ExpressKeys vs LastPass Comparison

• Premium (individual, 1-year): $36 per year
• Families (6 users, 1-year): $48 per year

White-box design and cryptographic-trust-assumption review plus dynamic penetration testing and source-code audit of the ExpressKeys Android and iOS apps and their shared Rust core. Five senior testers, sixteen days. Backend components and third-party dependency analysis were out of scope.

The vault is protected by a symmetric document key, itself wrapped by a root key derived from your vault password via PBKDF2-HMAC-SHA512 at 210,000 iterations. Cure53's March 2026 audit flagged this as GPU-crackable and recommended a memory-hard function (Argon2id or scrypt) instead.

The vault is encrypted client-side with AES-256 in CBC mode. The key is derived from the master password with PBKDF2-SHA256 at a default 600,000 iterations for new accounts (older accounts kept far lower counts for years); one extra PBKDF2 round produces the login hash, and further rounds are applied server-side. Passwords, usernames and notes are encrypted, but item URLs and account metadata are stored unencrypted.

ExpressVPN (and ExpressKeys as one of its products) is registered in the British Virgin Islands and has been part of Kape Technologies plc (LSE-listed, ultimate beneficial owner Teddy Sagi) since September 2021.

Operated by LastPass US LP under the holding entity LMI Parent, L.P. Spun out of GoTo (formerly LogMeIn) as a standalone company on 1 May 2024; the 2022 breach happened while LastPass was still part of GoTo. GoTo and LastPass continue to share the same private-equity owners, Francisco Partners and Elliott Management.