--- title: LastPass canonical: https://saasranked.com/software/lastpass/ category: Password Managers points: 70 rank: 5 of 10 facts_checked: 2026-10-08 --- # LastPass Well-known password manager with a six-person family plan, passkeys and passwordless login, marked by a 2022 breach. 70 points out of 100. #5 of 10 password managers. Vendor: LastPass US LP. Website: https://www.lastpass.com/ - Premium costs $36 a year ($3 a month), billed yearly [2]. - Families costs $48 a year for six people, each with a private vault [2][3]. - The free plan works on one device type only: computers or phones, not both [1]. - A 2022 breach exposed a copy of customer vaults, and the UK regulator fined LastPass UK Ltd £1.2 million in December 2025 [9][10]. - On desktop you can sign in with a FIDO2 key, Windows Hello or Touch ID instead of the master password [8]. Verdict: LastPass suits families who want a six-person plan at a low price, with passkeys and emergency access [2][3][7][1]. It names ISO 27001 and SOC 2 Type II certifications [5]. The catch is its 2022 breach, in which a copy of customer vaults was stolen with website addresses unencrypted, and a free plan limited to one device type [9][1]. Best for: Families who want a low-cost six-person plan. ## Points | Criterion | Line | Value | Points | Note | |---|---|---|---|---| | Security and audits | End-to-end encrypted vault | Yes | 8/8 | Data is first encrypted on the user's device; LastPass has zero knowledge of vault data [4]. | | Security and audits | Independent audit since 2024 | Not published | 0/8 | LastPass says outside firms run routine audits but names none and publishes no report [5]. | | Security and audits | SOC 2 Type II or ISO 27001 | Yes | 5/5 | LastPass names ISO 27001 and SOC2 Type II certifications [5]. | | Security and audits | Open-source apps | Not published | 0/5 | | | Security and audits | Public bug bounty | Yes | 4/4 | LastPass runs a bug bounty program for security researchers [5]. | | Security and audits | Security key for two-factor sign-in | Yes | 5/5 | Hardware keys such as YubiKey are listed for paid plans, and FIDO2 keys can sign in on desktop [1][8]. | | Apps and extensions | Apps | Windows, macOS, iOS, Android | 8/10 | Desktop apps for Windows and macOS and mobile apps; no Linux app is listed [6]. | | Apps and extensions | Browser extensions | Chrome, Firefox, Safari, Edge | 8/8 | Extensions for Chrome, Firefox, Safari, Edge and Opera [6]. | | Apps and extensions | Web vault | Yes | 2/2 | The vault opens in a web browser [7]. | | Passkeys and sign-in | Stores passkeys | Yes | 8/8 | LastPass saves passkeys in the vault and autofills them at sign-in [7]. | | Passkeys and sign-in | Built-in two-factor codes | Not published | 0/4 | Not listed in the personal plan comparison [1]. | | Passkeys and sign-in | Log in with a passkey | Yes | 3/3 | On desktop, FIDO2 authenticators such as Windows Hello, Touch ID or a security key replace the master password [8]. | | Sharing and family | Family plan | Yes | 5/5 | Families gives six people their own encrypted vault that the family admin cannot open [1][3]. | | Sharing and family | Share with other people | Yes | 5/5 | Free shares one password with one person; paid plans share with several people [1]. | | Sharing and family | Emergency access | Yes | 5/5 | Emergency access is included with Premium and Families [1]. | | Price | Free plan for a computer and a phone | No | 0/7 | The free plan works on desktop or mobile devices, not both [1]. | | Price | Cheapest paid plan | $3/mo | 4/8 | Premium, $36 a year [2]. | ## Plans | Plan | Price | Per month (USD) | |---|---|---| | Free | Free [1] | $0 | | Premium | $36/year [1][2] | $3 | | Families | $48/year [1][2][3] | $4 | | Plus | $84/year [1][2] | $7 | Taxes are added at checkout. Promotional prices follow separate terms and may not apply to current customers [1]. ## Strengths - Families covers six people with private vaults for $48 a year [2][3]. - ISO 27001 and SOC 2 Type II certifications are named [5]. - Saves passkeys and fills them across browsers and devices [7]. - Emergency access is included with Premium and Families [1]. ## Limits - The 2022 breach exposed encrypted vault backups with unencrypted website URLs [9]. - The UK ICO fined LastPass UK Ltd £1.2 million over that breach [10]. - The free plan cannot be used on a computer and a phone at the same time [1]. - No Linux app is listed on the download page [6]. ## Vendor claims (not scored) - LastPass says it found no evidence that unencrypted credit card data was accessed in the 2022 incident [9]. ## Concerns - In 2022 an attacker copied a backup of customer vault data; usernames, passwords and notes stayed encrypted, but website URLs were not [9]. - The UK Information Commissioner's Office fined LastPass UK Ltd £1.2 million in December 2025 over the 2022 breach, which affected up to 1.6 million UK users [10]. ## Sources 1. [Password Manager Pricing: Cost Per User & Plans - LastPass](https://www.lastpass.com/pricing), LastPass, accessed 2026-10-08 2. [LastPass product catalog (prices used on the pricing page)](https://www.lastpass.com/lpapi/purchase/productcatalog), LastPass, accessed 2026-10-08 3. [LastPass Premium vs Families - What plan is best for you?](https://www.lastpass.com/pricing/lastpass-premium-vs-families), LastPass, accessed 2026-10-08 4. [Zero-Knowledge Encryption & Security Model - LastPass](https://www.lastpass.com/security/zero-knowledge-security), LastPass, accessed 2026-10-08 5. [Transparent Security & Customer Data Protection - LastPass](https://www.lastpass.com/security), LastPass, accessed 2026-10-08 6. [Download LastPass | LastPass](https://www.lastpass.com/download), LastPass, accessed 2026-10-08 7. [Passkey Manager: Store & Sync Passkeys Across Every Device - LastPass](https://www.lastpass.com/features/passkeys), LastPass, accessed 2026-10-08 8. [Passwordless Authentication: Faster, Safer Logins - LastPass](https://www.lastpass.com/features/passwordless-authentication), LastPass, accessed 2026-10-08 9. [12-22-2022: Notice of Security Incident](https://blog.lastpass.com/posts/notice-of-recent-security-incident), LastPass, accessed 2026-10-08 10. [Password manager provider fined £1.2m by ICO for data breach](https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2025/12/password-manager-provider-fined/), Information Commissioner's Office, accessed 2026-10-08