Setup LastPass Authenticator as 2FA/MFA for Drupal

Overview

Two Factor Authentication - TFA adds a layer of security on top of basic Drupal authentication. This increase site's security from unwanted hacks and unauthorized login attempts. By following this document you can configure LastPass Authenticator as a Two Factor Authentication - MFA method for Drupal account. The Drupal Two Factor Authentication - 2FA / Passwordless Login is available for Drupal 7, Drupal 8, Drupal 9 and Drupal 10, and Drupal 11.

Installation Steps

• Using Composer
• Using Drush
• Manual Installation

• Download the module:

  Composer require 'drupal/miniorange_2fa'

• Navigate to Extend menu on your Drupal admin console and search for miniOrange Second Factor Authentication using the search box.
• Enable the module by checking the checkbox and click on install button.
• Configure the module at

  {BaseURL}/admin/config/people/miniorange_2fa/customer_setup

• Download the latest version of LastPass Authenticator on iOS/Android device.
• iPhone, iPod Touch, or iPad: Download
• Android devices: Download

• Install the module:

  drush en miniorange_2fa

• Clear the cache:

   drush cr

• Configure the module at

  {BaseURL}/admin/config/people/miniorange_2fa/customer_setup

• Navigate to Extend menu on your Drupal admin console and click on Install new module button.
• Install the miniOrange Second Factor Authentication module either by downloading the zip or from the URL of the package (tar/zip).
• Click on Enable newly added modules.
• Enable this module by checking the checkbox and click on install button.
• Configure the module at

  {BaseURL}/admin/config/people/miniorange_2fa/customer_setup

Configuration Steps

Configure LastPass Authenticator as a 2FA method:

• Once the module is installed navigate to the Configuration section in the admin console of Drupal site and click on miniOrange Second Factor under people section. (/admin/config/people/miniorange_2fa/setup_twofactor)
• Register/Login with your miniOrange account.
• Navigate to the Setup Two Factor tab and scroll down to the TOTP based 2FA methods section.
• Click on the Configure button next to LastPass Authenticator.

• Open the LastPass Authenticator app and scan the QR code displayed.
• Now, enter the code generated on your LastPass Authenticator under the Enter Passcode generated by the app and click on the Verify button.

You have successfully configured LastPass Authenticator as a 2FA method.

Verify 2FA:

• Open a new browser/private window and navigate to the login page of the Drupal site.
• Try Login with the Drupal credentials.
• You will be asked to authenticate using the LastPass Authenticator passcode.
• Enter the code generated in your LastPass Authenticator app and click on the Verify button.
• If the authentication is successful you will be logged in to the Drupal site.