and iOS mobile devices. The LastPass Mobile Device Application supports YubiKey two-factor authentication via both direct connection (USB, Lightning, etc.), and via NFC for NFC-enabled YubiKeys (e.g. For instructions on how to associate your YubiKey with your LastPass account, see YubiKey Multifactor Authentication in the LastPass user manual.

The Yubico page on the LastPass site lists the benefits of using YubiKey to protect your LastPass account. Buuuuttttt… Instead of using a nonce, Keypass actually mixes the password with the HMAC, which means that if you don’t have a yubikey with that HMAC secret, you won’t be opening that vault.To use a YubiKey with LastPass, you need to have a LastPass Premium, Families, Enterprise or Teams account.Īny YubiKey configured with a Yubico OTP works with LastPass (with the exception of the Security Key and the YubiKey Bio, which supports FIDO protocols only). It is generally used similar to TOTP, except instead of current time, a nonce(random value to be checked) is used. One example is yubikey hmac authentication. There are ways around this to some degree. It’s only used to grant access, but cannot be used to actually encrypt. Simply hash their password and see if the hash matches then grant them access if they have the correct passwordĮnd to end encryption where the data is completely encrypted by their password and without the password, even if you were granted access, you still can’t see the data

There are two primary forms of “encryption” used to authenticate people While it is possible for the application to simply do an “if pin is equal” check and grant access, the proper way to to encrypt the password with the pin.

Yubikey for lastpass