LastPass review

LastPass score breakdown

What LastPass is and who it is for

LastPass is a cloud password manager for individuals, families and businesses. In May 2024 it completed its separation from GoTo, formerly LogMeIn, and now operates under LMI Parent, L.P., a holding entity for its existing shareholders, according to the vendor's press release. The private equity sponsors named there are Francisco Partners and Elliott Management. In August 2022 two incidents combined to expose customer metadata, which is covered in the security discussion below.

LastPass suits people who want unlimited password storage and autofill at no cost, and small teams that want shared folders and policy controls at a low per-user price. Teams that need single sign-on across many applications should compare the higher tiers carefully. Buyers for whom the 2022 breach is a deciding factor are better served by 1Password or Bitwarden.

What LastPass does

The core product is a vault with browser autofill, password capture and unlimited password storage on every plan, including Free. Dark web monitoring is listed as included on every plan, and the vendor lists sharing, emergency access and a family manager dashboard on paid tiers. Plus adds LastPass VPN for up to 10 devices on Windows only. Business plans add an admin console, policies, directory integrations and advanced reporting. Business Max lists AI, SaaS and web monitoring, which is vendor-sourced.

Review platform feedback on G2 praises security and autofill, while complaints focus on autofill errors, password-length problems and login issues. On Capterra, one summary shows 83% of 421 pros-and-cons mentions on ease of use were positive.

Single sign-on is where the tiers differ most. The vendor pricing page excludes SSO from Teams, limits it to 3 apps on Business, and offers unlimited SSO only on Business Max. The vendor trust center lists ISO 27001, SOC 2 Type II, SOC 3, BSI C5 and TRUSTe, and a 2019 vendor post states the SOC 2 and C5 reports are available only under NDA. A Digital Trends guide (third-party reported) states that export works from desktop but not from the mobile app.

The 2022 breach and its aftermath

Third-party reporting describes two incidents in August 2022 in which an attacker compromised an employee's laptop and reached the development environment. Vaults stayed encrypted, but metadata such as names, emails, phone numbers and site URLs was exposed. In November 2025 the UK Information Commissioner's Office fined LastPass UK Ltd £1,228,283 under UK GDPR Articles 5(1)(f) and 32(1), according to TechRadar and CyberInsider. News outlets put the affected UK users at about 1.6 million, while Wikipedia says over a million. The breach history appears as a concern in some Capterra reviews and in many alternatives roundups.

LastPass pricing

All individual plans are billed annually. Plan structure below is vendor-sourced.

• Free: 1 user on one device type, unlimited passwords and autofill, sharing limited to one password with one person at a time, self-service support, and a 30-day Premium trial.
• Premium: 1 user, all devices, emergency access and personal support.
• Families: up to 6 Premium accounts, with shared folders and a family manager dashboard.
• Plus: Premium plus LastPass VPN.
• Teams: up to 50 users, 25 security policies and shared folders, no SSO, 14-day trial.
• Business: unlimited users, 100+ policies, SSO for 3 apps, directory integrations.
• Business Max: Business plus unlimited SSO, advanced MFA and monitoring.

Dollar figures differ by source. Security.org (third-party reported) lists Premium at $3 per month billed annually, Families at $4 per month for up to 6 users, Teams at $4 per user per month and Business at $7 per user per month. PricingSaaS (third-party reported) lists lower figures: Premium at 2.6 per month, Teams at 3.33 and Business at 5.5. Capterra (review platform) shows a starting price of $4 per user per month. Sources disagree and do not explain why.

Entry price understates total cost for teams that need SSO. Teams excludes it, Business caps it at 3 apps, and unlimited SSO requires Business Max. SpendHound (third-party reported) reports average annual spend of about $3,540 for SMBs and about $85,608 for enterprises.

LastPass pros

• The Free plan includes unlimited password storage and autofill.
• Capterra reviewers rate it 4.6 out of 5 across 2,782 reviews, and G2 reviewers rate it 4.5 out of 5 across about 2,056.
• Reviewers on Capterra rate ease of use favorably, with 83% of 421 relevant mentions positive.
• The vendor lists ISO 27001, SOC 2 Type II, SOC 3 and BSI C5 on its trust center.
• Business plans include directory integrations, policies and reporting, and vendor case studies describe fast provisioning, such as Mailchimp moving from several days to minutes (vendor-published, self-reported).

LastPass cons

• The 2022 breach exposed customer metadata, and the UK ICO fine of £1,228,283 followed in November 2025.
• SSO is absent from Teams and capped at 3 apps on Business, so teams needing wider SSO must buy Business Max.
• The Free plan limits you to one device type and sharing of one password with one person.
• G2 reviewers report autofill errors, password-length problems and login issues.
• Documented customer outcomes are vendor-published case studies, and none is independently verified.

How LastPass compares

• Bitwarden: choose it over LastPass if you want an open source password manager with a free tier, because the free plan in this LastPass review is limited to one device type.
• 1Password: choose it over LastPass if the 2022 breach and ICO fine covered in this review rule LastPass out for you.

Featured in: Best password managers

Last researched: October 29, 2026.

Reviewed by Greylisting Team.

LastPass verdict

LastPass earns a middle score: a broad free tier, strong review platform ratings and a full set of vendor-listed certifications, offset by a breach record, a regulator fine and SSO limits that push teams toward its top tier. It suits individuals and small teams that value a low entry price and mainstream autofill. It is not the right choice for buyers who treat the 2022 incident as disqualifying, or for teams that need broad single sign-on without paying for Business Max.