The full review
What is LastPass?
LastPass is a password manager that keeps logins, passkeys, payment cards, addresses and secure notes in an encrypted vault and fills them in as you browse. It runs as a browser extension for Chrome, Firefox, Edge, Safari and Opera, as desktop apps for Windows, Mac and Linux, and on Android, iOS and watchOS. LastPass describes the vault as zero-knowledge and end-to-end encrypted, with your master password as the only key that unlocks it.
The pitch has widened lately. LastPass now frames the product as Secure Access Essentials, covering password management, app access and visibility into unapproved AI sign-ins. The lineup splits into personal plans (Free plan, Premium and Families) and business plans (Teams, Business and Business Max), with a separate track for managed service providers.
Daily password work without the friction
The core loop is unglamorous and effective. Save a password once and LastPass autofills it next time, including addresses and payment details at checkout. The built-in password generator produces unique credentials so reuse stops being the default, and automatic device sync pushes every new entry to your trusted browsers and devices. Secure notes hold passports, licenses and Wi-Fi keys, with 1 GB of file attachments on paid tiers.
Smaller touches matter in daily use. Offline mode opens the vault when you are not connected to the internet, and Travel mode lets you select the trusted countries where LastPass stays active; time-based one-time passcodes generated inside the vault are listed only on the Teams, Business and Business Max plans. LastPass also flags Mobile Smart Scanner as a new addition to its personal feature lineup.
Sharing built for households and teams
Secure password sharing is end-to-end encrypted, and even the Free plan includes a basic version. Families provides six Premium accounts plus a family manager dashboard for granting manager rights and organizing shared credentials. On the business side, shared folders let admins group credentials by team and revoke access cleanly when someone leaves. LastPass also bundles a free Families account with every Business and Business Max seat, extending password hygiene into the home accounts of staff.
Admin console, policies and directory integration
Teams is the entry point for small groups, with an admin console, shared folders and 25 security policies. Business raises that to more than 100 policies and adds group user management, advanced reporting and directory integrations for Microsoft Active Directory, Microsoft Entra ID, Google Workspace, OneLogin and Okta, so provisioning follows your directory instead of a spreadsheet. Federated login lets staff reach their vault using existing identity provider credentials, and advanced reporting feeds SIEM integrations with Splunk and Microsoft Sentinel.
LastPass is explicit that admins cannot open employee vaults; they control who gets one, which policies apply, and where password health looks weak.
SaaS visibility and access control in Business Max
Business Max is where LastPass stops being only a vault. SaaS Monitoring surfaces the unsanctioned apps employees actually sign in to, and SaaS Protect lets admins block or restrict risky apps and act on credential risk. The tier lifts the SSO integration cap from three apps to unlimited and adds contextual authentication policies based on location, IP address and device, Workstation MFA for Windows and Mac, and LastPass Universal Proxy for adding multifactor authentication to legacy and VPN apps using LDAP or RADIUS.
Who should choose LastPass
LastPass fits households and small-to-midsize businesses that want vaulting, sharing, MFA and light SSO from one vendor rather than three. Families is strong value for a six-person household, and Business Max makes sense for an IT team that needs shadow SaaS visibility alongside credential management. The vendor reports that more than 100,000 businesses use LastPass.
It is a weaker fit for anyone hoping to run the free tier seriously, since the Free plan is limited to one device type. LastPass addresses the trust question in a Business FAQ entry, saying it is now fully independent with control over its new cloud-native infrastructure and has built eight specialized teams of security and privacy experts; the Trust Center and Compliance Center are the places to check before committing. Teams also caps at 50 users, so growing companies should plan to land on Business.
Strengths
- Affordable paid tiers: Premium $36/yr and Families $48/yr for 6 users undercut most rivals
- Strong crypto on paper: AES-256 with PBKDF2-SHA-256 at 600,000 iterations and zero-knowledge design
- Feature-rich: dark web monitoring, emergency access, built-in authenticator, secure sharing
- Broad platform and browser coverage with polished autofill and a mature web vault
Watch out for
- Severe 2022 breach: encrypted vault backups plus unencrypted URLs were stolen and later tied to crypto thefts
- Free plan is crippled to a single device type, forcing most users to pay
- Lingering trust deficit and slow, criticized disclosure of the breach
- Older accounts may still run on weaker legacy iteration counts unless manually updated
Key features
| Feature | What it does |
|---|
| Zero-knowledge encryption | AES-256 with PBKDF2-SHA-256 key derivation (600,000 iterations); master password never leaves your device |
| Cross-device sync | Unlimited device syncing on Premium and above; free tier is capped to one device type |
| Dark web monitoring | Security dashboard alerts you if stored credentials appear in known breaches |
| Built-in authenticator & passwordless | LastPass Authenticator app plus passwordless login options; advanced/passwordless MFA on business tiers |
| Secure sharing & emergency access | Share credentials and grant trusted emergency access to your vault |
| Admin console (Business) | SSO, SCIM provisioning, directory integration and policy controls for teams |
How LastPass compares
| Alternative | How it differs |
|---|
| 1Password | No breach history and a more polished experience at ~$2.99/mo, but no free tier |
| Bitwarden | Open-source with a genuinely usable free plan syncing unlimited devices; premium just $10/yr |
| Dashlane | Bundles a VPN and slick UI but costs more (~$5/mo) and free plan caps at 25 items |
Frequently asked questions
Is LastPass free?
Yes, LastPass has a free plan with unlimited password storage and autofill. The catch: it works on only one device type, mobile OR desktop, not both. To sync across your phone and computer you must upgrade to Premium at $3/month ($36/year), which also adds dark web monitoring and emergency access.
How much is LastPass?
Personal Premium is $3/month ($36/year) and Families is $4/month ($48/year) for up to 6 users, both billed annually. For businesses, Teams runs about $4.25/user/month (up to 50 users), Business is $7/user/month, and Business Max is $9/user/month. A free plan and free trials are available.
Is LastPass safe?
Technically LastPass uses AES-256 encryption, 600,000 PBKDF2 iterations, and zero-knowledge architecture, so LastPass never sees your master password. However, in 2022 attackers stole encrypted vault backups plus unencrypted website URLs, later linked to crypto thefts. Vaults with strong master passwords stayed protected, but the incident badly damaged trust.
Is LastPass still worth it after the breach?
It depends on your risk tolerance. LastPass hardened its defaults to 600,000 iterations and remains cheap and full-featured. But because encrypted vaults were exfiltrated in 2022, security-conscious users often prefer Bitwarden or 1Password, which have clean records. If you stay, use a long, unique master password and rotate critical logins.
LastPass vs 1Password: which is better?
1Password has never suffered a customer-vault breach and offers a more polished experience at about $2.99/month, but has no free tier. LastPass is cheaper to start (free plan, Premium $36/year) and feature-comparable, yet carries the 2022 breach baggage. For trust, pick 1Password; for budget, LastPass or Bitwarden.
LastPass ratings on other platforms
Independent user ratings from third-party review sites, linked here for transparency.
These are not our editorial score, are captured on the date shown, and may have changed since.