Our verdict · 7.4/10 Good
Feature-complete and familiar, but its breach history means we recommend evaluating alternatives first. If you stay, enforce strong master passwords and rotate critical credentials.
Key takeaways
- Best for: Organisations already invested in LastPass.
- Strongest area: Ease of use (8.4/10). Weakest: Security & privacy (6.4/10).
- Price: From around $4–7 / user / month — free trial available.
- Watch out for: 2022 breach of vault backups.
What is LastPass?
LastPass is one of the best-known password managers, with business plans offering shared folders, policies, SSO and dark-web monitoring. In 2022 it disclosed incidents in which attackers stole customer vault backups (with encrypted fields) and unencrypted metadata. The company has since invested in security changes, but many buyers now weigh this history heavily.
LastPass is made by LastPass and is reviewed here as a password manager. It is priced on a subscription basis, and our editorial score is 7.4 out of 10, calculated from six weighted criteria.
Who it’s for — and who should skip it
Choose LastPass if
- Organisations already invested in LastPass
- Teams needing SSO features
- Users familiar with its interface
Not for you if
- Security-sensitive organisations
- Buyers prioritising a clean security record
Key features
Team credential sharing.
Over 100 security policies.
Alerts on exposed credentials.
Single sign-on add-ons.
- Microsoft Entra ID
- Okta
- Google Workspace
Pros & cons
What we like
- Mature feature set
- SSO and MFA add-ons
- Many policies
- Familiar to many users
Watch out for
- 2022 breach of vault backups
- Trust concerns among security professionals
- Prices have risen
Pricing & true cost
| Plan | Indicative price | Notes |
|---|---|---|
| Teams | ≈ $4 / user / mo | Up to 50 users, billed annually |
| Business | ≈ $7 / user / mo | Billed annually |
Pricing watch-out: Teams plan capped at a small number of users.
True cost at 5, 10 and 25 seats
Cheapest paid plan that fits each team size, from indicative list prices checked October 31, 2026. Excludes tax, add-ons, onboarding fees and promotional discounts.
Contract questions to ask before you sign
- Does the plan auto-renew, and how many days’ notice do you need to cancel?
- Is the advertised price for annual billing? What is the month-to-month price?
- Is the first-year price a promotion? What will renewal cost, and is it capped?
- Is there a minimum number of seats, or a charge for inactive users?
- Are onboarding, implementation or premium-support fees extra?
- How do we export all our data if we leave, and in what format?
General questions for any vendor — not findings about this product. Build a full checklist with our requirements builder.
Indicative USD pricing, last checked October 31, 2026. Vendors change prices and promotions often — always confirm on their website. Model your own numbers with our SaaS TCO calculator.
Score breakdown
| Criterion | Weight | Score | Points | |
|---|---|---|---|---|
| Features & fit | 25% | 8.0 | 2.00 | |
| Ease of use | 15% | 8.4 | 1.30 | |
| Value for money | 15% | 7.6 | 1.10 | |
| Support & reliability | 10% | 7.2 | 0.70 | |
| Security & privacy | 30% | 6.4 | 1.90 | |
| Integrations & ecosystem | 5% | 8.0 | 0.40 | |
| Overall | 100% | Weighted for security products | 7.4 | |
Security & compliance facts
| Item | Status | Question to ask LastPass |
|---|---|---|
| Multi-factor authenticationStops most account takeovers from reused or phished passwords. | Not verified by us | Can admins enforce MFA for every user, on every plan? |
| Single sign-on (SAML/OIDC)Lets you remove a leaver’s access everywhere from one place. | Not verified by us | Is SSO included on the plan we are buying, or only on enterprise tiers? |
| SOC 2 Type II reportIndependent audit of the vendor’s security controls — often required by larger customers. | Not verified by us | Can we see your current SOC 2 Type II report (under NDA if needed)? |
| ISO/IEC 27001 certificationInternational standard for running an information-security programme. | Not verified by us | Which legal entity and services does your ISO 27001 certificate cover? |
| GDPR data processing agreementNeeded if you handle personal data of people in the EU/UK. | Not verified by us | Do you offer a signed DPA and list your sub-processors? |
| HIPAA business associate agreementRequired before US healthcare businesses store protected health information. | Not verified by us | Will you sign a BAA, and on which plans? |
We have not yet verified these items for LastPass against a primary source, so we don’t claim them either way. Check LastPass’s trust or security page and ask for documents in writing.
Before you buy any password manager
Check LastPass against the same list we use for every password manager — and confirm each point on the plan you intend to buy, not the top tier.
- Shared vaults with granular permissions
- Admin policies and reporting
- SSO / directory integration if needed
- Passkey support
- Published third-party audits
See every ranked option in Password Managers.
LastPass alternatives
Pick an alternative by what matters to you
- Cheaper
1Password Business≈ $20/mo vs $40/mo at 10 users (cheapest paid plans, indicative) - Has a free plan
BitwardenLastPass has no free plan; Bitwarden does - Easier to use1Password BusinessEase-of-use score 9.5 vs 8.4
- Better integrations1Password BusinessIntegrations score 8.6 vs 8.0
- Stronger on security1Password BusinessSecurity & privacy score 9.6 vs 6.4
- Higher overall score1Password BusinessOverall 9.1 vs 7.4
Computed from our published scores and indicative pricing for tools in the same category as LastPass. Scores are editorial; see the methodology.
Editor’s picks
A polished business password manager with strong admin controls and excellent usability.
Open-source password management with outstanding value and self-hosting.
Enterprise-grade password management with compliance and privileged access add-ons.
Head-to-head comparisons
Review history
- Scored under methodology v2.0 (six weighted criteria, computed overall score).
LastPass FAQ
What happened in the LastPass breach?
In 2022 attackers accessed development systems and later stole customer vault backups containing encrypted data and some unencrypted metadata such as URLs. Vaults with weak master passwords are at greater risk of being cracked.
Should I switch from LastPass?
Many security professionals recommend it. If you switch, export your vault securely and rotate important passwords.
Does LastPass have a free plan?
No, LastPass does not offer a permanent free plan, but a free trial is available. Pricing starts at From around $4–7 / user / month (indicative).
Who is LastPass best for?
LastPass is best for: organisations already invested in LastPass; teams needing SSO features; users familiar with its interface.
How much does LastPass cost for a team of 10?
On indicative list prices, the cheapest paid plan that fits 10 users (Teams) works out at roughly $40 per month, or about $480 per year, before tax, add-ons and discounts.
How is the LastPass score calculated?
The 7.4/10 overall score is a weighted average of six sub-scores — features & fit, ease of use, value, support & reliability, security & privacy, and integrations — using the published weights for security products. Affiliate relationships have no input. See our methodology page for the full rubric.
What are the best alternatives to LastPass?
Popular alternatives include 1Password Business, Bitwarden, Keeper Business. See our comparisons for side-by-side verdicts.