(Screenshot: )Ī pretty standard “verify a new location” request. I started checking some of my lesser-used accounts, and sure enough, there it was: the email I’d been missing. “No email from LastPass?” in the initial email might have clued me in to look elsewhere, but it didn’t occur to me.Īnd yet. I’ve had LastPass for a long time, and honestly, I don’t recall ever having set up a security email. The next day, I had received a more detailed response. They responded with a request I direct-message them my account email address so they could look into it. With that knowledge, I relaxed and got my work done.
So, as you can see, losing access to my vault would be - at worst - an inconvenience. They all have current recovery information using alternate email accounts, phone numbers, or backup codes I had access to should I need them. I can do a password/account recovery on those accounts to which I need immediate access. Even if I lost access to the vault entirely and had been unable to access my backups, I still would not be locked out of anything. The backup itself is manually encrypted 2 and secure. With remote access to my systems at home, I could, if needed, transfer the backup to my laptop and extract whatever passwords or account credentials I needed. I back up my LastPass vault more or less monthly, and had done so just a week or so prior to my trip. I didn’t need this, but it was an option.
Naturally, since my passwords are long and complex (example: “beKqRCS9UM6Wac5ffkBD”), this was a slow process, but it worked. I opened LastPass, viewed the password for the site I was attempting to access, and carefully entered it on my laptop. There were three ways I was covered, no matter what happened. I didn’t “lose” anything, and I certainly didn’t lose access to any of my accounts. Not being able to sign in to my LastPass account on my laptop seems like it might be a huge problem. You just have to do your part by having up-to-date security information. A minor annoyance, like an extra step to confirm you are who you are, is small compared to the disaster that might result should the wrong person be granted access. When you think about it, extra security on the part of providers like LastPass only makes sense. I have one suggestion for a minor improvement on their part, which I’ll mention below, but the reasoning behind the additional security is sound (I was signing in from a new location). I want to be clear that LastPass did almost everything right.
The experience reinforces the security of using a good password vault like LastPass. After reaching out to LastPass support, they quickly reminded me of a security setting I’d overlooked that would have allowed me back in instantly. I couldn’t sign in to my password vault due to an email that appeared not to arrive - but realized I had several other ways to access the information and accounts in my vault.
0 kommentar(er)
