Lastpass - Locked Out (MFA broken, SMS broken, calls broken, lastpass broken, I'm done)

[alexcollinsio]

After many years of using lastpass across multiple businesses and my own personal accounts without issue I've become locked out of my personal account. There seems to be some critical internal issues at lastpass with MFA and also with their sms/call capabilities + a disregard for QA and E2E testing.

Currently the state of my account is:

- I have no OTPs to login

- My google authenticator code is not valid because when I was forced to update MFA and the lastpass site shows the new MFA QR code for registration there is not text input field to confirm the new MFA code, I can't believe this isn't caught by some kind of internal QA or E2E testing.

- My Lastpass's "Authenticator" app also doesn't work as I has the same issue where I was forced to update it and couldn't complete the update.

As a result of those MFA update issues I'm left with 2 new MFA registrations (one in my google authenticator and one in the "Authenticator" app, both of which are not finalised because of the issues with the lastpass MFA registration process).

Given my google auth and lastpass auth is broken all I can do is revert to getting a MFA code by sms or by call but the SMS's never arrive... or if you click "call me" you get some message "failed to authenticate".

Lastpass team, this is pretty terrible... Please reach out to me and help me get into my account ASAP. 

I'll be moving to 1password immediately after getting out of this mess...

[nadeemughal]

Yes, same issue here! I'm also lock-out from the account while updating the MFA as the LastPass prompt to update the MFA but when updating the MFA I've enable the LastPass Authenticator and added the 2FA code to other app instead of LastPass Authenticator and it's not working as it should be added to LastPass Authenticator and the SMS and Call me option is not working because maybe phone recovery is not set up and there is no email option to disable MFA as the LastPass Authenticator can't disable using the email.

And, if you are using the Free plan then you can't directly talk to agent but gald you can post issue here and the support agent is actually reaching for assistance.

I've also posted issue here and the support agent is reach and they said if you can't deactive the MFA then you need to submit case here and wait for the support team for disable the MFA for you. So, I've submit a case here and they response yesterday after some hours and asked questions and I have reply their questions and waiting for their response

Hopefully it's helpfull for you

Tip: If you submit the case there then make sure to stay online when they're online otherwise it'll take some time to get response

https://community.logmein.com/t5/LastPass-Support-Discussions/Can-t-login-to-LastPass-account/td-p/3...

https://support.lastpass.com/s/document-item?language=en_US&bundleId=lastpass&topicId=LastPass/LastP...

https://support.lastpass.com/s/contact-support?language=en_US

[AshC_LP]

Hi@alexcollinsio 

I'm seeing a mix of successful/unsuccessful  MFA requests. 

I'm also only seeing login attempts from an iOS device. Are you attempting to re-sync your LastPass Authenticator through a desktop computer at lastpass.com (this is the only way to do so)?

[alexcollinsio]

Hi Ash,

Yes I have attempted to "re-sync" my lastpass authenticator but it's not possible to do so. I can't even access my lastpass account anymore because of everything I have already explained, I only have one active session on my iphone (in the lastpass app). Moreover as I have already explicitly explained, the lastpass authenticator on my ios device no longer has a valid MFA authority for my lastpass account so it doesn't work and again as per the issue I've already explained I'm unable to reset it.

Please tell me exactly what action to take to resolve access to my account.

Regards,

Alex

[alexcollinsio]

Hi @AshC_LP ,

Can you please help me?

Can anyone from lastpass help me?

[KarolH_LP]

Hello @alexcollinsio ,

I've noticed your case has been assigned, our tech team has reached out to you via email. They will be able to assist you with the access, I've shared the comments from this post.

Thanks.