Unclaimed: Are you working at LastPass?
LastPass Reviews: 4.5/5 — Highly Rated
LastPass is a popular and easy-to-use password manager with premium features and great security tools and multiple account recovery options. Adding an advanced layer of security, the platform offers multi-factor authentication and time-based one-time password protection, dark web monitoring, a one-to-one authenticator, and secure notes. LastPass also offers effective pricing, with a freemium plan that covers extensive features and tiered plans with more robust security features and tools.
| Company | LogMeIn, Inc. |
|---|---|
| Year founded | 2003 |
| Company size | 1001-5000 employees |
| Headquarters | Boston, MA, United States |
| Social Media |
| Capabilities |
API
|
|---|---|
| Segment |
Small Business
Mid Market
Enterprise
|
| Deployment | Cloud / SaaS / Web-Based, Desktop Chromebook, Desktop Mac, Desktop Windows, Mobile Android, Mobile iPad, Mobile iPhone |
| Support | 24/7 (Live rep), Chat, Email/Help Desk, FAQs/Forum, Knowledge Base, Phone Support |
| Training | Documentation |
| Languages | English |
Any honest review of LastPass has to start with 2022, when attackers exfiltrated encrypted vault backups for the company’s entire customer base. The vaults were encrypted, and well-protected ones remain so. But that data is permanently in criminal hands, and researchers have traced cryptocurrency thefts to it as recently as late 2025. For a product whose only job is safeguarding secrets, that history is the review.
- What it is: A password manager with autofill, sharing, dark web monitoring, and business administration tooling.
- Best for: Existing users with strong master passwords who value the mature admin console — and who have already rotated anything sensitive.
- Pricing: Free (one device type). Premium ~$3.37/mo, Families ~$4.53, Teams ~$5.13/user, Business ~$7.54, Business Max ~$8.84. Billed annually.
- The honest catch: The free plan works on computers or mobile, never both, so it cannot sync your phone and laptop.
What Is LastPass?
LastPass is one of the longest-established password managers: a browser extension and app that stores credentials in an encrypted vault, autofills them, generates strong replacements, and shares them with family or colleagues. The business tiers add an admin console, security policies, directory integration, and single sign-on.
Functionally it is a capable, mature product. The admin console in particular is well developed, with over 100 configurable security policies on the Business tier, and the family plan covering six people is priced competitively. Dark web monitoring and a security dashboard are included even on the free tier.
The company operates on a zero-knowledge model, meaning your master password never reaches LastPass’s servers and the company cannot decrypt your vault. That architecture is what limited the 2022 breach from being an outright catastrophe — and understanding exactly how far it limited it is the point of the next section.
What Happened in 2022, and Why It Still Matters
The breach ran in two stages between August and October 2022. Attackers first compromised a developer’s laptop, taking source code and technical secrets. They then used what they had learned to target a DevOps engineer’s home computer, which gave them access to AWS S3 buckets holding customer vault backups. They obtained encrypted vault backups for the entire customer base.
Three things make this worse than a typical breach:
- Some data was not encrypted. Vault contents were encrypted, but metadata including stored website URLs was not, giving attackers a map of which accounts each vault held.
- Disclosure was slow. LastPass did not publicly connect the two incidents until 27 February 2023, months after the intrusion, and the communication drew heavy criticism from security researchers.
- Stolen encrypted data does not expire. Attackers can attempt to crack those vaults indefinitely — “harvest now, crack later.” Blockchain analytics firm TRM Labs has traced a years-long series of cryptocurrency thefts to these vaults, with incidents continuing into late 2025, typically where master passwords were weak or accounts predated later security hardening.
The consequences have been formal as well as technical. LastPass settled a class action for $24.5 million in 2025, and the UK’s Information Commissioner’s Office issued a monetary penalty against LastPass UK Ltd in November 2025.
What LastPass did in response: it raised the PBKDF2 iteration count to 600,000 rounds for all accounts, a substantial increase that makes brute-forcing a stolen vault far more expensive. Older accounts had been running on dramatically lower counts — some as low as 5,000 — which is precisely why certain vaults fell and others did not.
If you held a LastPass vault before August 2022, the actionable advice is unambiguous: assume that vault is in criminal hands and rotate every credential it contained, prioritising cryptocurrency seed phrases, financial accounts, and email. Changing your master password now does not help, because the copy they hold is encrypted with the old one.
LastPass Pricing
LastPass injects prices via JavaScript and blocks automated rendering, so the figures below are third-party reported for July 2026, while the plan structure, user counts, and trial terms were verified from LastPass’s own pricing page.
| Plan | Reported price | Users | Notes |
|---|---|---|---|
| Free | $0 | 1 | One device type only — computers or mobile, not both |
| Premium | ~$3.37/mo | 1 | All devices, 30-day trial, 30% off for new users |
| Families | ~$4.53/mo | 6 | Shared folders and family dashboard |
| Teams | ~$5.13/user/mo | up to 50 | Admin console, 25 security policies, 14-day trial |
| Business | ~$7.54/user/mo | Unlimited | 100+ policies, Families for employees |
| Business Max | ~$8.84/user/mo | Unlimited | Unlimited SSO apps, advanced MFA |
- The free plan’s restriction is severe and easy to miss. You choose either computers or mobile devices. Since the entire value of a password manager is having credentials wherever you are, this is a plan that cannot do the job. Bitwarden’s free tier, by contrast, syncs across all devices.
- Families is the best value in the lineup. Six people for ~$4.53 a month works out under $1 each.
- All paid plans bill annually. There is no monthly option, so the trial is your only low-commitment evaluation.
- Business Max is where SSO lives. Unlimited SSO applications and advanced MFA require the top tier.
Who Should Use LastPass
- Existing business customers with a working deployment. Migrating an organization’s password manager is genuinely disruptive, and the admin console is good. If your accounts postdate the breach and enforce strong master passwords, staying is defensible.
- Families wanting cheap coverage for six. The per-person economics are strong.
- Teams needing a mature admin console. Policy depth on Business is a real strength.
It fits poorly for anyone starting fresh, where equally priced competitors carry no comparable history; for cryptocurrency holders, given the documented and continuing pattern of thefts traced to these vaults; and for anyone wanting a usable free tier, which the one-device-type limit precludes.
Honest Pros and Cons
Strengths
- A mature, capable product. Autofill, sharing, and generation all work well after many years of refinement.
- Excellent admin console. 100-plus security policies on Business, which smaller competitors do not match.
- Strong family value. Six users for roughly $4.53 a month.
- 600,000 PBKDF2 iterations. A genuine and significant hardening after the breach.
- Dark web monitoring included, even on the free tier.
- Zero-knowledge architecture. LastPass cannot read your vault, which is what prevented the breach being total.
Limitations
- The 2022 breach is unresolved by nature. Stolen encrypted vaults cannot be recalled, and thefts traced to them continued into late 2025.
- Unencrypted metadata. Stored URLs were not encrypted, revealing which accounts each vault held.
- Slow, criticized disclosure. Months passed before the incidents were publicly connected.
- Regulatory and legal consequences. A $24.5M class action settlement and a UK ICO penalty in November 2025.
- The free plan cannot sync devices. Which defeats the purpose for most users.
- Annual billing only on every paid tier.
LastPass Alternatives and How It Compares
- 1Password is the most common destination for departing LastPass users, with a strong security record and comparable pricing.
- Keeper is the enterprise-oriented alternative with a robust compliance and security posture.
- Dashlane competes closely on features with a clean interface and bundled VPN on some plans.
- Zoho Vault is markedly cheaper and compelling for organizations already running Zoho.
- Bitwarden is the open-source option, auditable and with a genuinely usable free tier that syncs across all devices — the direct answer to LastPass’s free plan restriction.
For a broader survey, browse our password manager directory.
The Verdict
Judged purely as software, LastPass is good. The autofill is reliable, the admin console is among the best in the category, the family plan is excellent value, and raising PBKDF2 iterations to 600,000 was a serious and correct response. Nothing here is incompetent.
But a password manager is not judged purely as software. It is judged on whether you should hand it every secret you own, and LastPass is the only major option in this category asking that question against a breach in which encrypted vaults for its entire customer base were taken. The severity is not hypothetical: researchers have traced cryptocurrency thefts to those vaults into late 2025, the company settled a class action for $24.5 million, and a UK regulator issued a penalty in November 2025. Stolen encrypted data has no expiry date, and no amount of subsequent hardening retrieves it.
So the recommendation splits. If you are choosing a password manager today, choose a different one. 1Password, Keeper, Dashlane, and Bitwarden cost about the same, do the same job, and carry no equivalent history — there is no benefit LastPass offers that offsets the risk of starting here. If you are an existing customer, particularly a business with a working deployment, staying is defensible provided your account postdates the breach or your master password is long and unique. Migration is disruptive and the product is competent.
If you held a vault before August 2022, act regardless of what you decide about the software. Treat every credential in that vault as compromised and rotate it, starting with crypto seed phrases, financial logins, and email. Many affected users never received a direct warning, and the thefts have continued for years precisely because people assumed encryption meant safety. It meant time, and for weak master passwords that time has run out.
FAQ
Is LastPass safe to use in 2026?
The software is technically sound and now uses 600,000 PBKDF2 iterations, a substantial improvement. But encrypted vault backups for the entire customer base were stolen in 2022 and cannot be recovered, and cryptocurrency thefts traced to those vaults continued into late 2025. Accounts created after the breach with strong master passwords are in a materially better position than pre-2022 accounts, but the history is a legitimate reason to prefer a competitor when starting fresh.
What exactly was stolen in the LastPass breach?
Attackers accessed AWS S3 buckets containing encrypted customer vault backups, obtaining them for the entire customer base. Vault contents were encrypted, but metadata including stored website URLs was not, revealing which accounts each vault contained. Source code and technical secrets were also taken in the first stage of the attack. LastPass did not publicly connect the two incidents until February 2023.
I used LastPass before 2022 — what should I do?
Assume that vault is in criminal hands and rotate every credential it held, prioritising cryptocurrency seed phrases, financial accounts, and email. Changing your master password now does not protect the stolen copy, which is encrypted with the old one. This applies whether or not you still use LastPass, and whether or not you were ever notified — many affected users received no direct warning.
Is the LastPass free plan any good?
Not really, because of one restriction: it works on a single device type. You choose either computers or mobile devices, so your phone and laptop cannot both hold your passwords. Since having credentials available wherever you are is the entire point, this makes the free tier impractical for most people. Bitwarden’s free plan syncs across all devices and is the obvious comparison.
What is LastPass best for?
Existing business customers with a mature deployment who value its admin console and its 100-plus security policies, and families wanting six-person coverage cheaply. For anyone selecting a password manager for the first time, competitors at similar prices without a comparable breach history are the more sensible choice.
Compare LastPass with other popular tools in the same category.
I have one place for all my secure passwords -- all randomly generated
There used to be a single point of failure -- but then LastPass started using 2FA for accessing my account -- so it's now ... better than ever. Strongly recommend for personal and business alike.
Primarily -- password and secret management (can include credit card/bank accts #s or sensitive info). Great to have these at the touch of my fingertips vs managing it via some scribbles in a notebook (literally what my mom uses)
It saves all of my passwords and allows me to work effectively and removes the burden on my mind to remember all my passwords. It also allows me to easily access them on different platforms without remembering if I changed them. It also gives me peace of mind because if something happens to me, someone will be able to access my important accounts.
Nothing that I can think of. It is a very well built product.
It allows me to securely give passwords to my virtual assistant and also updates them in real time
It integrates very well with my phone and my work and home pcs.
I do not dislike anything. It does everything I need
I have many many passwords for work and professional. I do not have to keep an insecure note that f all my passwords. I have access to my passwords where ever I am
We only have to remember our Master Password and then we have access to all of our information/websites/etc.
Face recognition not available on all devices.
More productive.
I love that Last Pass saves all my passwords and automatically makes changes if I need to change a password. It is easy to add new websites and passwords. Keeping my personal and business passwords organized is a breeze! I also like that I can log in on any device and have access to all my passwords.
There is nothing I dislike about lastpass
I have so many passwords for my business as well as personal ones. Its easy to keep them organized.
I like how it can work as an extension across all my browsers as well as any device I'm using.
I can't find a single thing to dislike about LastPass.
LastPass simplifies the process of organizing my passwords, as well as secure notes.
I can safely and reliably store all my personal information and generate random passwords for all my online accounts. The password vault keeps all of your passwords stored and encrypted. You can also store other information safely such as credit cards, personal data, notes, addresses, business information, and family social security numbers. I love the fact that I can pull up my info on my MacBook, iPhone, and other devices without having to sign into browsers. The browser extension also allows you to quickly fill out forms from stored information as well. I've been happy with LastPass (as with LogMeIn in the past) since becoming a customer a few years ago.
Obviously the one aspect I don't like is that if your master password is discovered, it unlocks all of your personal information for a hacker to access. Otherwise, everything about LastPass is a pure solution to the problem!
Safely storing and encrypting my user information, passwords, and most importantly, family information (account numbers, social security numbers, phone numbers, etc.).
LastPass is hands down the best way to manage login information, payment card details, secure notes and much more. I can use the Chrome extension on my laptop, toggle between work and personal accounts and seamlessly use the LastPass app on my phone. Adding new passwords via the Chrome extension is automatic, and the app mirrors all of the information so there is no need to enter anything more than once. Autofill options work like a charm for passwords, credit card information and addresses. Like with any password management software, there is a little work on the front end to get all of your information loaded; however, LastPass’ user-friendly platform makes it quick and easy. I cannot imagine managing all of my confidential information any other way.
When I set up a new account on my phone, I have to manually add the new item to the LastPass app. I wish there was a way on the LastPass app to automatically add new accounts as I set them up - like the Chhrome extension does when I set up a new account on my laptop. Perhaps that's user error? LastPass likely has a solution I'm missing.
I am able to launch all of my important accounts and apps with one keystroke and retieve any of my important confidential information immediately. Such a huge time saver!
I've been using LastPass for a few years and see others recommending different tools but LastPass has always been a dependable piece of software that just works whenever and wherever I need it. My passwords have always synced beautifully between my laptop, phone, and iPad. By using the browser extension, I can easily fill any login information I need as well as generate strong passwords for new accounts. Add in the ability for me to categorize my logins and take notes, it's a huge win for my business and saves me tons of time every day.
As of right now, I can't really say that I've run into any issues or concerns. The pros far outweigh anything that I might run into. I don't see myself switching programs anytime in the near future.
I use several different programs that require a login, as well as the need to occasionally have others share their credentials. LastPass makes keeping track of hundreds of passwords easy and readily available when I need them. I save huge amounts of time each day.
All my passwords in one place, accessible from all devices. Love being able to use Face ID.
A few sites don't play well with lastpass but there's always copy and paste.
Sharing passwords with multiple departments and not losing passwords when someone leaves.
I can create folders for each client and subject and then search easily
I wish the launch always worked. Doesn't always work
I honestly am not sure. I use it every day and love that I have one secure place to go
The best part of LastPass is the cross-platform usability and the proactive notifications about old, duplicate, or insecure passwords that may be vulnerable.
Occasionally it doesn't auto-fill in some apps or websites, forcing you to make a few extra clicks.
LastPass addresses the security issues that are prevalent when reusing insecure passwords.
I love that any time I access a new site and create a password, LastPass will send me an automatic "Save Password" notice. It's easy and fast to use LastPass. I also love that it automatically fills in passwords for me.
I can't say I have come across anything I dislike about LastPass. I haven't had any issues since I started using it several years ago. All I need to do is remember one password (the one for LastPass) and I have all my sites and passwords at my fingertips.
LastPass is solving my problem of remembering passwords. When I am constantly changing passwords for work sites, it is so helpful to have LastPass update and save each new password.
I love how convenient last pass is. The taskbar app prompts you to save passwords and also prompts you to auto fill using Last Pass saved passwords. The taskbar is my favorite because you can search your password database right there, without needing to open an additional window!
I wouldn't say I dislike anything about last pass, but I would love to see an additional feature for the family groups to be able to see each other's passwords.
Last pass makes it easy for me, as an executive assistant, to compile my and my boss's passwords in one easy place so I can do anything she needs me to with any account with ease.
I've been using LastPass for years now and I have no reason to go anywhere else. Not only does it work perfectly across all my devices, but it suggests complex passwords so I never use the same password twice. I highly recommend Last Pass!
Sometimes it doesn't recognize my different apps and I have to manually search in the app to find the password.
Generating and auto-filling unique complex passwords instead of different varitations of the same passwordvariations
My favorite feature of lastpass is its integration with biometric authentication on Andriod and iOS. Being able to use my fingerprint to log onto any site is easy. This feature makes the service worth it for that reason alone.
I dislike the search function in the app. Maybe I do not understand how it works, but sometimes I feel like I cannot find a password I just saved. It can be frustrating when creating a new account online, saving the autogenerated password, then not being able to find it. I think this has something to do with 'creating account page URLs' not being the same as the main sites.
I have literally 100's of sites I need to use. I could never remember a unique password for each one. Last pass allows me to have peace of mind that compromised data from one random website does not risk the security of my other accounts.
Keeps or generates passwords in one place and keeps them secure. They are always available on my devices I use all the time. Ends the excel spreadsheet nightmare
Sometimes it's confusing to navigate. Needs better tutorials and explanations.
Endless requirements to change and update passwords. It's now easy to do and keep track of them. I don't know if I'm more productive but it saves time frustration and stress
I have so many accounts that I needed a secure password management resource. I have been using LastPass for years and it helps to keep my passwords in one central location.
I can't say there's anything I dislike. I have been using Lastpass for five years and this password manager app has come in very handy. My friends and family would also agree. It's a valuable too to keep one organized.
The Team at Lastpass is constantly developing more efficient methods for the user. I find that the easy navigation in the app saves me time and allows me to find everything I need relatively quickly.
I've used LastPass for several years now and it has helped me manage my many passwords and increase the security of those passwords. I have more peace of mind that my accounts are secure.
Nothing! Sometimes it doesn't notice my site login if the site sends it to a different URL but that's understandable. It's not all-knowing and If I'm not lazy I can easily correct the issue.
More secure passwords and I no longer use the same password for every account. No more forgetting my password and having to reset everything or having one account compromised and frantically changing all my other ones.
The most helpful thing about using LastPass is the management of all my passwords. Not only does it help me organize them, I can easily create a new password on the spot.
The least helpful thing about LastPass is services not recognizing it. I have passwords in my LastPass vault, but sometimes have to manually enter my details. It's not very time consuming, but can sometimes get annoying.
The business problem that LastPass is solving is it enables me peace of mind. Securing my accounts, especially work related, is an incredible feeling. A weight is lifted, knowing that LastPass has my back.
The ability to use LastPass across multiple devices and platforms, including Mobile, windows, and iOS gives it supreme functionality!
There are some sites that will not allow the LastPast to autofill, takes an extra step to get your credentials entered, but its workable.
LastPass significantly increases our cybersucurity awareness measures, by not having passwords written down, on sticky notes on monitors, etc. It also helps us to create higher security passwords which are needed for many government platforms we use that require a new password that is complex in nature ever 90 days.
All my passwords available at the click of a mouse. Never need to remember any. Used as an extension/add on, can be used to autofill all your log-ins online. So easy to access as everything is stored in your vault along with extras like memorable words or pin codes.
I genuinely can't think of anything it needs to improve.
Can share log-ins and passwords securely. Also monitors possible breaches.
Last Pass makes it super easy to access your passwords anywhere and anytime with both Mobile and Desktop applications. It is the best program that I have used.
Not super easy to change the password in the mobile application
its my password memory bank. I have trouble remembering all my passwords
The ease of use and flexibility of secure password management is fantastic!
I don't have anything negative to say about LastPass. It's been a great experience all around.
I am not keeping my ear to the ground as far as their development. The software features tick all my boxes already.
I love that it is not that big of a hassle to use from both web base and mobile versions.
The biggest gripe I have is that on the mobile version, you have to login in first before you go to use or you can not use face id when using.
Keeping up with my passwords on a secure platform.
Generate secure passwords with ease. One stop shop for managing all your passwords. I'm not sure what I would do without LastPass, but I know my accounts would be less secure.
No real downside. I use on laptop, iphone, fire tablet and even Occulus headset now
Managing unique passwords securely
One master password and a wonderful system of generating and organizing credentials across as many accounts as you can dream of. There is a comfort when generating a secure password for a new account that your information is safe.
For optimum security, it takes a lot of time and attention to work through your library of credentials and replace duplicates, change vulnerable passwords, etc.
I can have the extension in my browser and an app on my phone and log in to all locations simultaneously so that remembering credentials is a thing of the past, it's improved my efficiency.
The best thing is that I only need to remember master password, and then all other login information is in Lastpass, with secure password, even I don't know. :)
Sometimes it doesn't work with iOS very well. but more than 90 % of time it works great. Not sure about Android device because I don't have any of them. Overall, it is great product.
Lastpass lets me have a very secure password. I don't have any problem with security. Never had any issues, and I can be in peace of mind.
Centralized password protection. Accessing my password vault from any device (PC/Mac/Android/iOS/etc.) is incredibly useful. Generating secure passwords and then immediately storing them is fantastic. So many passwords, one place.
On Android there's some hiccups regarding overlays and ability for it to read sites or logins correctly. Newest release fixes a lot of that though. UI/UX is getting better all the time as well.
Creating and remembering secure passwords is a HUGE pain. One vault storing it all is incredibly helpful, but even more imporant is making sure that it's secure.
Being able to have LastPass in my browser allows me to use it on my phone, home computer, and work computer. I also like being able to turn off autofill when I find myself on a website that hasn't been built correctly, and as a result, the fields need to be manually completed.
There are times when LastPass thinks it needs to create a new password as a result of my typing in an authorization code. There are also times when LastPass autofills the same information into multiple fields.
As an application manager, I have multiple user names for the same site. LastPass allows me to save and easily retrieve the appropriate user name and password depending on what I need to accomplish.
