Yubico Forum
https://forum.yubico.com/

[solved] LastPass Chrome Extension
https://forum.yubico.com/viewtopic.php?f=26&t=2540		 Page 1 of 1
Author:  Zoidberg [ Tue Jan 24, 2017 6:14 pm ]
Post subject:  [solved] LastPass Chrome Extension
Hello! I'm trying to use my YubiKey Neo with Lastpass but it's never worked for me.

In my Lastpass settings, I have setup Yubikey as my PRIMARY multifactor option. My Yubikey is registered in LastPass as key 1.

When I launch Chrome, a second tab opens asking me to INSERT KEY and PRESS BUTTON. When I do this, the field is populated but the tab closes immediately, then open again asking me again to INSERT KEY and PRESS BUTTON. I have uninstalled/reinstalled the extension without any improvement. I have attempted to seek assistance at the LastPass forum without success. I have been told that the tab will reload when the OTP is wrong. How can it be wrong? I registered it as key 1 in LastPass settings, so should it not be the same. No?

I should mention that prior to using LastPass, i tried Password Safe and followed these instructions: https://www.yubico.com/why-yubico/for-i ... word-safe/

Did I mess up my Yubikey by following these instructions. Is there a way to factory restore the Yubikey? My YubiKey works in every other aspect (Yubico authenticator, Google account, etc..) but unable to get it to work with LastPass.

Please help! Thanks!
Author:  ChrisHalos [ Tue Jan 24, 2017 10:28 pm ]
Post subject:  Re: LastPass Chrome Extension
Test the OTP at demo.yubico.com. If it works here, re-register in LastPass. If it doesn't work there again, contact LastPass support.

If our OTP demo doesn't work, you'll need to reprogram following these instructions - https://www.yubico.com/support/knowledg ... ion-guide/
Author:  Zoidberg [ Tue Jan 24, 2017 11:52 pm ]
Post subject:  Re: LastPass Chrome Extension
Thank you! I have gone to demo.yubico.com, selected the SINGLE FACTOR tab, pressed the button, the field populated then I received a message "Congratulations, you have been successfully authenticated". But I still can't get it to work in LastPass.

I followed the instructions in the link you provided. One clarification: It states "Open a text editor. Insert your YubiKey into a USB port of your computer, and touch the gold button. If you see cccccc in the text editor, then your Yubikey is generating OTPs."
 Not sure what they mean by "cccccc" because I'm getting a 46 character alphas that starts with "vvbjdl".

I've reached out to LastPass, but not getting much help. Thanks again.
Author:  ChrisHalos [ Wed Jan 25, 2017 5:53 am ]
Post subject:  Re: LastPass Chrome Extension
The default Yubico OTP credentials that come on all YubiKeys start with "cccccc" and are 44 characters long. That's what LastPass is referring to. The "vv" credentials are user programmed, and work on LastPass as well as long as the AES key has been uploaded to the YubiCloud (the last steps of the programming document I referenced). Basically, as long as the OTP works at demo.yubico.com, the credential can be added to LastPass and used for authentication.

https://helpdesk.lastpass.com/multifact ... ntication/
Author:  Zoidberg [ Wed Jan 25, 2017 2:38 pm ]
Post subject:  Re: LastPass Chrome Extension
Thanks for the reply. It seem that I updated my YubiKey with "vv" credentials. I successfully uploaded them to YubiCloud and passed the test at demo.yubico.com but LastPass still won't accept my OTP in the Chrome extension. Is there any way to revert the credentials to "cccccc" just in case that LastPass insists on "cccccc"?

EDIT: I learned that I can set "cccccc" in Advanced mode. However, the Advanced mode does not have an option to "Upload to Yubico". After writing the "cccccc" configuration, I attempted to register my YubiKey with Lastpass, but receive "Yubikey token failed to validate". If I configure in Advanced mode, how am I supposed to upload to Yubico?
Author:  ChrisHalos [ Wed Jan 25, 2017 4:41 pm ]
Post subject:  Re: LastPass Chrome Extension
User programmed OTP credentials MUST start with "vv", otherwise they cannot be uploaded to the YubiCloud - there are no exceptions. The default credential cannot be restored - the secrets used during programming are only known by the YubiCloud.

There are no issues with "vv" credentials in LastPass. I have several on my account and they all work perfectly.

LastPass also has their own Yubico OTP test page - https://lastpass.com/debug_yubikey.php
Author:  Zoidberg [ Wed Jan 25, 2017 4:51 pm ]
Post subject:  Re: LastPass Chrome Extension
Thanks. I set my YubiKey with "vv" credentials, re-uploaded to Yubico and then tried the LastPass test page and got: SUCCESS! : [vv...] is a VALID QWERTY OTP

I also tried the LastPass add-on in Firefox and getting the same behavior. The key is properly registered at LastPass.com but when I enter the key (press the button) it isn't accepted.

Looks like my issue is fully with LastPass.

Thanks for your help nonetheless.
Author:  Zoidberg [ Sat Jan 28, 2017 5:39 pm ]
Post subject:  Re: [solved] LastPass Chrome Extension
So after several back/forth with LastPass support, they advised me that Yubikey support was only available to Premium (paid) subscribers and I was enrolled in a FREE membership. Although I was aware of this, I signed-up about 2 weeks ago and they sent me an email with the following:

"Thank you for creating a LastPass account. LastPass is always free, but to help you get started we've also unlocked our Premium features for 60 days."

With this, I had reasonable expectations that my Yubikey would work, but they assured me that I need to have a paid account. I replied to them advising that I wasted countless hours trying to get it to work and I strongly suggested they change their welcome email to remove the reference to Premium features being unlocked for 60 days.

At this point, given the negativity of the experience with LastPass, I can't see myself giving them any money to subscribe to Premium.

Cheers.
Page 1 of 1 All times are UTC + 1 hour
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/