Unclaimed: Are you working at LastPass?
LastPass Reviews: 4.5/5 — Highly Rated
LastPass is a popular and easy-to-use password manager with premium features and great security tools and multiple account recovery options. Adding an advanced layer of security, the platform offers multi-factor authentication and time-based one-time password protection, dark web monitoring, a one-to-one authenticator, and secure notes. LastPass also offers effective pricing, with a freemium plan that covers extensive features and tiered plans with more robust security features and tools.
| Company | LogMeIn, Inc. |
|---|---|
| Year founded | 2003 |
| Company size | 1001-5000 employees |
| Headquarters | Boston, MA, United States |
| Social Media |
| Capabilities |
API
|
|---|---|
| Segment |
Small Business
Mid Market
Enterprise
|
| Deployment | Cloud / SaaS / Web-Based, Desktop Chromebook, Desktop Mac, Desktop Windows, Mobile Android, Mobile iPad, Mobile iPhone |
| Support | 24/7 (Live rep), Chat, Email/Help Desk, FAQs/Forum, Knowledge Base, Phone Support |
| Training | Documentation |
| Languages | English |
Any honest review of LastPass has to start with 2022, when attackers exfiltrated encrypted vault backups for the company’s entire customer base. The vaults were encrypted, and well-protected ones remain so. But that data is permanently in criminal hands, and researchers have traced cryptocurrency thefts to it as recently as late 2025. For a product whose only job is safeguarding secrets, that history is the review.
- What it is: A password manager with autofill, sharing, dark web monitoring, and business administration tooling.
- Best for: Existing users with strong master passwords who value the mature admin console — and who have already rotated anything sensitive.
- Pricing: Free (one device type). Premium ~$3.37/mo, Families ~$4.53, Teams ~$5.13/user, Business ~$7.54, Business Max ~$8.84. Billed annually.
- The honest catch: The free plan works on computers or mobile, never both, so it cannot sync your phone and laptop.
What Is LastPass?
LastPass is one of the longest-established password managers: a browser extension and app that stores credentials in an encrypted vault, autofills them, generates strong replacements, and shares them with family or colleagues. The business tiers add an admin console, security policies, directory integration, and single sign-on.
Functionally it is a capable, mature product. The admin console in particular is well developed, with over 100 configurable security policies on the Business tier, and the family plan covering six people is priced competitively. Dark web monitoring and a security dashboard are included even on the free tier.
The company operates on a zero-knowledge model, meaning your master password never reaches LastPass’s servers and the company cannot decrypt your vault. That architecture is what limited the 2022 breach from being an outright catastrophe — and understanding exactly how far it limited it is the point of the next section.
What Happened in 2022, and Why It Still Matters
The breach ran in two stages between August and October 2022. Attackers first compromised a developer’s laptop, taking source code and technical secrets. They then used what they had learned to target a DevOps engineer’s home computer, which gave them access to AWS S3 buckets holding customer vault backups. They obtained encrypted vault backups for the entire customer base.
Three things make this worse than a typical breach:
- Some data was not encrypted. Vault contents were encrypted, but metadata including stored website URLs was not, giving attackers a map of which accounts each vault held.
- Disclosure was slow. LastPass did not publicly connect the two incidents until 27 February 2023, months after the intrusion, and the communication drew heavy criticism from security researchers.
- Stolen encrypted data does not expire. Attackers can attempt to crack those vaults indefinitely — “harvest now, crack later.” Blockchain analytics firm TRM Labs has traced a years-long series of cryptocurrency thefts to these vaults, with incidents continuing into late 2025, typically where master passwords were weak or accounts predated later security hardening.
The consequences have been formal as well as technical. LastPass settled a class action for $24.5 million in 2025, and the UK’s Information Commissioner’s Office issued a monetary penalty against LastPass UK Ltd in November 2025.
What LastPass did in response: it raised the PBKDF2 iteration count to 600,000 rounds for all accounts, a substantial increase that makes brute-forcing a stolen vault far more expensive. Older accounts had been running on dramatically lower counts — some as low as 5,000 — which is precisely why certain vaults fell and others did not.
If you held a LastPass vault before August 2022, the actionable advice is unambiguous: assume that vault is in criminal hands and rotate every credential it contained, prioritising cryptocurrency seed phrases, financial accounts, and email. Changing your master password now does not help, because the copy they hold is encrypted with the old one.
LastPass Pricing
LastPass injects prices via JavaScript and blocks automated rendering, so the figures below are third-party reported for July 2026, while the plan structure, user counts, and trial terms were verified from LastPass’s own pricing page.
| Plan | Reported price | Users | Notes |
|---|---|---|---|
| Free | $0 | 1 | One device type only — computers or mobile, not both |
| Premium | ~$3.37/mo | 1 | All devices, 30-day trial, 30% off for new users |
| Families | ~$4.53/mo | 6 | Shared folders and family dashboard |
| Teams | ~$5.13/user/mo | up to 50 | Admin console, 25 security policies, 14-day trial |
| Business | ~$7.54/user/mo | Unlimited | 100+ policies, Families for employees |
| Business Max | ~$8.84/user/mo | Unlimited | Unlimited SSO apps, advanced MFA |
- The free plan’s restriction is severe and easy to miss. You choose either computers or mobile devices. Since the entire value of a password manager is having credentials wherever you are, this is a plan that cannot do the job. Bitwarden’s free tier, by contrast, syncs across all devices.
- Families is the best value in the lineup. Six people for ~$4.53 a month works out under $1 each.
- All paid plans bill annually. There is no monthly option, so the trial is your only low-commitment evaluation.
- Business Max is where SSO lives. Unlimited SSO applications and advanced MFA require the top tier.
Who Should Use LastPass
- Existing business customers with a working deployment. Migrating an organization’s password manager is genuinely disruptive, and the admin console is good. If your accounts postdate the breach and enforce strong master passwords, staying is defensible.
- Families wanting cheap coverage for six. The per-person economics are strong.
- Teams needing a mature admin console. Policy depth on Business is a real strength.
It fits poorly for anyone starting fresh, where equally priced competitors carry no comparable history; for cryptocurrency holders, given the documented and continuing pattern of thefts traced to these vaults; and for anyone wanting a usable free tier, which the one-device-type limit precludes.
Honest Pros and Cons
Strengths
- A mature, capable product. Autofill, sharing, and generation all work well after many years of refinement.
- Excellent admin console. 100-plus security policies on Business, which smaller competitors do not match.
- Strong family value. Six users for roughly $4.53 a month.
- 600,000 PBKDF2 iterations. A genuine and significant hardening after the breach.
- Dark web monitoring included, even on the free tier.
- Zero-knowledge architecture. LastPass cannot read your vault, which is what prevented the breach being total.
Limitations
- The 2022 breach is unresolved by nature. Stolen encrypted vaults cannot be recalled, and thefts traced to them continued into late 2025.
- Unencrypted metadata. Stored URLs were not encrypted, revealing which accounts each vault held.
- Slow, criticized disclosure. Months passed before the incidents were publicly connected.
- Regulatory and legal consequences. A $24.5M class action settlement and a UK ICO penalty in November 2025.
- The free plan cannot sync devices. Which defeats the purpose for most users.
- Annual billing only on every paid tier.
LastPass Alternatives and How It Compares
- 1Password is the most common destination for departing LastPass users, with a strong security record and comparable pricing.
- Keeper is the enterprise-oriented alternative with a robust compliance and security posture.
- Dashlane competes closely on features with a clean interface and bundled VPN on some plans.
- Zoho Vault is markedly cheaper and compelling for organizations already running Zoho.
- Bitwarden is the open-source option, auditable and with a genuinely usable free tier that syncs across all devices — the direct answer to LastPass’s free plan restriction.
For a broader survey, browse our password manager directory.
The Verdict
Judged purely as software, LastPass is good. The autofill is reliable, the admin console is among the best in the category, the family plan is excellent value, and raising PBKDF2 iterations to 600,000 was a serious and correct response. Nothing here is incompetent.
But a password manager is not judged purely as software. It is judged on whether you should hand it every secret you own, and LastPass is the only major option in this category asking that question against a breach in which encrypted vaults for its entire customer base were taken. The severity is not hypothetical: researchers have traced cryptocurrency thefts to those vaults into late 2025, the company settled a class action for $24.5 million, and a UK regulator issued a penalty in November 2025. Stolen encrypted data has no expiry date, and no amount of subsequent hardening retrieves it.
So the recommendation splits. If you are choosing a password manager today, choose a different one. 1Password, Keeper, Dashlane, and Bitwarden cost about the same, do the same job, and carry no equivalent history — there is no benefit LastPass offers that offsets the risk of starting here. If you are an existing customer, particularly a business with a working deployment, staying is defensible provided your account postdates the breach or your master password is long and unique. Migration is disruptive and the product is competent.
If you held a vault before August 2022, act regardless of what you decide about the software. Treat every credential in that vault as compromised and rotate it, starting with crypto seed phrases, financial logins, and email. Many affected users never received a direct warning, and the thefts have continued for years precisely because people assumed encryption meant safety. It meant time, and for weak master passwords that time has run out.
FAQ
Is LastPass safe to use in 2026?
The software is technically sound and now uses 600,000 PBKDF2 iterations, a substantial improvement. But encrypted vault backups for the entire customer base were stolen in 2022 and cannot be recovered, and cryptocurrency thefts traced to those vaults continued into late 2025. Accounts created after the breach with strong master passwords are in a materially better position than pre-2022 accounts, but the history is a legitimate reason to prefer a competitor when starting fresh.
What exactly was stolen in the LastPass breach?
Attackers accessed AWS S3 buckets containing encrypted customer vault backups, obtaining them for the entire customer base. Vault contents were encrypted, but metadata including stored website URLs was not, revealing which accounts each vault contained. Source code and technical secrets were also taken in the first stage of the attack. LastPass did not publicly connect the two incidents until February 2023.
I used LastPass before 2022 — what should I do?
Assume that vault is in criminal hands and rotate every credential it held, prioritising cryptocurrency seed phrases, financial accounts, and email. Changing your master password now does not protect the stolen copy, which is encrypted with the old one. This applies whether or not you still use LastPass, and whether or not you were ever notified — many affected users received no direct warning.
Is the LastPass free plan any good?
Not really, because of one restriction: it works on a single device type. You choose either computers or mobile devices, so your phone and laptop cannot both hold your passwords. Since having credentials available wherever you are is the entire point, this makes the free tier impractical for most people. Bitwarden’s free plan syncs across all devices and is the obvious comparison.
What is LastPass best for?
Existing business customers with a mature deployment who value its admin console and its 100-plus security policies, and families wanting six-person coverage cheaply. For anyone selecting a password manager for the first time, competitors at similar prices without a comparable breach history are the more sensible choice.
Compare LastPass with other popular tools in the same category.
LastPass allows me a safe home for my valuable data.
Downsides are the cost. It would be nicer to have better pricing.
The problem being solved is a user does not need to remember multiple passwords.
Works well in all platforms. Keeps track of all my passwords. Generates REALLY complex passwords that I don't have to remember.
The use of a single password to access everything is scary. I wish a login system similar to Google could be implemented. That is only when I am there and with my iPhone, would I be allowed in.
Keep up with all my passwords as well as create and remember new ones.
I love that I can use LastPass on all of my computers, browsers, and devices. I appreciate that it integrates with my Yubikey to secure my account information.
I don't like that it automatically fills in boxes, and that to disable that I have to edit each individual password's setting. I also find the authenticator difficult to manage - Microsoft's is more intuitive.
I would never be able to keep track of all the passwords I have in LastPass securely everywhere as I can with LastPass. I also use the secure note feature to keep track of non-password information.
All the passwords in one place?! 10 years with no issues. Great customer service. Easy to use. Always there to help speed things along instead of doing mental gymnastics remembering a password!
I can't think of anything that I dislike about LastPass so I'm not going to write anything here even though it's asking me to sorry can't think of anything best of luck !
Not having to remember all of my passwords all of the time every single day for every single login for every single website and every time a credit card prompt is asked for
Being able to auto fill passwords, and generating strong passwords
Not much. I can't think of any bad right now
Being able to generate strong passwords
It is easy to use and does all the things I expect it to.
The amount of times it makes me re verify on a device.
It saves my passwords for lots of accounts.
I love that I can now have complicated and more secure passcodes without having to remember all of them AND that I can sort my passwords. Plus I can store info about personal devices and logins.
My only gripe is that I use a web based CRM for work, and I have to disable Lastpass completely in the same browser I use for personal or else it fills CRM fields, then I have to turn it back on.
Keeping track of allllllll my passwords!
Autofill and password generation, love it.
Doesn't always autofill on a few websites and some apps. I wish the password generation feature worked better when creating passwords.
Having secure passwords that I don't have to remember
userinterface and the prompts are great.
there's nothing in specific to dislike here!
Last Pass remembers everything and helps to login without any problem.
Secure password generation and Password Sharing
Offline Access Limitations is a concern for me
I am not afraid of weak passwords and security risks.
Not having to remember all of my passwords and being able to update my passwords easily. Everything is all in one place. Also, I like that I can store other important things in LastPass.
Sometimes I get logged out of LastPass and have to log back in. I know it happens, but it is inconvenient. I'm not sure how this could be remedied.
Having to remember all of my passwords. The passwords are secure and not something that can be easily duplicated. I feel very secure using LastPass.
Reliable. Does what I need to have done.
No complaints.It does what I need to have done.
I have many long and randomly-generated passwords for wide security.
So easy to use and keeps all of my passwords in one place.
Sometimes the password that I generate doesn't immediately copy over to the Vault and I end up having to reset it.
Keeps all of my passwords in one place.
Easy, integrates well with my browser, convenient one stop for passwords and secure notes.
It prompts me to enter my master password too often.
LastPass solves the problem of having to remember logins which is hugely helpful because there are just so many logins!
getting my saved passwords on any of my devices
I have not found anything to make it bettetr
Like I said before very handy tool to have access to any where
I'm able to have all of my personal and professional passwords in one place and with me all the time on my phone and can log in anywhere in the world.
There are no real downsides. However, the iPhone app could work a bit better by auto-filling in the logins and passwords.
Our organization uses it and it's made it much faster and safer to share logins and passwords.
The most helpful feature of LastPass is the Sharing Center, as you can share folders with passwords, notes and DB details with other users or groups straightforwardly.
Overall I don't have any issues, if ever, sometimes I would like to verify the text filled by the extension (toggle between the asterisk's visualization and the existing password, for example), and I don't know how to do it.
Manage team passwords, credentials and overall systems secrets like API Keys, DB connection details, among others. It also provides further security and we're using SSO to log into the account.
Easy to use interface and integrates with your browser. I can also use it on my phone, and I log into many of my apps with its integration options.
The desktop program leaves a lot to be desired. The web plugins are so easy, while the desktop program feels clunky.
I was using Password Safe, but the syncing was clunky, and I needed a password manager to sync between devices (Desktop, Laptop, & Mobile). Plus, my wife found it easy to use, which was a plus.
I have been using LastPass for the last eight years and am happy with my experience. It works on multiple devices and multiple browsers. It is very convenient to have the LastPass browser extension installed. Every time you create any new account somewhere it catches your username and password and offers to add this site to your vault in the cloud. It also offers to generate a random password for you. Every time you change the password it asks if you want to update it in the vault. It also offers passwordless login options using Push notifications and an authenticator app on your mobile device. You always have a local version of your vault on your device which is synced to the cloud.
As of now, I cannot say that I don't like anything about LastPass.
I don't have to remember hundreds of usernames and passwords. Saves time logging in.
The chrome extension is the best! LastPass has been a life savior for helping me protect my data with encrypted, complex passwords while making them easily accessible by keeping them stored. At a click of a button, it quickly enters all my stored information, and I'm logged into sites.
There isn't anything that I don't like about LastPass.
Encrypted passwords to keep hackers out of my online accounts. I'm more productive and spend less time typing in long, complicated passwords.
Having the ability to generate a random and secure password for websites is the best aspect of Last Pass. And then to have access to them whether I am on my phone, my iPad, my laptop, or my desktop makes it even better!
Absolutely nothing! LastPass does everything it promises and I feel very secure in using it to protect my passwords.
Having secure and randomly generated passwords is such a plus! I would never be able to remember the passwords for all of my websites if they were random letters, numbers, and symbols. But LastPass does it for me!
My favorite part is being able to securely save passwords with my team members. I also absolutely love that it works with all of my devices so all my passwords are secure and easy to access.
I honestly don't have anything I dislike about this product. Sometimes on chrome, I get logged off but it is easy to login in again so that is not really a big deal for me.
I don't have to remember my logins and I also don't have to use the same browser all the time. It allows me to login quickly and securely which is very important to me.
It is safe and convenient to use. I don't have to worry about remembering all of my complex passwords or need to keep my accounts open in order to access my work.
Sometimes it only adds the user information or the password and I'm not sure I understand when it does that and why - so it happens that I need to refill the information, but it only takes a few minutes to do.
For work, I need many different accounts and I need them to be safe and private. Therefore I need a place where I can safely store all of my complex passwords without being afraid they will be lost or stolen. LastPass does this job for me.
Lastpass provides a convenient way to create and store extremely strong passwords. It has auto fill features that allow you to quickly sign in. I save time and I stay secure.
I wish they had a better notification system when features or settings change within the product. Additionally, I wish it had better support to use the same website with multiple accounts. It makes it hard if you have multiple accounts for the same website.
Lastpass is allowing my coworkers and me to have a centrally stored place with secure passwords. We can still quickly sign in but we don't have to follow insecure practices such as storing passwords directly in the browser.
It is pretty helpful when you have many accounts to rely on a single and trustworthy service to manage your passwords for easy access on all of your accounts. It saves a lot of time.
I honestly do not like the interphase that much, but it is not much of a problem. In the end it is quite easy to manage and easy to understand naturally. It is just the fact that it is not appealing to the eyes, but it is usefull.
It solves the problem of having to share passwords with other colleagues transparently. Also, it solves the problem of having to remember so many passwords for myself when working.
Es una herramienta perfecta para almacenar tus herramientas de una forma segura y no tener que memorizar mil contraseñas diferentes (o pero, repetir la misma en diferentes sitios). Además, te permite acceder desde diferentes dispositivos.
A veces al limpiar la caché tengo que loguearme de nuevo y el proceso es algo lento. Además, tuvo una brecha de seguridad el año pasado. Parece que no ha tenido consecuencias, pero creo que es importante tenerlo en cuenta.
Me permite guardar y organizar todas mis contraseñas de foen mi trabajo. La verdad es que se ha convertido en una herramienta imprescindible para mi día día. Ah, y aunque parezca una tontería, me evita perder tiempo pensando nuevas contraseñas, ya que puedes generarlas de forma automática.
LastPass helps us create secure passwords, and keeps track of them.
Occasionally the fill-in on mobile is difficult to use.
Keeping track of all the passwords and keeping unique passwords for every site. Sharing passwords for shared accounts across the business.
If you're like most people, you have dozens of passwords that you have to remember. And if you're like most people, you probably use the same password for multiple accounts. This can be a major security risk. That's where LastPass comes in. LastPass is a password management solution that makes it easy to create and store your passwords so YOU don't have to remember them. It also makes it easy to share passwords with others. Best of all, it's zero-knowledge-based and password-protected, so your information is safe. I've been using LastPass for both my business and personal use for a while now and I love it. It's saved me a lot of time and hassle. I highly recommend it.
Re-setting your 'Master' password can be a bit cumbersome however I think it is because they are being ultra careful to ensure you're identity is confirmed. I'd love to see it be a little more 'simple', if possible.
LastPass mainly serves as our password manager however is also leveraged for password sharing, MFA, and SSO which has served to make me more efficient and effective.
I like the fact that you can manage and store all your passwords in one place
Sometimes the app crashes and passwords wont work
It allows the company to provide access to different platforms in a safe way
Having a place to safely store my nearly 500 passwords.
When adding or updating passwords I have to refresh the application and log in again before I can see those updates.
Being able to safely share my passwords with co-workers and family members.
