saasrankedSoftware, ranked on the facts

password manager · LastPass US LP

LastPass

Well-known password manager with a six-person family plan, passkeys and passwordless login, marked by a 2022 breach.

70/100

#5 of 10 password managers
Facts checked 8 Oct 2026

In short

LastPass suits families who want a six-person plan at a low price, with passkeys and emergency access2,3,7,1. It names ISO 27001 and SOC 2 Type II certifications5. The catch is its 2022 breach, in which a copy of customer vaults was stolen with website addresses unencrypted, and a free plan limited to one device type9,1.

Best for: Families who want a low-cost six-person plan.

Where the points come from

Security and audits22 of 35
Apps and extensions18 of 20
Passkeys and sign-in11 of 15
Sharing and family15 of 15
Price4 of 15

Security and audits 22 of 35 points

RuleWhat is publishedPoints
End-to-end encrypted vaultYesData is first encrypted on the user's device; LastPass has zero knowledge of vault data4.8 / 8
Independent audit since 2024Not publishedLastPass says outside firms run routine audits but names none and publishes no report5.0 / 8
SOC 2 Type II or ISO 27001YesLastPass names ISO 27001 and SOC2 Type II certifications5.5 / 5
Open-source appsNot published0 / 5
Public bug bountyYesLastPass runs a bug bounty program for security researchers5.4 / 4
Security key for two-factor sign-inYesHardware keys such as YubiKey are listed for paid plans, and FIDO2 keys can sign in on desktop1,8.5 / 5

Apps and extensions 18 of 20 points

RuleWhat is publishedPoints
AppsWindows, macOS, iOS, AndroidDesktop apps for Windows and macOS and mobile apps; no Linux app is listed6.8 / 10
Browser extensionsChrome, Firefox, Safari, EdgeExtensions for Chrome, Firefox, Safari, Edge and Opera6.8 / 8
Web vaultYesThe vault opens in a web browser7.2 / 2

Passkeys and sign-in 11 of 15 points

RuleWhat is publishedPoints
Stores passkeysYesLastPass saves passkeys in the vault and autofills them at sign-in7.8 / 8
Built-in two-factor codesNot publishedNot listed in the personal plan comparison1.0 / 4
Log in with a passkeyYesOn desktop, FIDO2 authenticators such as Windows Hello, Touch ID or a security key replace the master password8.3 / 3

Sharing and family 15 of 15 points

RuleWhat is publishedPoints
Family planYesFamilies gives six people their own encrypted vault that the family admin cannot open1,3.5 / 5
Share with other peopleYesFree shares one password with one person; paid plans share with several people1.5 / 5
Emergency accessYesEmergency access is included with Premium and Families1.5 / 5

Price 4 of 15 points

RuleWhat is publishedPoints
Free plan for a computer and a phoneNoThe free plan works on desktop or mobile devices, not both1.0 / 7
Cheapest paid plan$3/moPremium, $36 a year2.4 / 8

The rule behind each line: how we score password managers.

Plans and prices

As the vendor lists them, before tax. Prices are in US dollars unless the plan shows euros; the points use US dollars, with euros converted at the ECB rate.

PlanPrice as listedPer monthNotes
Free1 personFree1$0One device type: computers or phones, not both
Premium1 person$36/year1,2$3All devices, 1 GB file storage
Families6 people$48/year1,2,3$4Six private vaults and shared folders
Plus1 person$84/year1,2$7

Taxes are added at checkout. Promotional prices follow separate terms and may not apply to current customers1.

Strengths

  • Families covers six people with private vaults for $48 a year2,3.
  • ISO 27001 and SOC 2 Type II certifications are named5.
  • Saves passkeys and fills them across browsers and devices7.
  • Emergency access is included with Premium and Families1.

Limits

  • The 2022 breach exposed encrypted vault backups with unencrypted website URLs9.
  • The UK ICO fined LastPass UK Ltd £1.2 million over that breach10.
  • The free plan cannot be used on a computer and a phone at the same time1.
  • No Linux app is listed on the download page6.

Concerns on record

  • In 2022 an attacker copied a backup of customer vault data; usernames, passwords and notes stayed encrypted, but website URLs were not9.
  • The UK Information Commissioner's Office fined LastPass UK Ltd £1.2 million in December 2025 over the 2022 breach, which affected up to 1.6 million UK users10.

What LastPass US LP says

Vendor claims. We show them, but they earn no points.

  • LastPass says it found no evidence that unencrypted credit card data was accessed in the 2022 incident9.

Other password managers

  1. 1
    BitwardenPeople who want a capable free plan and open-source apps
    94/100
    $1.65/mocheapest paid plan
  2. 2
    Proton PassPrivacy-minded people who want a strong free plan and email aliases
    93/100
    $2.99/mocheapest paid plan
  3. 3
    RoboFormPeople who want a cheap paid plan with passkeys
    77/100
    $2.49/mocheapest paid plan
  4. 4
    Keeper Password ManagerPeople who want certified security and a family plan
    74/100
    $3.58/mocheapest paid plan

All 10 password managers

Sources

  1. Password Manager Pricing: Cost Per User & Plans - LastPass, LastPass. Accessed 8 Oct 2026.
  2. LastPass product catalog (prices used on the pricing page), LastPass. Accessed 8 Oct 2026.
  3. LastPass Premium vs Families - What plan is best for you?, LastPass. Accessed 8 Oct 2026.
  4. Zero-Knowledge Encryption & Security Model - LastPass, LastPass. Accessed 8 Oct 2026.
  5. Transparent Security & Customer Data Protection - LastPass, LastPass. Accessed 8 Oct 2026.
  6. Download LastPass | LastPass, LastPass. Accessed 8 Oct 2026.
  7. Passkey Manager: Store & Sync Passkeys Across Every Device - LastPass, LastPass. Accessed 8 Oct 2026.
  8. Passwordless Authentication: Faster, Safer Logins - LastPass, LastPass. Accessed 8 Oct 2026.
  9. 12-22-2022: Notice of Security Incident, LastPass. Accessed 8 Oct 2026.
  10. Password manager provider fined £1.2m by ICO for data breach, Information Commissioner's Office. Accessed 8 Oct 2026.

Website: www.lastpass.com · Markdown version · We are not affiliated with LastPass US LP.