Password Security

How to Recover a LastPass Account If You Forget Your Master Password (Every Option Explained)

By James Whitfield, OnlinePassword · 30 September 2026 · 8 min read

Forgetting your LastPass master password doesn't have to mean losing access to everything. LastPass offers several recovery paths, but which ones work depends on what you set up before you got locked out.

What Happens When You Forget Your LastPass Master Password

Your master password is the only key that decrypts your vault. LastPass uses zero-knowledge encryption, which means they cannot see or reset your password the way a normal website would. Recovery is possible only through mechanisms you enabled in advance.

That's the critical point: your options right now depend entirely on what you configured earlier. Work through the options below in order, start with the fastest and fall through to the next if it doesn't apply to you.

Option 1: Use Your Password Hint

When you created your LastPass account, you were prompted to set a password hint. This hint is sent to your email address and is the lowest-friction first step.

How to use it:

1. 1. Go to the LastPass login page and click "Forgot password?"
2. 2. Enter your email address.
3. 3. Click "Email a password hint".
4. 4. Check your inbox for the hint message.

The hint will not tell you your password, it's whatever phrase you typed when you set up the account. If it jogs your memory, try logging in again. If not, move on.

Option 2: Recover via a Trusted Device (Biometric or SMS)

If you ever logged into LastPass on a mobile device and approved that device as trusted, you can use it to regain access without knowing your master password.

On the LastPass mobile app:

1. 1. Open the LastPass app on your phone.
2. 2. Tap "Forgot password?" on the login screen.
3. 3. Follow the on-screen prompts, you may be asked to verify via Face ID, fingerprint, or a PIN you set on that device.
4. 4. Once identity is confirmed, you can set a new master password.

This only works if you previously enabled biometric login on that device. If you wiped the phone, changed devices, or never enabled biometrics, this path is closed.

Option 3: Account Recovery via SMS (Phone Number on File)

If you added a phone number to your LastPass account and enabled SMS recovery, LastPass can send a one-time recovery code.

Steps:

1. 1. On the login page, click "Forgot password?".
2. 2. Enter your email and select "Send SMS" if that option appears.
3. 3. Enter the code texted to you.
4. 4. You'll be prompted to set a new master password.

SMS recovery must have been enabled before the lockout. If you don't see the SMS option, it was not set up on your account.

Option 4: Use a One-Time Password (OTP) Stored on a USB Drive

LastPass lets you generate one-time passwords and store them as files on a USB drive. If you did this, plug the drive into your computer and follow the prompts on the login page to use the OTP to access your account.

This is a niche option that very few users set up, but if you remember doing it, it's worth checking.

Option 5: Emergency Access via a Trusted Contact

LastPass's Emergency Access feature lets you designate a trusted contact (a family member, colleague, or anyone you trust) who can request access to your vault after a waiting period you define.

If you set this up:

1. 1. Ask your trusted contact to log into their LastPass account.
2. 2. They go to Emergency Access and submit a request for access to your vault.
3. 3. You receive a notification and have the defined waiting period to deny it. If you can't log in to deny it, the timer runs out and they gain access.
4. 4. They can then help you retrieve credentials or confirm your identity.

Emergency Access is designed for account recovery situations exactly like this, but again, it requires setup before the problem occurs.

Comparison: LastPass Recovery Options at a Glance

Option 6: Contact LastPass Support

If none of the self-service options are available to you, contact LastPass support directly. While they cannot decrypt your vault or reset your master password on your behalf (zero-knowledge encryption prevents this), they can:

• - Verify your identity through account ownership checks.
• - Confirm whether any recovery methods are enabled on your account.
• - In some cases, help you access a legacy recovery version of your vault if you had account recovery enabled at the time.

Go to the LastPass Help Center and submit a support ticket. Be prepared to verify account ownership, the email address, billing history, or the last four digits of the payment method on file.

What to Do If All Recovery Options Fail

If you have no trusted devices, no SMS recovery, no USB OTP, and no emergency contact, you may not be able to recover your current vault. LastPass's encryption model prioritizes security over recoverability, if you lose the master password and have no recovery methods set up, the data in the vault is cryptographically inaccessible.

Your realistic options at that point:

1. 1. Create a new LastPass account with the same email address. Any vault data tied to the old master password will not carry over.
2. 2. Recover individual accounts manually using the "Forgot password" flow on each site, one at a time.
3. 3. Check your browser's saved passwords, Chrome, Firefox, Safari, and Edge all have local password stores. Many people have some passwords saved there as a fallback.

It's painful, but it's also the moment to rebuild your setup with recovery options turned on from the start.

How to Prevent This From Happening Again

Once you're back in, do these four things immediately:

1. 1. Set up biometric login on your phone. This is the single fastest recovery path.
2. 2. Add a phone number for SMS recovery. Go to Account Settings → SMS Recovery.
3. 3. Designate an Emergency Access contact. Settings → Emergency Access. Set the waiting period to something reasonable, 3 to 7 days is common.
4. 4. Write your master password down and store it somewhere physically secure. A locked drawer, a fireproof safe, or a sealed envelope with a trusted family member. This is not paranoia, it's standard practice recommended by security professionals.

Frequently Asked Questions

Can LastPass reset my master password for me? No. LastPass uses zero-knowledge encryption, they don't have access to your master password or vault contents. They can verify your identity and tell you what recovery methods are on your account, but they cannot bypass encryption to reset your password directly.

Will I lose all my saved passwords if I can't recover my account? If you have no recovery methods set up and can't remember your master password, the encrypted vault data becomes inaccessible. You would need to recover individual site passwords through each site's own reset process.

Does LastPass offer a way to print a one-time recovery key? LastPass does not currently offer a static offline recovery key the way some tools do (like a Bitwarden Emergency Sheet). Their recovery methods are tied to devices, phone numbers, or trusted contacts.

How long does SMS recovery take? If SMS recovery is enabled, the code typically arrives within 60 seconds. If you don't receive it, check that your phone number is still active and retry once before switching methods.

What if I still have the LastPass browser extension open in my browser? If your browser session is still active and your vault is unlocked, you can view and export your passwords right now, before the session times out. Go to More Options → Advanced → Export to download a CSV of your vault. Do this immediately if you're still logged in.

Is there a grace period before LastPass locks me out permanently? There is no universal lockout period, failed login attempts will eventually trigger security holds, but there is no countdown to permanent account deletion due to incorrect password attempts alone. You have time to work through the recovery options without rushing.

Next Steps

1. 1. Try your password hint first, it takes 30 seconds and costs nothing.
2. 2. Check your phone for the LastPass app and attempt biometric recovery.
3. 3. Look for SMS recovery as a fallback if the app doesn't help.
4. 4. Contact LastPass support if all self-service paths are closed.
5. 5. Once you're back in, set up all four prevention measures listed above so this never happens again.

If you're building a longer-term password management strategy, consider tools that let you generate strong, memorable passwords in the first place, reducing the load on any single master credential. Strong, unique passwords for every account, plus a recovery plan for your password manager, is the complete solution.