LastPass Review 2026: Password & Security — Scores & Verdict
LastPass is the most recognized password manager in the category, and in 2026 that recognition cuts both ways: the product remains smooth to use, while the ledger now carries two incidents — the 2022 theft of encrypted vault backups plus unencrypted metadata (URLs, emails, billing addresses, IPs), and a June 2026 third-party vendor breach that exposed customer contact data again (documented across 2026 reviews). Pricing (verified against three independent 2026 sources — the live page renders prices client-side and ships no static numbers): Premium $36/yr ($3/mo), Families $48/yr for 6 users, Teams $4/user/mo up to 50, Business $7/user/mo. The free plan keeps unlimited passwords but restricts you to one device type — computer OR mobile, not both. Rated 3.5/5.
Verdict: LastPass earns a 3.5/5 from our research, standing out for everyday smoothness in a category where familiarity still matters. It fits best for users already deep in its ecosystem; anyone starting fresh should weigh Bitwarden's free unlimited-device tier and no breach history first. 3.5/5
Our six-dimension assessment
We evaluate every tool on the same six dimensions so scores stay comparable across categories: core features, ease of use, stability, collaboration, localization, and value for money. LastPass scored 3.5/5 overall.
Scored 3/5 (research): full vault basics — generator, autofill, sharing, dark web monitoring, 1GB encrypted file storage on Premium — with post-2022 hardening (PBKDF2 raised to 600,000 iterations, fleet rotation, rebuilt infrastructure, verified in reviews).
Scores 4/5 (research): reviewers still rate its capture-and-replay autofill and onboarding checklist among the smoothest — the experience its reputation was built on.
Scored 3/5 (research): the score reflects trust, not uptime — two disclosed incidents in four years is the open question no feature list answers.
Scores 3/5 (research): one-to-many sharing on Premium, shared folders and admin console on Teams/Business — functional, with over 100 business security policies (verified in 2026 reviews).
Scores 2/5 (research): the site switcher shows English, Spanish, German and French editions; no zh/ja interface found.
Scored 3/5 (research): $36/yr is nearly double Bitwarden's $19.80 for comparable features, and the free tier's single-device-type cap is the narrowest in the group — the price is fine; the alternatives make it feel like a trust discount you must not need.
Pricing and plans
Free plan available (one device type); paid from $3/mo annual (Premium $36/yr); Families $48/yr; Business $7/user/mo
Free: unlimited passwords but ONE device type only (computer OR mobile — post-2021 restriction), dark web monitoring, 1-on-1 sharing; Premium $3/mo billed annually ($36/yr): cross-device, 1GB encrypted file storage, one-to-many sharing, emergency access; Families $4/mo ($48/yr) for 6; Teams $4/user/mo ($48/user/yr) up to 50; Business $7/user/mo ($84/user/yr) with SSO. The live pricing page personalizes its price strings client-side (static HTML ships tokens, not numbers) — ladder cross-verified against three independent 2026 reviews. — verified on the official pricing page (2026-09-09).
What to watch: The free plan's device-type restriction (one of computer OR mobile, verified across sources) is the quiet deal-breaker most users discover after installing. And treat any 'LastPass is secure now' claim as half the question: post-2022 hardening is real, but the June 2026 vendor breach shows the incident surface is not only LastPass's own.
Who is LastPass for?
It fits best for users already deep in its ecosystem; anyone starting fresh should weigh Bitwarden's free unlimited-device tier and no breach history first.
If your team matches the profile above — Password & Security use cases where a free entry helps you de-risk the decision — LastPass is worth a structured trial. If not, the comparison below points to alternatives.
What we liked
- Ease of use scored 4/5 (research): reviewers rate its autofill and onboarding among the smoothest in the category — the classic 'it just works' experience.
- Feature breadth on Premium ($3/mo, $36/yr, verified): dark web monitoring, 1GB encrypted file storage, one-to-many sharing, emergency access, smartwatch MFA options.
- Free tier keeps unlimited passwords — the storage itself is never paywalled.
- Post-2022 hardening is real: PBKDF2 iterations raised to 600,000, fleet rotation, rebuilt infrastructure and enhanced logging (documented in 2026 reviews).
What to watch
- Stability/trust scored 3/5: the 2022 incident stole encrypted vault backups plus unencrypted metadata (URLs, emails, billing addresses, IPs), and a June 2026 third-party vendor breach exposed customer contact data again — a two-incident pattern in four years.
- Free plan restricts you to ONE device type — computer or mobile, not both (verified across sources); Bitwarden's free plan has no such cap.
- Value scored 3/5: Premium $36/yr is roughly double Bitwarden's $19.80 for a comparable feature set, matching 1Password's promo price without its polish or clean record.
- No self-hosting and no open-source client — trust is entirely delegated to the vendor.
Scorecard
Research-only: autofill and onboarding rated polished by reviewers, but two disclosed incidents (2022 encrypted-vault theft; June 2026 third-party vendor breach exposing customer contact data) make trust the open question; free tier capped to one device type; site switcher shows en/es/de/fr with no zh/ja
Evidence: verified against official documentation & pricing pages lastpass.companicvault.orgtoolradar.comuk.pcmag.com (checked 2026-09-09)
Frequently asked questions
Is LastPass free?
Yes, with an asterisk (verified): unlimited passwords but on one device type only — computer or mobile, not both — plus dark web monitoring and 1-on-1 sharing. Bitwarden's free plan syncs unlimited devices.
Is LastPass safe after the breaches?
The vault encryption (AES-256, PBKDF2 raised to 600,000 iterations) remains sound, and post-2022 infrastructure hardening is documented (verified in 2026 reviews). But the 2022 incident stole encrypted vaults plus unencrypted metadata, and a June 2026 third-party vendor breach exposed customer contact data — your risk call depends on how you weigh a twice-tested attack surface.
LastPass vs Bitwarden?
Bitwarden wins on every sourced axis: $19.80/yr vs $36, unlimited-device free tier vs one-device-type cap, open-source auditable clients, no breach history, and self-hosting on Enterprise. LastPass keeps a smoother out-of-box autofill — the one axis reviewers still hand it.
How credible is this review?
How this review was made: for LastPass, the evidence is based on official documentation. See our methodology for details.