For some reason I can't edit this article, so I'm going to post an addition I wanted to make here.

In order to harden this process, make sure that you never set the LastPass extension to automatically remember your master password. And always log out of your password manager when you aren't using it. These actions should be taken so that any malware that could potentially end up on your local computer cannot compromise the keystore with your Steemit account password.

If you're configured properly, your phone will automatically receive a 2FA when logging back into LastPass extension, and your workflow won't be interrupted too much.