LastPass vs RoboForm Comparison

• Premium (individual, 1-year): $36 per year
• Families (6 users, 1-year): $48 per year

• Premium (individual, 1-year): $29.88 per year
• Family (5 accounts, 1-year): $47.75 per year

The vault is encrypted client-side with AES-256 in CBC mode. The key is derived from the master password with PBKDF2-SHA256 at a default 600,000 iterations for new accounts (older accounts kept far lower counts for years); one extra PBKDF2 round produces the login hash, and further rounds are applied server-side. Passwords, usernames and notes are encrypted, but item URLs and account metadata are stored unencrypted.

The vault is encrypted client-side with AES-256 using a key derived from the Master Password via PBKDF2 with SHA-256 and a random 32-byte salt, at 1,000,000 iterations by default — the same order of magnitude as the highest iteration counts in this category, though PBKDF2 remains a non-memory-hard KDF unlike Argon2. Only a one-way, server-side password derived from the Master Password is ever sent to RoboForm's servers; all encryption and decryption happens locally.

Operated by LastPass US LP under the holding entity LMI Parent, L.P. Spun out of GoTo (formerly LogMeIn) as a standalone company on 1 May 2024; the 2022 breach happened while LastPass was still part of GoTo. GoTo and LastPass continue to share the same private-equity owners, Francisco Partners and Elliott Management.

Privately held and independently operated since RoboForm's original 2000 release; not venture-backed and never acquired. Headquartered in Fairfax, Virginia, led by CEO Vadim Maslov. Siber Systems also makes GoodSync, a file-synchronization product, alongside RoboForm.