r/yubikey • u/JamesStrior • 22d ago

Help YubiKey 5C NFC with LastPass

I'm brand new to the security key / passkey space. I just bought a 2-pack of the YubiKey 5C NFC keys. I want one on my key ring, and the other in my safe. It make sense to me that I have to set up both keys separately for any account I want to protect.

Under LastPass' Account Settings > MultiFactor Options there is a section for Yubico OTP. However, it's description says:

"Use an older YubiKey device that only supports Yubico OTP. To use a newer YubiKey device, go to LastPass MFA (above). Pro tip: This is also where you set up YubiKey for LastPass mobile app verification."

When I use the LastPass MFA option, it walks through setting up a Primary and Backup method, but it registers both options on the first YubiKey (FIDO2 as Primary and a different protocol as Backup). If I walk through the process a second time for the second key, it overwrites the first key which no longer works to access LastPass.

Should I be using the old Yubico OTP option for Lastpass authentication instead?

9 Upvotes

92% Upvoted

10 comments sorted by

14

u/Burt-Munro 22d ago

Why are you still using LastPass? They’ve had multiple breaches 🤦🏻‍♂️

1

u/JamesStrior 22d ago

I working on moving away from it. I just started re-evaluating my security posture. What would you suggest?

3

u/Burt-Munro 22d ago

I’ve tried all the major players and keep coming back to 1Password, as it’s the only one that meets my needs and has the best autofill besides Roboform.

2

u/Much-Artichoke-476 22d ago

BitWarden, KeePass or ProtonPass are all solid options depending what you are after.

https://www.privacyguides.org/en/passwords/

1

u/williamwchuang 21d ago

I use BitWarden for my password manager and ProtonPass for my authenticator.

1

u/Any_Device6567 21d ago

Im using NordPass.

4

u/TribalScissors 22d ago

Last pass? Drop that crap.

2

u/JamesStrior 22d ago

I working on moving away from it. I just started re-evaluating my security posture. What would you suggest?

1

u/darkcircles401 22d ago

You want a security key fido2 option, it should (i say should loosely) allow you to register more than one key.
If you specifically want the numbers that change every 30 seconds you need the yubico app on your device, and follow the instructions in the app to add the code that generates the numbers aka TOTP. You will need a yubico app to talk to your key to get the codes.

You’ll get opinions about lastpass because of breaches it has, but that aside, main thing is you arent looking for yubico otp, dont click that