Is it Nonetheless Secure and Dependable?

In 2022, LastPass skilled two main information breaches that resulted in buyer information being stolen. This information consisted of encrypted fields reminiscent of web site usernames and passwords, safe notes and form-filled information, and unencrypted information reminiscent of web site URLs.

Whereas LastPass affords a good password supervisor expertise with its slew of two-factor authentication choices and constant password seize and replay, its latest safety incidents stop us from recommending their service.

Is LastPass secure?

No, LastPass isn’t secure to make use of on account of its unlucky information breaches in recent times. LastPass skilled two main information breaches that led to each LastPass buyer and firm information being stolen. The primary incident, which occurred in August 2022, concerned a software program engineer’s company laptop computer being compromised.

In keeping with LastPass, the incident allowed a nasty actor “to achieve entry to a cloud-based improvement atmosphere and steal supply code, technical data, and sure LastPass inner system secrets and techniques.” The corporate reiterated that “[n]o buyer information or vault information was taken throughout this incident.”

LastPass disclosed a second breach on November 22, 2022, whereby the info gained within the August 2022 breach was utilized to entry LastPass buyer information. Specifically, the menace actor gained “unauthorized entry to cloud backups” that included “system configuration information, API secrets and techniques, third-party integration secrets and techniques, and encrypted and unencrypted LastPass buyer information.” This buyer information consisted of encrypted fields reminiscent of web site usernames and passwords, safe notes, and form-filled information and unencrypted information reminiscent of web site URLs.

LastPass has mentioned that the encrypted information stays safe with 256-bit AES encryption as long as the consumer’s grasp password makes use of their password finest practices, reminiscent of having a 12-character minimal and never reusing the grasp password on different websites. In January 2024, LastPass introduced that the corporate will implement a requirement for all prospects to make use of a grasp password with no less than 12 characters. Previously, a 12-character grasp password was the default setting, however prospects nonetheless had the power to decide on a grasp password with fewer characters. It’s the firm’s hope that efforts reminiscent of these will “create stronger and extra resilient encryption keys for accessing and encrypting [customer] LastPass vault information.”

In Might 2024, LastPass introduced it might separate from earlier father or mother firm GoTo and can now function as an unbiased firm underneath LMI Guardian, L.P. The corporate additionally mentioned it would put money into the institution of a devoted menace intelligence crew, “designed to guard the broader LastPass group by proactively monitoring for, analyzing, and serving to to mitigate potential threats.”

Whereas LastPass continues to implement safety adjustments to rebuild public belief, I imagine the danger merely isn’t price taking given the corporate’s historical past of breaches.

Simply final March 2025, it’s been reported {that a} $150 million cryptocurrency cyberheist was presumably on account of dangerous actors using the stolen LastPass vaults in 2022, cracking a consumer’s grasp password, and subsequently utilizing one of many saved passwords to illegally entry a crypto pockets.

In my opinion, you’re a lot better off utilizing safer password managers like Bitwarden, Dashlane, or Keeper — all three of which have but to be concerned in any form of information breach or hack.

Is LastPass free?

LastPass has a free model, albeit with restricted options. It affords a vast variety of password storage and comes with one account. In comparison with a premium LastPass subscription, the free tier will solely permit for one system kind. Because of this you’ll solely have the ability to use LastPass Free on both a pc or a cell system.

Different limitations embody not having LastPass’ One-to-Many password sharing function, no emergency entry capabilities, and the shortage of superior multi-factor authentication choices reminiscent of YubiKey and fingerprint authentication.

In case you’re searching for a free model to make use of long-term, I like to recommend attempting out Bitwarden’s free model. It affords the identical limitless variety of password storage as LastPass but additionally permits entry to vaults on a vast variety of consumer units, in comparison with LastPass’ one-device kind restrict.

LastPass pricing

Like most password managers, LastPass categorizes its pricing into Single Customers & Households and Enterprise prospects. Let’s check out the primary group or plans.

LastPass’ Premium and Households plans are on par with most of its competitors. Its $3 per thirty days Premium plan falls in the midst of comparable subscriptions from Dashlane ($4.99 per thirty days) and RoboForm ($1.66 per thirty days).

The story is identical for its Households plan, priced at $4.00 per thirty days, protecting six accounts. As of March 2025, it sits in the same worth vary with Dashlane’s Buddies and Households plan for $7.49 per thirty days that accommodates 10 customers.

In case you’re particularly occupied with a household plan, Bitwarden’s Households plan at $3.33 per thirty days for six customers is presently one of the best deal. It covers the identical most of six customers at a extra inexpensive worth. It additionally has an excellent safety fame as an open-source password supervisor. To be taught extra, learn our full Bitwarden assessment.

LastPass’ Enterprise plans encompass LastPass Groups and Enterprise.

LastPass’ Groups plan, at $4.00 per consumer per thirty days, is on the pricier finish. If we examine it to 1Password’s Groups Starter Pack, you may cowl 10 customers for $19.95. The identical variety of customers by means of LastPass Groups would quantity to $40 — an enormous bounce in worth. Bitwarden’s Groups Starter plan is comparable, priced at $20 for as much as 10 customers.

LastPass Groups permits as much as 50 customers, which can be helpful to smaller groups with greater than 10 members. Nevertheless, it’s vital to reiterate that you simply received’t get the identical degree of safety with LastPass in comparison with different password managers.

LastPass Enterprise is within the center vary by way of comparable plans to the competitors. LastPass Enterprise, at $7 per consumer per thirty days, is in between Bitwarden’s Enterprise plan for $6 per consumer and Dashlane’s $8 per consumer.

LastPass affords a free 30-day trial for its Premium and Households plan and a 14-day trial for its Groups and Enterprise subscription. In case you actually wish to strive LastPass, going for one in every of these trials is your best choice by way of pricing.

Key options of LastPass

Except for password era, autofill, and multifactor authentication, LastPass features a few attention-grabbing options that make it stand out from the competitors.

Safety Dashboard

LastPass features a password well being function known as Safety Dashboard. It offers you a Safety rating that analyzes consumer safety, checks if in case you have any at-risk passwords, and permits you to handle trusted units.

It additionally incorporates a darkish net monitor that checks whether or not a specific e-mail handle you have got is compromised or is concerned in a knowledge breach at one other firm or service.

I personally like how LastPass bundles each its safety rating and darkish net monitoring into one web page, giving customers quick access to the 2 complementary instruments in a single place.

One-time passwords

LastPass permits you to create a set of momentary, one-time passwords (OTPs) everytime you wish to entry your vault from a public pc and don’t wish to enter your grasp password.

OTPs could be helpful for individuals who continuously journey and don’t carry their very own pc or system on a regular basis. These permit customers to entry their vaults remotely with out having to fret about keyloggers or malware stealing their grasp passwords at any time when they use public WiFi.

Nation restriction

One other travel-friendly function is LastPass’ Nation Restriction toggle. This enables customers to solely permit logins from chosen nations, including a layer of safety everytime you’re touring or in a foreign country.

This can be a handy set-and-forget function that vacationers can make the most of to guard their passwords from being illegally accessed by malicious third-parties at any time when they’re overseas.

Take be aware that these nation restrictions could be bypassed in the event you use a digital non-public community (VPN), as VPNs could make it seem that you simply’re in a foreign country or location apart from your personal.

LastPass authentication and safety choices

LastPass comes with a powerful variety of multifactor authentication choices. At no cost customers, there’s LastPass MFA, Google Authenticator, Microsoft Authenticator, Toopher, Duo Safety, and Grid.

In the meantime, Premium customers can arrange a YubiKey USB as their second issue, in addition to fingerprint or good card authentication. LastPass Enterprise customers additionally get entry to Salesforce authentication.

When it comes to safety choices, LastPass permits you to set trusted units that allow you to skip MFA. Whereas I personally don’t suggest this due to the danger of publicity, it could be handy to show this on in the event you’re solely accessing your vault from one machine or location. LastPass additionally retains a report of the cell units with entry to your LastPass account and your location historical past.

LastPass interface and efficiency

I used LastPass’ net vault for many of my testing, and I discovered the interface to be pretty intuitive. The whole lot from my vault to extra superior choices or settings like emergency entry and MFA have been positioned the place I anticipated them to be.

Design-wise, I believe LastPass’ interface appears to be like a bit dated in comparison with the competitors. Dashlane and Keeper, for instance, have extra refined UI’s in comparison with LastPass’ plain interface. I additionally discovered navigating by means of the LastPass interface to be a bit clunky, with some settings taking a bit longer to load in comparison with the competitors.

For efficiency, nevertheless, I encountered zero points with LastPass’ password seize and replay capabilities. Its autofill function was additionally dependable, filling in username and password fields with none hiccups.

I additionally actually appreciated how the LastPass vault permits you to launch the actual app related to a given login.

With this, one can theoretically use LastPass as a form of command middle the place you may launch and signal into your most-used apps and providers simply.

General, whereas I want LastPass had a extra up to date design, it supplied an easy-to-understand consumer expertise.

SEE: 10 Frequent Cybersecurity Threats and Learn how to Deal with Them (TechRepublic Premium)

LastPass cell app

The expertise on the LastPass cell app is kind of the identical as its net software. I used LastPass’ Android counterpart on my Google Pixel 6 for this assessment, and it inherits the identical intuitive consumer interface of its net app.

The expertise on the LastPass cell app is kind of the identical as its net software.

By default, LastPass cell blacks out screenshots inside the app — an underrated safety function that forestalls dangerous actors from stealing information out of your cell vault. Fingerprint login on the app additionally labored nicely, and I actually appreciated the safety features included within the app, reminiscent of an computerized lock when the app is idle and account restoration by way of biometrics.

It inherits the identical older-looking design of the online app, however this implies you aren’t lacking a lot in the event you solely plan to make use of the cell app over the online model.

LastPass execs

• A number of authentication choices.
• Intuitive consumer interface.
• Helpful one-time password function.
• Nation restriction performance.

LastPass cons

• Has been concerned in two main information breaches.
• Dated interface design.
• Clunky net app expertise.

Is LastPass price it?

No, LastPass’ latest information breaches stop us from contemplating it a worthy password supervisor. That is unlucky, as LastPass affords a good password administration expertise with its intensive MFA choices and dependable password seize and replay.

Nevertheless, these options don’t imply a factor if LastPass can’t reliably preserve your passwords safe and out of dangerous actors’ arms. At this second, LastPass fails to hit this mark.

When it comes to options, choices reminiscent of Bitwarden and 1Password can present the identical password administration expertise with none historical past of knowledge breaches or compromised information.

LastPass alternate options

Given LastPass’ latest safety incidents, I’ve listed three various password managers that haven’t been concerned in breaches and can present extra safety on your information.

Keeper

For bigger companies, Keeper is a good choose because it affords personalized bundles and curated pricing for enterprise prospects. It additionally has a Enterprise Starter subscription for groups of 10 folks and a Marketing strategy tailor-made in the direction of small-to-medium-sized companies.

To be taught extra, take a look at our full Keeper assessment.

Bitwarden

If safety is a prime precedence, Bitwarden is likely one of the finest. It’s open supply, which signifies that its supply code could be reviewed, analyzed, and audited by the general public. It additionally runs on a zero-knowledge structure and implements end-to-end encryption for its password storage.

To be taught extra, take a look at our full Bitwarden assessment.

1Password

For an all-around expertise, 1Password is a secure guess. It comes with an intuitive and modern-looking consumer interface that’s coupled with high-end encryption on your information. It additionally affords a novel Journey Mode function that may profit customers who commonly go overseas for enterprise journeys.

To be taught extra, take a look at our full 1Password assessment.

Evaluation methodology

My assessment of LastPass concerned an in depth evaluation of its safety features, worth, and real-world efficiency. I had hands-on expertise with LastPass by means of a 30-day trial of its Premium plan.

To check LastPass, I used its net vault software and browser extension on my Home windows laptop computer and its cell app on my Google Pixel 6.

I rated LastPass on every little thing from its password administration options to its pricing based mostly on an inner algorithm to get a ranking of three.4 out of 5 stars. The scoring was based mostly each on LastPass by itself and in relation to different password managers out there.

This text was initially printed in December 2023. It was up to date by Luis Millares in March 2025.