LastPass Review
Verdict: LastPass still offers a mature feature set and a familiar interface, but its 2022 security incident — in which encrypted vault backups were stolen — weighs heavily on a product built on trust. Existing users should harden their accounts; new users have stronger options.
At a Glance
| Price | From $3/mo |
| Free plan | Limited free plan |
| Platforms | Win / Mac / iOS / Android / Browser |
| Encryption | AES-256, encrypted on device |
| 2FA | Yes — authenticator apps, hardware keys |
| Zero-knowledge | Yes |
Pros
- Mature, familiar interface
- Strong form filling
- Shared folders and emergency access
Cons
- 2022 breach exposed encrypted vault backups
- Free plan limited to one device type
- Some settings buried deep in menus
Security & Encryption
LastPass encrypts vault data with AES-256 on your device, using a key derived from your master password. In 2022, attackers stole encrypted copies of customer vaults from a cloud storage environment, along with unencrypted data such as website URLs and account contact details.
The encryption itself was not broken, but the risk to each stolen vault depends on the strength of its master password and its key-derivation settings. If you used LastPass in 2022, change your master password, check your iteration setting, enable multi-factor authentication and change your most important stored passwords.
Features
LastPass covers the essentials well: password generation, secure notes, form filling for addresses and payment cards, shared folders for families and teams, and emergency access for a trusted contact. A security dashboard flags weak and reused passwords and offers dark-web monitoring for your email addresses.
Pricing
Premium starts from $3 a month, with a family plan for households. The free plan is limited to a single device type — mobile or computer, not both — which makes it awkward for most people who use a phone and a laptop. On price alone LastPass is mid-pack; the decision is really about trust.
Ease of Use
Long-time users will find the interface familiar, and setup is straightforward: install the browser extension, create an account and import your passwords. The extension handles standard logins and has detailed form-fill profiles for addresses and payment cards, though some settings are buried several menus deep and the interface feels dated next to newer rivals.
Customer Support
LastPass has an extensive help centre, including detailed guidance on the 2022 incident and step-by-step instructions for securing your account. Paid users get email support; free users have more limited options.
Who LastPass is best for
LastPass mainly makes sense for long-time users who are comfortable with how the company responded to the 2022 incident, have already changed their master password and important logins, and value its familiar interface and form filling. For new users, other managers in our rating offer a stronger trust record for similar money.
A quick clean-up checklist for existing users
- Change your master password to a long passphrase you’ve never used elsewhere.
- Check that your key-derivation iteration count is at the current recommended default.
- Turn on multi-factor authentication.
- Change the passwords for email, banking and any account that can reset others.
- Move recovery codes and crypto seed phrases out of old secure notes and replace them.
How we evaluated LastPass
This review is based on LastPass’s own security documentation, its published independent audit and penetration-test reports, the plans and prices listed on its website, its official list of supported platforms and browsers, and its public security record, including any disclosed incidents. Every manager is scored with the same weighted criteria described in our methodology. Prices are list prices at the time of our last update — plans and introductory offers change often, so always check the vendor’s site before you buy.
Alternatives to consider
- Dashlane — similar price with no disclosed vault breaches; see LastPass vs Dashlane.
- Bitwarden — our top-rated manager, free on unlimited devices.
Every manager we review can import a LastPass export file. Delete the export file after importing — it contains your passwords in plain text.
Published August 4, 2026 · Updated November 6, 2026
Frequently Asked Questions
Is LastPass safe after the 2022 breach?+
Your vault was encrypted, but stolen backups remain at risk if your master password was weak. Change your master password, enable MFA and rotate important passwords — or consider switching.
Does LastPass have a free plan?+
Yes, but it only syncs within one device type — either mobile or computer, not both.
How do I move from LastPass to another manager?+
Export your vault from LastPass, import the file into the new manager, check your key logins and then delete the export file, which contains your passwords in plain text.
Which password manager should I switch to?+
Bitwarden is our top pick for most people; Dashlane and 1Password are polished alternatives if you prefer a premium experience.