LastPass adds two-factor authentication from Duo Security

LastPass integrated Duo’s mobile-based two-factor authentication solution to the LastPass password management platform to provide an additional layer of credential security. Duo is now available – and free for up to 10 users – for LastPass Free, Premium and Enterprise customers.

The LastPass cloud-based solution saves and fills-in login credentials for every website and online account, plus gives users the option to generate long, strong random passwords on demand for account security. LastPass is platform-agnostic, compatible with multiple operating systems, browsers and mobile devices for a ubiquitous password management system, secured by a single master password.

The addition of Duo’s two-factor solution enhances this robust security system by requiring users to validate their LastPass login credentials with minimal interruption in their workflow. When logging into LastPass, the user is prompted to validate credentials using the Duo Mobile smartphone app. Duo Security is also the only two-factor solution for LastPass that supports multiple authentication options, including SMS for mobile phones or callback on a landline.

For enterprise security management, Duo’s managed solution also protects VPNs, servers and web applications using the same token for each user, providing a simple, aggregated two-factor system that unifies login data storage to prevent credential sprawl.

The Duo admin console streamlines security management, giving admins a way to set up new devices, reset accounts, issue temporary codes, revoke privileges in the event of a lost or stolen phone and more. Duo also provides real-time monitoring and audit logging of every two-factor authentication attempt.

“It takes about three minutes to crack the average password, and almost 75 percent of people use the same password for multiple sites. That means just one compromised password can give hackers frighteningly broad access to your online accounts,” said LastPass CEO, Joe Siegrist. “We’re committed to delivering the perfect marriage of security and ease of use, and the addition of Duo’s mobile-based two-factor solution does just that, allowing our customers to use a device that’s always within reach—their smartphone—to protect their online life.”