Keeper vs LastPass Comparison

• Keeper Unlimited (individual, 1-year): $42.99 per year
• Keeper Family (5 users, 1-year): $91.99 per year

• Premium (individual, 1-year): $36 per year
• Families (6 users, 1-year): $48 per year

Each record is encrypted client-side with its own 256-bit AES-GCM key; those record keys are wrapped by a per-user Data Key, which is in turn wrapped by a key derived from the master password with PBKDF2-HMAC-SHA256 at 1,000,000 iterations (128-bit salt) — the highest iteration count among the managers reviewed here. Every field is encrypted, including URLs, titles, notes, custom fields, TOTP secrets and file attachments. The offline cache uses a separate randomly generated Client Key protected with PBKDF2-HMAC-SHA512. A hybrid Kyber key-encapsulation layer began rolling out across the clients in November 2025.

The vault is encrypted client-side with AES-256 in CBC mode. The key is derived from the master password with PBKDF2-SHA256 at a default 600,000 iterations for new accounts (older accounts kept far lower counts for years); one extra PBKDF2 round produces the login hash, and further rounds are applied server-side. Passwords, usernames and notes are encrypted, but item URLs and account metadata are stored unencrypted.

Founder-led (Darren Guccione, CEO; Craig Lurey, CTO), headquartered in Chicago with a product office in El Dorado Hills, California and sales offices in Cork, Ireland and Tokyo. Two minority growth-equity investments: Insight Partners ($60M, August 2020 — the company's first outside equity) and Summit Partners (May 2023). No majority-stake acquisition; the founders retain control.

Operated by LastPass US LP under the holding entity LMI Parent, L.P. Spun out of GoTo (formerly LogMeIn) as a standalone company on 1 May 2024; the 2022 breach happened while LastPass was still part of GoTo. GoTo and LastPass continue to share the same private-equity owners, Francisco Partners and Elliott Management.