Enpass vs LastPass Comparison

• Premium (individual, 1-year): $23.99 per year
• Family (up to 6, 1-year): $47.99 per year

• Premium (individual, 1-year): $36 per year
• Families (6 users, 1-year): $48 per year

The vault is a SQLite database encrypted via SQLCipher (AES-256-CBC). The Vault Key is derived from the Master Password — and, optionally, a keyfile — using PBKDF2-HMAC-SHA512 at 320,000 iterations, with a unique random salt per database.

The vault is encrypted client-side with AES-256 in CBC mode. The key is derived from the master password with PBKDF2-SHA256 at a default 600,000 iterations for new accounts (older accounts kept far lower counts for years); one extra PBKDF2 round produces the login hash, and further rounds are applied server-side. Passwords, usernames and notes are encrypted, but item URLs and account metadata are stored unencrypted.

Operated by LastPass US LP under the holding entity LMI Parent, L.P. Spun out of GoTo (formerly LogMeIn) as a standalone company on 1 May 2024; the 2022 breach happened while LastPass was still part of GoTo. GoTo and LastPass continue to share the same private-equity owners, Francisco Partners and Elliott Management.