Dashlane vs LastPass Comparison

• Premium (individual, 1-year): $59.88 per year
• Friends & Family (10 members, 1-year): $89.88 per year

• Premium (individual, 1-year): $36 per year
• Families (6 users, 1-year): $48 per year

The vault is encrypted client-side with AES-256 in CBC mode plus HMAC-SHA256 — an encrypt-then-MAC construction, so tampering with the ciphertext is detectable. The key is derived from the master password with Argon2d (3 iterations, 32 MB memory, 2 threads); PBKDF2 remains only as a backward-compatibility fallback that Dashlane says it will deprecate in 2026. All vault fields are encrypted, including usernames, item URLs and notes — not just passwords. Support for legacy CBC-only mode was removed in November 2025.

The vault is encrypted client-side with AES-256 in CBC mode. The key is derived from the master password with PBKDF2-SHA256 at a default 600,000 iterations for new accounts (older accounts kept far lower counts for years); one extra PBKDF2 round produces the login hash, and further rounds are applied server-side. Passwords, usernames and notes are encrypted, but item URLs and account metadata are stored unencrypted.

The product is run by Dashlane, Inc.; the brand and trademarks belong to Dashlane SAS, France. The company is independent and venture-backed — it has raised over $200M across five rounds, the last a $110M Series D led by Sequoia Capital in May 2019, with Bessemer Venture Partners, FirstMark Capital and Rho as earlier backers. It has not been acquired. Dual headquarters in New York and Paris.

Operated by LastPass US LP under the holding entity LMI Parent, L.P. Spun out of GoTo (formerly LogMeIn) as a standalone company on 1 May 2024; the 2022 breach happened while LastPass was still part of GoTo. GoTo and LastPass continue to share the same private-equity owners, Francisco Partners and Elliott Management.