Unclaimed: Are you working at LastPass?
LastPass Reviews: 4.5/5 — Highly Rated
LastPass is a popular and easy-to-use password manager with premium features and great security tools and multiple account recovery options. Adding an advanced layer of security, the platform offers multi-factor authentication and time-based one-time password protection, dark web monitoring, a one-to-one authenticator, and secure notes. LastPass also offers effective pricing, with a freemium plan that covers extensive features and tiered plans with more robust security features and tools.
| Company | LogMeIn, Inc. |
|---|---|
| Year founded | 2003 |
| Company size | 1001-5000 employees |
| Headquarters | Boston, MA, United States |
| Social Media |
| Capabilities |
API
|
|---|---|
| Segment |
Small Business
Mid Market
Enterprise
|
| Deployment | Cloud / SaaS / Web-Based, Desktop Chromebook, Desktop Mac, Desktop Windows, Mobile Android, Mobile iPad, Mobile iPhone |
| Support | 24/7 (Live rep), Chat, Email/Help Desk, FAQs/Forum, Knowledge Base, Phone Support |
| Training | Documentation |
| Languages | English |
Any honest review of LastPass has to start with 2022, when attackers exfiltrated encrypted vault backups for the company’s entire customer base. The vaults were encrypted, and well-protected ones remain so. But that data is permanently in criminal hands, and researchers have traced cryptocurrency thefts to it as recently as late 2025. For a product whose only job is safeguarding secrets, that history is the review.
- What it is: A password manager with autofill, sharing, dark web monitoring, and business administration tooling.
- Best for: Existing users with strong master passwords who value the mature admin console — and who have already rotated anything sensitive.
- Pricing: Free (one device type). Premium ~$3.37/mo, Families ~$4.53, Teams ~$5.13/user, Business ~$7.54, Business Max ~$8.84. Billed annually.
- The honest catch: The free plan works on computers or mobile, never both, so it cannot sync your phone and laptop.
What Is LastPass?
LastPass is one of the longest-established password managers: a browser extension and app that stores credentials in an encrypted vault, autofills them, generates strong replacements, and shares them with family or colleagues. The business tiers add an admin console, security policies, directory integration, and single sign-on.
Functionally it is a capable, mature product. The admin console in particular is well developed, with over 100 configurable security policies on the Business tier, and the family plan covering six people is priced competitively. Dark web monitoring and a security dashboard are included even on the free tier.
The company operates on a zero-knowledge model, meaning your master password never reaches LastPass’s servers and the company cannot decrypt your vault. That architecture is what limited the 2022 breach from being an outright catastrophe — and understanding exactly how far it limited it is the point of the next section.
What Happened in 2022, and Why It Still Matters
The breach ran in two stages between August and October 2022. Attackers first compromised a developer’s laptop, taking source code and technical secrets. They then used what they had learned to target a DevOps engineer’s home computer, which gave them access to AWS S3 buckets holding customer vault backups. They obtained encrypted vault backups for the entire customer base.
Three things make this worse than a typical breach:
- Some data was not encrypted. Vault contents were encrypted, but metadata including stored website URLs was not, giving attackers a map of which accounts each vault held.
- Disclosure was slow. LastPass did not publicly connect the two incidents until 27 February 2023, months after the intrusion, and the communication drew heavy criticism from security researchers.
- Stolen encrypted data does not expire. Attackers can attempt to crack those vaults indefinitely — “harvest now, crack later.” Blockchain analytics firm TRM Labs has traced a years-long series of cryptocurrency thefts to these vaults, with incidents continuing into late 2025, typically where master passwords were weak or accounts predated later security hardening.
The consequences have been formal as well as technical. LastPass settled a class action for $24.5 million in 2025, and the UK’s Information Commissioner’s Office issued a monetary penalty against LastPass UK Ltd in November 2025.
What LastPass did in response: it raised the PBKDF2 iteration count to 600,000 rounds for all accounts, a substantial increase that makes brute-forcing a stolen vault far more expensive. Older accounts had been running on dramatically lower counts — some as low as 5,000 — which is precisely why certain vaults fell and others did not.
If you held a LastPass vault before August 2022, the actionable advice is unambiguous: assume that vault is in criminal hands and rotate every credential it contained, prioritising cryptocurrency seed phrases, financial accounts, and email. Changing your master password now does not help, because the copy they hold is encrypted with the old one.
LastPass Pricing
LastPass injects prices via JavaScript and blocks automated rendering, so the figures below are third-party reported for July 2026, while the plan structure, user counts, and trial terms were verified from LastPass’s own pricing page.
| Plan | Reported price | Users | Notes |
|---|---|---|---|
| Free | $0 | 1 | One device type only — computers or mobile, not both |
| Premium | ~$3.37/mo | 1 | All devices, 30-day trial, 30% off for new users |
| Families | ~$4.53/mo | 6 | Shared folders and family dashboard |
| Teams | ~$5.13/user/mo | up to 50 | Admin console, 25 security policies, 14-day trial |
| Business | ~$7.54/user/mo | Unlimited | 100+ policies, Families for employees |
| Business Max | ~$8.84/user/mo | Unlimited | Unlimited SSO apps, advanced MFA |
- The free plan’s restriction is severe and easy to miss. You choose either computers or mobile devices. Since the entire value of a password manager is having credentials wherever you are, this is a plan that cannot do the job. Bitwarden’s free tier, by contrast, syncs across all devices.
- Families is the best value in the lineup. Six people for ~$4.53 a month works out under $1 each.
- All paid plans bill annually. There is no monthly option, so the trial is your only low-commitment evaluation.
- Business Max is where SSO lives. Unlimited SSO applications and advanced MFA require the top tier.
Who Should Use LastPass
- Existing business customers with a working deployment. Migrating an organization’s password manager is genuinely disruptive, and the admin console is good. If your accounts postdate the breach and enforce strong master passwords, staying is defensible.
- Families wanting cheap coverage for six. The per-person economics are strong.
- Teams needing a mature admin console. Policy depth on Business is a real strength.
It fits poorly for anyone starting fresh, where equally priced competitors carry no comparable history; for cryptocurrency holders, given the documented and continuing pattern of thefts traced to these vaults; and for anyone wanting a usable free tier, which the one-device-type limit precludes.
Honest Pros and Cons
Strengths
- A mature, capable product. Autofill, sharing, and generation all work well after many years of refinement.
- Excellent admin console. 100-plus security policies on Business, which smaller competitors do not match.
- Strong family value. Six users for roughly $4.53 a month.
- 600,000 PBKDF2 iterations. A genuine and significant hardening after the breach.
- Dark web monitoring included, even on the free tier.
- Zero-knowledge architecture. LastPass cannot read your vault, which is what prevented the breach being total.
Limitations
- The 2022 breach is unresolved by nature. Stolen encrypted vaults cannot be recalled, and thefts traced to them continued into late 2025.
- Unencrypted metadata. Stored URLs were not encrypted, revealing which accounts each vault held.
- Slow, criticized disclosure. Months passed before the incidents were publicly connected.
- Regulatory and legal consequences. A $24.5M class action settlement and a UK ICO penalty in November 2025.
- The free plan cannot sync devices. Which defeats the purpose for most users.
- Annual billing only on every paid tier.
LastPass Alternatives and How It Compares
- 1Password is the most common destination for departing LastPass users, with a strong security record and comparable pricing.
- Keeper is the enterprise-oriented alternative with a robust compliance and security posture.
- Dashlane competes closely on features with a clean interface and bundled VPN on some plans.
- Zoho Vault is markedly cheaper and compelling for organizations already running Zoho.
- Bitwarden is the open-source option, auditable and with a genuinely usable free tier that syncs across all devices — the direct answer to LastPass’s free plan restriction.
For a broader survey, browse our password manager directory.
The Verdict
Judged purely as software, LastPass is good. The autofill is reliable, the admin console is among the best in the category, the family plan is excellent value, and raising PBKDF2 iterations to 600,000 was a serious and correct response. Nothing here is incompetent.
But a password manager is not judged purely as software. It is judged on whether you should hand it every secret you own, and LastPass is the only major option in this category asking that question against a breach in which encrypted vaults for its entire customer base were taken. The severity is not hypothetical: researchers have traced cryptocurrency thefts to those vaults into late 2025, the company settled a class action for $24.5 million, and a UK regulator issued a penalty in November 2025. Stolen encrypted data has no expiry date, and no amount of subsequent hardening retrieves it.
So the recommendation splits. If you are choosing a password manager today, choose a different one. 1Password, Keeper, Dashlane, and Bitwarden cost about the same, do the same job, and carry no equivalent history — there is no benefit LastPass offers that offsets the risk of starting here. If you are an existing customer, particularly a business with a working deployment, staying is defensible provided your account postdates the breach or your master password is long and unique. Migration is disruptive and the product is competent.
If you held a vault before August 2022, act regardless of what you decide about the software. Treat every credential in that vault as compromised and rotate it, starting with crypto seed phrases, financial logins, and email. Many affected users never received a direct warning, and the thefts have continued for years precisely because people assumed encryption meant safety. It meant time, and for weak master passwords that time has run out.
FAQ
Is LastPass safe to use in 2026?
The software is technically sound and now uses 600,000 PBKDF2 iterations, a substantial improvement. But encrypted vault backups for the entire customer base were stolen in 2022 and cannot be recovered, and cryptocurrency thefts traced to those vaults continued into late 2025. Accounts created after the breach with strong master passwords are in a materially better position than pre-2022 accounts, but the history is a legitimate reason to prefer a competitor when starting fresh.
What exactly was stolen in the LastPass breach?
Attackers accessed AWS S3 buckets containing encrypted customer vault backups, obtaining them for the entire customer base. Vault contents were encrypted, but metadata including stored website URLs was not, revealing which accounts each vault contained. Source code and technical secrets were also taken in the first stage of the attack. LastPass did not publicly connect the two incidents until February 2023.
I used LastPass before 2022 — what should I do?
Assume that vault is in criminal hands and rotate every credential it held, prioritising cryptocurrency seed phrases, financial accounts, and email. Changing your master password now does not protect the stolen copy, which is encrypted with the old one. This applies whether or not you still use LastPass, and whether or not you were ever notified — many affected users received no direct warning.
Is the LastPass free plan any good?
Not really, because of one restriction: it works on a single device type. You choose either computers or mobile devices, so your phone and laptop cannot both hold your passwords. Since having credentials available wherever you are is the entire point, this makes the free tier impractical for most people. Bitwarden’s free plan syncs across all devices and is the obvious comparison.
What is LastPass best for?
Existing business customers with a mature deployment who value its admin console and its 100-plus security policies, and families wanting six-person coverage cheaply. For anyone selecting a password manager for the first time, competitors at similar prices without a comparable breach history are the more sensible choice.
Compare LastPass with other popular tools in the same category.
Simplifies password management in day to day life
The browser add on and autofill covers login prompts pretty often
Too many passwords
good, efficient, easy to use and set up.
News of data breaches can be concerning.
storing passwords in the safest way possible
LastPass does a great job of recognizing most websites and password fields. There is typically minimal extra effort needed to generate a new password and save it in my LastPass account. I feel secure knowing that all of my paswords are strong and unique.
Sometimes it doesn't save a password automatically once it is generated. But the copy feature helps. I make sure I copy the new password before applying it so if it isn't automatically saved I can still paste it and know what it is.
Saving time and keeping my accounts secure.
LastPass is very user-friendly, simplcity itself. Whether the app or the web version, both are equally intuitive and help me be productive fast.
I don't have something that I dislike. I like it as is.
Given that I have several hundred passwords to remember for each website, app and platform that I use for work, LastPass is a solution that helps me keep track of everything, safely and consitently. The added features of keeping Notes, Addresses, and Software Licenses on LastPass makes it invaluable for my work. I have everything in one place, and I know that it is secured and at hand when needed. It also gives me the opportunity to have my family's data secured in one place, and give them the opportunity to use LastPass too.
I don't have to worry about the safety of my passwords.
It was hard to think of a master password long enough and meeting the security requirements.
It keeps my accounts secure and lessens my concerns about an unauthorized person gaining access to my accounts.
Having this tool on all my devices to secure my passwords and other important information with one log in is so helpful.
I don't have any issues with LastPass at this time
It is helping me secure my passwords and card/shopping info in one place
LastPass makes it easy to generate secure passwords all while housing your personal data in it's encrypted vault. My entire family is now being protected by LastPass.
There are great features that can easily go unnoticed if you are not exploring your vault.
LastPass makes it easy for me to up my game when generating passwords.
LastPass makes it easy to have highly secure passwords!!! Very convenient to use! Love this product!!! It is easy to implement and integrate. I use it all the time.
Nothing! I love this product!!! I use it frequently!!
It allows me to have complicated passwords that are very secure without worrying about forgetting them.
I am a virtual assistant so hold several passwords on the same websites and apps - LastPass allows me to easily select which password I need. I especially appreciate its ease of use on my cell phone. With face recognition to open LastPass, I'm quickly logged in to apps I use frequently. I've not needed customer support, but I receive relevant emails when necessary. I am in and out of password protected sites and app and LastPass allows me to do this quickly and safely.
Sharing passwords isn't always efficient if my client does not use LastPass. I've wondered if there's a way to share across platforms.
LastPass solves the problem of knowing all passwords. I allow LastPass to generate highly secure passwords so I don't repeat old passwords or use weak passwords.
LastPass is easy to use and the extension for browsers makes it easy to fill in passwords.
Literally nothing, I love it. It's so easy to use and seems really secure.
I often forget my passwords if I make them too complex. LastPass allows me to have complex passwords that are secure and I don't have to remember.
Accessabilty. Literally my brain has space for more important things than my silly little passwords!
It's a bummer to have to pay for both multiple devices but also understandable because business.
Solving the problem of not remembering passwords as well as allow me to make more secure passwords that I would have no way to remember (randomized numbers, letters, and symbols)
I really like how safe I feel putting all my 'life' into an app. I feel very secure doing so.
I haven't come across anything I dislike about the app
I keep forgetting all my passwords to all my different accounts. In this app, it keeps all my accounts passwords and usernames in one safe place.
The ability to have all your passwords and log in information in one spot is wonderful. We use to have a paper copy that was hidden and it was a total mess not including the most import thing of not being SAFE. With all different websites requiring your passwords to be a mixture of requirements, this has been wonderful to have and not remember everything.
We haven't encountered any issues yet and do not foresee any to happen
The ability to not worry about forgetting and having to reset passwords nor have an unsafe paper copy
so easy to securely share passwords with team members, as well as the ability to share secure notes.
Everything is useful. Nothing is missing. Everything works great
We have many systems and software platforms that many team members use and LastPass make it simple to share passwords so we don't have to have separate Logins for systems that everyone uses.
Having all my passwords in one secure location is SO helpful. I also appreciate how it tells me when a passcode has expired or if I have used it too many times.
Sometimes the last pass integration button can get in the way of text fields where it doesnt belong.
LastPass gives me piece of mind knowing that all my passwords are in one protected location. There is no way I would be able to manage and easily login to all my accounts without it.
LastPass is so easy to use and I never have to worry about remembering passwords or people hacking into my accounts because my passwords are easy
It was nice when it was free for 2 devices, but that's not the end of the world
All my accounts have different passwords now so if something gets hacked they don't get access to everything. It's so easy to log into things from anywhere and remember family passwords.
I love that I can use Face ID to login on my phone + passwords I use regularly on my computer are always at my finger tips. I often need to share logins with my assistant and secure sharing makes that easy as well.
Haven't found anything to dislike yet. Even if I forget my master password resetting has been a painless process.
As a business owner I have a lot of logins to keep track of- one location to store them all for a low annual fee is the best money I spend each year.
It is the most secure tool to save your personal details. The best thing is it has a double security check to protect the secure note. I have been using this tool for a long time, till time no issues and working correctly. Even I have to change the mobile device; all data is securely retained again in the new device.
Nothing to dislike the application as i am using it since long time and till time no issues.
As it have secured double check for notes, important data can be saved.
Ease of use - saving credentials for yourself is very easy, sharing with a time takes a little learning ,but work well.
Setting up for the team to use/ thinking through the heirarchy took some time , but was worth it.
Setting up and sharing credentials inhouse and with clients -this allows us to do it securely.
Securely manage all my sensitive info and data
It's not free, but it's valuable to my family and me to be more secure
I can keep all my business and personal passwords and sensitive info secure and accessible. Fewer reused passwords and no lost time trying to figure out passwords
It works with a variety of browsers and websites.
Sometimes it tries to be a little TOO helpful.
Managing multiple passwords across various platforms.
The vault is easy to use, navigate and store passwords
Long master passwords are at times a little difficult to remember
LastPass is keeping our business safe. It protects our passwords, and makes sharing credentials safe.
It's super useful for teams that need combined access to multiple sites!! We love it for our remote-first company.
Sometimes it keps a little wonky on certain websites where there are multiples username options or tries to auto fill in areas that are not username or password spaces.
It's allowing our remote team to easily share passwords
Very easy to use and categorise passwords.
Haven't found any yet - it's been great so far.
Helping us to store multiple passwords securely
Its a very easy to use tool and allows me to keep my personal and client informtion separate and secure.
The pop ups on every site are sometimes frustrating.
Making sure that we have security with client information is the most important thing we use in LastPass.
Super easy to use. Very secure, mobile app works great. Can take this anywhere and feel good about the security and simplicity. I use it multiple times a day. Easy to integrate into any web broswer
Sharing passwords seems to require others to also have lastpass.
Single source for all passwords, do not have to remember the hundreds or thousands of passwords I have to use personally and for work. I have many bookkeeping clients and can access their information, statements, etc without bugging them or having to dive deep to find login credentials.
LastPass has been so easy to use that many of our staff have started using it for their personal accounts as well. It makes logins a breeze, and allows us to share client passwords with staff without needing to redo the passwords if anyone ever leaves the company. There are a lot of features to customize based on security needs and preferences.
Honestly can't think of anything! Have not had a single issue with LastPass since we migrated to it.
Password storage for multiple client accounts to be shared with multiple team members/ departments, while maintaining security.
We work with a lot of clients on their financials and having a secure login portal for all their user information has been a huge add to the client experience.
The pop up browser extension can be a bit challenging when navigating which section it is saving the password in.
Client login information being securely stored and not being shared fully with all users.
It's really intuitive, and seamless and easy to use.
It can sometimes give popups or suggestions when they're not needed. And then cover drop down options that the website is providing that I need to access and then I can't get behind Last Pass to select.
Remembering my passwords, and generating safe passwords.
Awesome storage and password protection program. Use often. Very reliable.
N/a no issues at all. No problems with access or anything else.
No problems at all
