LastPass is one of the most recognizable names in password management, and for years it was a common default recommendation. That changed with the 2022 breach, in which attackers exfiltrated backups of customer vaults along with a database of unencrypted account metadata. The encryption on the vault entries held, but the incident — and the slow, staggered way it was disclosed — reset how LastPass has to be judged. This review weighs the current product against that history, because the history is the main reason someone would hesitate.

Security

LastPass encrypts your vault on your device before it reaches the company’s servers. The cipher is AES-256 in CBC mode; the key is derived from your master password with PBKDF2-SHA256, and for new accounts the default is 600,000 iterations — in line with current OWASP guidance. One additional PBKDF2 round produces a login hash that is what actually travels to LastPass, and further rounds are applied server-side. Your master password is never transmitted, and LastPass support genuinely cannot reset it.

Two design choices age the architecture against the rest of the field. AES-CBC is not an authenticated mode, so integrity depends on other layers rather than the cipher itself, where most current managers use an AEAD construction like AES-GCM or XChaCha20-Poly1305. And PBKDF2, while acceptable at 600,000 iterations, is not memory-hard the way Argon2 is — the algorithm most of this category has moved to. The 600,000 default is also only guaranteed for new accounts: for years, long-standing accounts silently kept much lower iteration counts — 5,000, 500, in documented cases 1 — despite LastPass being told about the problem through its bug-bounty program in 2018 and promising a migration that did not complete. Anyone with an old account should open the security settings and confirm the number.

The most consequential gap is what the vault does not encrypt. Passwords, usernames, account names and notes are encrypted; the site URL for each entry is only hex-encoded, and modification times and account settings are plaintext. In the 2022 breach that meant whoever took the vault backups could see exactly which services each user had an account with, even without cracking a single master password — a map for targeted phishing.

For unlocking the vault, LastPass is well-equipped: TOTP apps (its own, Google, Microsoft, and others), Duo and Symantec VIP, FIDO2 hardware keys and desktop biometrics, and a passwordless login option that lets a FIDO2 authenticator stand in for the master password entirely.

The 2022 breach

In August 2022, an attacker compromised a LastPass developer’s laptop and took 14 source-code repositories. Days later they used an unpatched media-server vulnerability on a senior engineer’s personal computer to install a keylogger, capture that engineer’s master password, and reach internal vaults containing decryption keys. Between late August and mid-September they exfiltrated a customer database and multiple password-vault backups.

What was taken: encrypted vault backups, plus unencrypted names, email addresses, billing addresses, partial credit-card numbers, and — because of the design described above — the website URLs in every vault. LastPass’s public account of the incident came in stages between August and a full disclosure on 22 December 2022, a timeline widely criticized for downplaying the scope early on. By September 2023, security researchers had tied offline-cracked vaults to cryptocurrency thefts exceeding $35 million across more than 150 victims; in March 2025, US authorities linked a $150 million cyberheist to the LastPass hacks.

The regulatory verdict landed in November 2025, when the UK’s Information Commissioner’s Office fined LastPass £1,228,283 for failing to implement adequate security measures, affecting roughly 1.6 million UK customers — while noting that the zero-knowledge encryption meant vault contents stayed encrypted throughout.

Since then, LastPass says it has rebuilt infrastructure on a secure cloud platform, raised the default iteration count to 600,000, added a dedicated threat-intelligence team, and adopted SBOM tracking and SLSA build provenance. Those are real steps. What is missing is independent verification of them.

Privacy & Trust

The code is closed. Only the command-line client is open source; the browser extensions, desktop apps and server are not, so the cryptography and the post-breach changes are things you take on LastPass’s word.

There is no published independent security audit. LastPass holds SOC 2 Type II, SOC 3, ISO 27001, ISO 27701 and BSI C5 certifications and says it runs regular third-party penetration tests, but no auditor is named and no report — public or gated — is available to read. Certifications attest that processes exist; they are not the same as a cryptographic review someone outside the company has signed.

LastPass became a standalone company on 1 May 2024, spun out of GoTo (formerly LogMeIn), which had owned it since 2015. The 2022 breach happened under GoTo. The two companies still share the same private-equity owners, so the separation is corporate structure more than a change of hands. There is also an earlier 2015 network intrusion, after which LastPass forced master-password resets; vaults were not shown to have been decrypted that time.

LastPass runs only as a hosted service — no self-hosting. It does not publish a breakdown of client-side telemetry, so the conservative reading is that some diagnostic data is collected and adjustable rather than absent.

Features

The paid product is mature and broad: a security dashboard that flags weak and reused passwords, dark web monitoring, one-to-many secure sharing, emergency access for a trusted contact, a built-in TOTP generator, 1 GB of encrypted file storage, and a travel mode that hides selected vault items. Passkeys reached general availability in August 2025 — LastPass stores and syncs them alongside passwords, and autofills them on sites that support them. Autofill itself is one of the more reliable implementations in this category, with a long track record across websites and apps.

The notable omission is email aliasing — there is no built-in address generator or alias-service integration, a privacy feature that some competitors ship.

Almost all of the above is Premium-only. Free gives you unlimited passwords, autofill, one-to-one sharing, dark web monitoring and the security dashboard — but restricts you to a single device type, mobile or computer, not both.

Usability & Platforms

Getting started is straightforward, the browser extension and mobile apps are polished, and autofill mostly stays out of your way — this was LastPass’s original selling point and it still holds. Covered platforms: Windows and macOS desktop apps, iOS and Android, browser extensions for the major browsers, and an open-source CLI. There is no first-party Linux desktop app; Linux users are limited to the extension or the CLI.

The free tier’s one-device-type rule is the main usability wall. It effectively forces a choice — use LastPass on your phone or on your laptop — that makes the free plan hard to rely on as anything but a trial.

Price & Value

Premium is $3.00 a month billed annually ($36/year); Families is $4.00 a month ($48/year) for six accounts. LastPass does not publish a separate post-introductory renewal rate, and its pricing page carries the usual promo caveat, so plan on at least the annual rate above at renewal. That puts Premium in the middle of the market — more than the open-source options, less than the premium-tier competition. The free tier is too constrained by the single-device limit to substitute for paying.

Pros

Client-side AES-256 encryption with a 600,000-iteration PBKDF2 default for new accounts, in line with current guidance
Zero-knowledge model held during the 2022 breach — vault passwords stayed encrypted, as the UK regulator confirmed
Full unlock security: TOTP, FIDO2 hardware keys, desktop biometrics and passwordless login
Mature paid feature set — security dashboard, dark web monitoring, emergency access, passkey storage, travel mode
Reliable autofill with a long track record, and polished browser and mobile apps
Mid-market pricing for the paid plans

Cons

Attackers exfiltrated encrypted vault backups and unencrypted account metadata in 2022; disclosure was slow and staggered, and the UK ICO fined LastPass £1.2M in 2025 over the failure
Vault item URLs and metadata are stored unencrypted — in the breach this exposed which services every user had accounts with
Closed source, and no independent security audit report has ever been published — only compliance certifications
AES-CBC (not an authenticated mode) and PBKDF2 (not memory-hard) lag the AEAD + Argon2 setups most competitors now use
Old accounts sat at dangerously low iteration counts for years despite LastPass being warned in 2018
Free tier is restricted to a single device type — mobile or computer, not both
No email aliasing; no self-hosting; no first-party Linux app

Our Rating

Category	Score	Notes
Security	6.0/10	Client-side AES-256 at 600,000 PBKDF2 iterations for new accounts, strong unlock options, and a zero-knowledge model that held in 2022. Pulled down by AES-CBC rather than an authenticated mode, PBKDF2 rather than Argon2, unencrypted vault URLs and metadata, and years of old accounts stuck on low iteration counts
Privacy & Trust	3.5/10	A confirmed 2022 breach of vault backups plus unencrypted metadata, slow staggered disclosure and a £1.2M UK regulatory fine; closed source; no published independent audit; still shares private-equity ownership with former parent GoTo. Post-breach hardening is claimed but not externally verified
Features	7.5/10	Security dashboard, dark web monitoring, emergency access, secure sharing, built-in TOTP, travel mode and general-availability passkey storage — a complete paid set, though no email aliasing, and little of it on free
Usability & Platforms	7.5/10	Polished apps and reliable autofill across Windows, macOS, mobile and the major browsers, plus a CLI; no first-party Linux app, and the free tier’s single-device-type limit is a hard wall
Price & Value	7.0/10	Premium $3.00/mo and Families $4.00/mo billed annually — mid-market, with no published renewal rate; the free tier is too limited by the one-device rule to lean on
Overall	6.0/10	Security 30% · Privacy & Trust 25% · Features 20% · Usability 15% · Price 10%

The current LastPass product is capable — the feature set is mature, autofill is dependable, and the encryption on your actual passwords did its job when it was tested for real. But a password manager is a trust purchase, and LastPass has a confirmed breach of vault backups, a design that left account metadata in the clear, a disclosure record its own regulator penalized, and no independent audit to show what has changed since. Existing users who have rotated every password and confirmed their iteration count may reasonably stay. For anyone choosing a manager now, the open, audited alternatives start from a much stronger position.

Rating: 6.0/10