Resetting does not work using the browser extensions or the LastPass mobile apps. LastPass customers need to log-in to the LastPass website in a web browser to reset the multifactor authentication security feature. There, the company reveals important information about the process. LastPass explains the entire resetting process on a support page. The majority of recent posts on the official support forum are about login issues after following reset instructions. Affected users posted messages on Twitter or the LastPass Support Discussions forum. Users of LastPass who face the loop can't open official support tickets, as these can only be opened by signed-in users. In the past couple of days, several LastPass customers posted on the official forum claiming that they can't open their vaults anymore after following the company's instructions to reset their multifactor authentication. LastPass informed customers about the upcoming change in emails, but has since then also prompted users to reset their multifactor authentication preferences in the used applications.Īt least some LastPass customers have found themselves in reset loops that they can't escape from.

The new default number of password iterations has been set to 600,000 for new accounts and for accounts that update the existing iteration count. This login hash is then submitted to LastPass and used to authenticate the customer. The number of rounds are used to create the encryption key and another round ofPBKDF2 is done to create the login hash. LastPass explains on a support page that it uses the 'PBKDF2 function implemented with SHA-256 to turn the master password of its customers into the encryption key. The increased number of iterations improves the protection of customer's master password, effectively making it more difficult for attackers to discover the correct master password.

LastPass Password Manager 4.117 free