Skip to content
Novaz AuthenticatorGET

LastPass 2FA: how to use an authenticator app for your vault

By the Novaz team · Updated October 29, 2026
Novaz steps checked against version 1.0.5

On this page
  1. Why the Google Authenticator option
  2. Turn on 2FA with an authenticator app
  3. No backup codes
  4. When LastPass asks for a code
  5. If LastPass rejects your code
  6. Changing phones
  7. If you lose your authenticator
  8. Turning 2FA off
  9. Official LastPass help

Multifactor authentication (MFA) on your LastPass account guards your whole vault. LastPass promotes its own LastPass Authenticator app, but its supported options also include Google Authenticator and Microsoft Authenticator, which it describes as apps that make time-based codes (LastPass, LastPass). This guide sets up the Google Authenticator option with Authenticator App - Novaz on iPhone, which makes the same kind of code. Any authenticator app works the same way. On a Teams or Business account, your admin's policies may limit these steps (LastPass).

How we checked this guide: the LastPass steps come from LastPass's own support articles, linked below, which we read on October 20, 2026. We haven't tested them on a LastPass account, so a label may differ slightly. The Novaz steps are checked against the app, version 1.0.5.

Why the Google Authenticator option

You can't turn on both Google Authenticator and Microsoft Authenticator, and their steps match (LastPass). The Google option has one edge over LastPass Authenticator: if you lose your phone but know your master password, LastPass can switch it off through an emailed link. It can't do that for its own app (LastPass).

LastPass's help doesn't say whether this code can live in LastPass itself; its vault codes are a Teams and Business feature for third-party sites (LastPass). Either way, a code in the vault is out of reach once you're locked out, so keep it in a separate app.

Turn on 2FA with an authenticator app

From LastPass's article updated October 1, 2026 (LastPass). A computer is easiest.

  1. Log in to your vault at lastpass.com/login.
  2. Select Account settings in the left menu, then the Multifactor Options tab.
  3. Select the edit icon for Google Authenticator and set Enabled to Yes.
  4. Choose Allow or Disallow for Permit Offline Access (see below).
  5. For Barcode, click View. Enter your master password if asked and click Continue.
  6. In Novaz, tap +, then Scan QR code, and point the camera at the code. If it's on the same iPhone, take a screenshot and use Choose a photo. See scanning a QR code on the same iPhone.
  7. Can't scan? Click View for Private Key. In Novaz, tap +, then Enter key manually, and type it as the Setup key. See What is a 2FA setup key?
  8. Select Update, enter your master password, and select Continue.
  9. Enter the code from Novaz, select OK, then OK again.

LastPass doesn't say how often these codes change, so scan the QR code if you can: it tells Novaz the code settings. A typed key gets 6 digits every 30 seconds.

Permit Offline Access: Allow keeps an encrypted copy of your vault on the device, which opens without MFA when you're offline. Disallow means no vault at all while you're offline or lastpass.com is down (LastPass).

No backup codes

LastPass's help doesn't mention backup codes for MFA. It recommends turning on more than one MFA option, ideally on different devices (LastPass). That matters with Novaz: unless you turn on iCloud backup or export a backup file, its keys exist only on your iPhone.

When LastPass asks for a code

At the MFA prompt you can trust a computer or device for 30 days, so it skips MFA there; others still ask. Manage them on the Trusted Devices tab in Account settings (LastPass).

LastPass may also ask you, for security, to reset the pairing: in a browser at lastpass.com/login, you enter a code LastPass emails you and scan a new QR code. Once the new entry works, remove the old one from Novaz with Remove account. The reset signs you out everywhere and clears your trusted devices (LastPass).

If LastPass rejects your code

LastPass suggests checking the phone's clock, restarting it, or turning Google Authenticator off and on again (LastPass). On iPhone: Settings > General > Date & Time > Set Automatically. Novaz warns you when the clock is 15 seconds or more off. More causes are in Authenticator code not working?

Changing phones

Do this while you still have the old phone. On the Multifactor Options tab, edit Google Authenticator and click Regenerate for Regenerate Key. Enter your master password, select Continue, scan the new QR code with Novaz on the new iPhone, and confirm with its code (LastPass). If you restore Novaz on the new iPhone from an iCloud backup or backup file, LastPass comes along and you can skip this; without a backup, this is how you move it. See How to transfer your authenticator app to a new iPhone.

If you lose your authenticator

  • Another MFA option: at the prompt, select Additional Multifactor Options on a computer or Use Alternate Multifactor in the mobile app (LastPass).
  • A device still logged in: turn MFA off there, then set it up again (LastPass).
  • Email, if you know your master password: log in, select Additional Multifactor Options, then the lost-device link for Google Authenticator. Enter your master password, then your email, and select Send Email. The emailed link turns MFA off (it may go to your security email). If the phone was lost or stolen, LastPass strongly recommends changing your master password (LastPass).
  • A company account: policies may block the email route, so ask your LastPass admin (LastPass).
  • Nothing else works: select Request help logging in (lastpass.com/identity-verification) and confirm your email with a code. On an untrusted device you then fill in a form to open a case, one every 72 hours. LastPass doesn't say what proof it needs or how long it takes (LastPass).

More in Lost the phone with your authenticator app?

Turning 2FA off

On the Multifactor Options tab, edit Google Authenticator, set Enabled to No, select Update, enter your master password, select Continue, then OK. LastPass suggests removing the entry from your app too (LastPass): in Novaz, open it and tap Remove account.

Official LastPass help

More guides: Security, identity and VPN