Can I ask a question to those of you who use LastPass?

[Liveonyournerves]

I'm interested in how others get around this...

I use LastPass on my laptop. I was using imessage on my laptop - basically texts that go to my phone, also go to my laptop.

I use multifactor authentication for security. So, I put in my password, then it asks me to click on the authenticator on my phone for the passcode, which I then put in.

But on the multifactor authentication page, there is an option to 'Send me an SMS passcode.' So, if someone stole your computer and managed to work out your Master Password, then they could easily use your Imessage on your computer to receive the SMS passcode - hence rendering the second stage of multi factor authentication less robust.

I like using imessage on the laptop - but should I remove it? Just in case? Or is there a workaround?

I know I'm being a bit security neurotic, but that is the reason I'm using LastPass!

Quick Google suggests you can't switch off sms as an option for second factor.

So yes it slightly undermines it, how easily guessable is your master password? You could unintegrate the imessage linkage each time if you are that worried, have a separate phone, or use another password manager which doesn't have this limitation (if indeed you can't switch it off as hypothesised)

Turn off iMessage.

Unless they’ve massively upgraded the coding, Lastpass is quite easily hackable without anyone needing to guess your master password or steal your computer.

@TakeyourFinalPosition - why do you say that? Is there a better Password manager system I should look into?

I don't use it on my computer, only on my phone and iPad. When I forgot the master password, I had to set up a whole new account so not very hacakable to my mind!

[quote Liveonyournerves]@TakeyourFinalPosition - why do you say that? Is there a better Password manager system I should look into?[/quote]
Assuming you’re using a Mac as you mention iMessage but why not the one built into the Mac?

For a solution we always recommend 1password over others.

Does it send it via iMessage though? Or just a standard SMS. You don't get standard SMSs on the laptop, just iMessages.

Came to say what @SylvanasWindrunner said. iMessage is different to SMS. On an iPhone they are blue not green when they send, and they go through different messaging protocols. They shouldn’t appear on messages on a Mac.

Both SMS and imessages appear

Then you have SMS forwarding on. Just turn it off.

I've given up on lastpass.

I got a new phone. When I tried to log in, it would tell me that someone had tried to log in using my master password, but not to worry, they had kept me safe - but offered me no way to actually log in...

It doesn't help your situation, but it seems rather too secure to me 😆