
authenticator app · LastPass
LastPass Authenticator
Free phone app from LastPass for push approval and 6-digit codes, with encrypted backup.
In short
- The app is free to download on iPhone and Android1,2,3.
- The App Store listing offers a free encrypted backup to restore codes on a new or reinstalled device1.
- It makes 6-digit codes every 30 seconds for any TOTP service, including those that work with Google Authenticator1.
- Codes can be imported from other authenticator apps and exported again1.
- Version notes say Apple Watch support is for Premium and Families users1.
LastPass Authenticator suits people who already log in to LastPass and want push approval plus codes for other sites in one free app1,2. It covers backup, a biometric lock, import and export1. The catch: LastPass does not say who holds the backup key, a LastPass page limits Free-plan users to passwordless login with the app, and its pages name no audit firm, passkeys or HOTP1,4,5.
Best for: People who already use LastPass and want one app for push approval and codes.
Where the points come from
Security and trust 6 of 37 points
| Rule | What is published | Points |
|---|---|---|
| End-to-end encrypted backup | Not publishedListing calls the backup encrypted but does not say who holds the key1. | 0 / 12 |
| Independent audit, 2023 or later | Not publishedSecurity page names no firms or dates for audits of the app5. | 0 / 10 |
| Open-source apps | Not publishedNot published on the vendor's pages1,5. | 0 / 6 |
| Public bug bounty | Not publishedSecurity page mentions a bug bounty but not a platform, public access or app coverage5. | 0 / 3 |
| App lock | YesThe vendor says to turn on biometric login in the app settings, with a PIN set as backup1. | 6 / 6 |
Backup and recovery 23 of 35 points
| Rule | What is published | Points |
|---|---|---|
| Cloud backup or sync | YesListing offers a free encrypted backup and mentions secure cloud backup, to restore on a new device1. | 10 / 10 |
| Same codes on several devices | Not publishedNot published on the vendor's listing; it describes one-time QR migration between devices1. | 0 / 7 |
| Export all accounts | YesVersion 2.12.1 notes say users can export their data1. | 7 / 7 |
| Import from other apps | YesVersion notes list import from other apps and QR import from Google Authenticator1. | 6 / 6 |
| Works without an account | Not publishedNot published on the vendor's pages; setup for LastPass logins pairs the app with a LastPass account2,3. | 0 / 5 |
Systems 4 of 12 points
Features 6 of 12 points
| Rule | What is published | Points |
|---|---|---|
| Stores passkeys | Not publishedNot published in the App Store listing or on the vendor's authentication pages1,4. | 0 / 3 |
| Sign-in approval prompts | YesListing offers push notifications for one-tap login approval1. | 3 / 3 |
| Counter-based (HOTP) codes | Not publishedNot published; the listing mentions only 6-digit codes every 30 seconds1. | 0 / 3 |
| Folders, tags or search | YesVersion 2.12.1 notes list code grouping; 2.13.0 adds pinned favourites1. | 3 / 3 |
Price 0 of 4 points
| Rule | What is published | Points |
|---|---|---|
| Cost with backup on two devices | Not publishedFree app, but the vendor does not document the same codes on two devices1. | 0 / 4 |
The rule behind each line: how we score authenticator apps.
Plans and prices
As the vendor lists them, before tax. Prices are in US dollars unless the plan shows euros; the points use US dollars, with euros converted at the ECB rate.
| Plan | Price as listed | Per month | Notes |
|---|---|---|---|
| Free app1 person | Free1,2,3 | $0 | Codes, push approval and encrypted backup |
Apple Watch support is for Premium and Families users of LastPass; those plans are not priced here1.
Strengths
Limits
- The listing says the backup is encrypted but not who holds the key1.
- A LastPass page says Free-plan users can use the app only to enable passwordless MFA login4.
- Version notes say Apple Watch support is for Premium and Families users1.
- LastPass's security page mentions routine audits by outside organizations but names no firm or date5.
Concerns on record
- On 11 December 2025 the UK Information Commissioner's Office fined LastPass UK Ltd £1.2 million over a 2022 breach that exposed personal data of up to 1.6 million UK users; it found no evidence passwords were decrypted6.
Other authenticator apps
- 1
Ente AuthPeople who want encrypted sync, open source and a web view of their codes91/100$0cost with backup on two devices - 2
Proton AuthenticatorPeople who want encrypted sync and a Windows or Linux app79/100$0cost with backup on two devices - 3
Zoho OneAuthPeople who want free encrypted backup and the same codes on a phone and a computer74/100$0cost with backup on two devices - 4
2FAS AuthiPhone and Android users who want a free app without an account73/100$0cost with backup on two devices
Sources
- LastPass Authenticator on the App Store, Apple App Store. Accessed 8 Oct 2026.
- Two-factor authentication on Android, LastPass. Accessed 8 Oct 2026.
- Two-factor authentication on iPhone, LastPass. Accessed 8 Oct 2026.
- Multifactor authentication, LastPass. Accessed 8 Oct 2026.
- LastPass security, LastPass. Accessed 8 Oct 2026.
- Password manager provider fined, UK Information Commissioner's Office. Accessed 8 Oct 2026.
Website: www.lastpass.com/solutions/authentication/two-factor-authentication · Markdown version · We are not affiliated with LastPass.