Updated on: July 26, 2024
Update September 2023: LastPass customers’ password vault information, including website usernames, passwords, secure notes, and form-filled data, was exposed during a major data breach in 2022. As of September 2023, independent researchers have linked the theft of tens of millions of dollars worth of cryptocurrency to LastPass data breaches.
Since all user data is secured by LastPass’s 256-bit AES encryption, the only way a hacker can access it is through a customer’s master password. Though a threat actor did gain access to encrypted information, this does not mean they were able to decrypt the vast majority of it. If you’re currently using LastPass, you should make sure you’re using a strong and unique master password that you haven’t shared with anyone.
While we still recommend LastPass as one of the best password managers in 2024, there are many other options for customers looking to switch providers given these revelations. For example, top password managers like 1Password and Dashlane are excellent alternatives to LastPass and have never suffered a data breach or other serious security incident.
LastPass is a reliable password manager that offers both free and paid plans, so you really have no excuse for reusing the same password across multiple platforms.
Deciding whether LastPass is worth it depends on your specific needs. In my opinion, LastPass is worth the upgrade — the additional features like credit card monitoring, emergency access, extra storage, and many-to-many password sharing make the paid plans worth considering.
Should you stick with the free version, or opt for a paid plan? Read on to explore LastPass’s pricing and find the best option for you.
What Does LastPass Offer?
LastPass is an easy-to-use, feature-rich password manager with all the essential security features you need to keep your data safe, including:
User-friendly password vault
LastPass’s vault is simple to use, and lets you add a wide range of entries like passwords, secure notes, payment cards, passports, and more. All entries are protected by military-grade 256-bit AES encryption.
Secure password sharing
LastPass makes it very easy to share passwords. All you need to do is to click the sharing button next to an entry, enter the recipient’s email, and choose whether they can view the password or just use it — you can even share multiple items using the Sharing Center. On top of that, you can revoke access anytime, adding an extra layer of security.
The Free plan allows sharing with 1 person, while the paid plans allow sharing with multiple recipients.
Security dashboard with dark web monitoring
LastPass’ Security Dashboard is a powerful tool for monitoring your overall password security practices and making changes when necessary. It provides a detailed security score that evaluates strength, age, and uniqueness of passwords, allowing you to quickly identify and fix weak passwords.
LastPass also offers dark web monitoring, powered by Enzoic’s database — it scans your vault for compromised emails, alerts you to potential breaches, and provides detailed information about leaked data.
Multiple account recovery options
LastPass sets itself apart by offering a wide array of account recovery options. If you forget your master password, you can regain access to your vault through several convenient options — including mobile account recovery using biometric authentication (Touch ID or Face ID), receiving a master password hint via email, and SMS recovery codes. Additionally, LastPass allows you to restore a previous master password within 30 days or use a one-time password generated during browser extension logins.
I tested every method, and each one allowed me to recover my account and set up a new master password in less than a minute.
Different LastPass Pricing Options
LastPass Free
LastPass Free is one of the best free password managers available. It offers unlimited password storage on unlimited mobile devices or computers (but not both), along with features like:
- Cloud storage (limited to just 50 MB).
- Password generator.
- Password auto-save and auto-fill.
- Password sharing.
- Security dashboard.
- Dark web monitoring.
- Two-factor authentication.
- LastPass Authenticator.
LastPass Premium
By upgrading to LastPass Premium ($3.00 / month), you’re unlocking superior features, such as 1 GB of encrypted data storage, advanced MFA options, and emergency access. The latter is especially useful — it allows you to give your loved ones access to your account in case of an emergency.
LastPass Families
LastPass’s Families plan, which comes in at $4.00 / month, covers up to 6 users. It includes all Premium features plus:
- Family manager dashboard.
- Unlimited shared folders.
LastPass Teams
LastPass Teams costs $4.00 / month per user. It’s designed for up to 50 users and includes features like a private vault for each employee, shared folders, and an admin portal with basic reporting and user access control.
LastPass Business
LastPass’s Business plan, priced at $7.00 / month per user, offers advanced features for larger organizations. In addition to all Teams features, it includes:
- Over 100 customizable security policies.
- Authentication for SSO/Cloud apps.
- Free LastPass Families account for employees.
- Extensive SSO reporting.
Add-ons for Advanced SSO and Advanced MFA are available at an additional cost.
The Best Price Option
At $3.00 / month, LastPass Premium offers good value with features such as password sharing, dark web monitoring, and secure notes storage. If you’re a small business owner, I recommend the Teams plan for better collaboration tools. For larger organizations, upgrading to the Business plan is advisable to leverage advanced administrative and security features.
How Does LastPass Compare to the Best Password Managers in 2024?
1Password is my top choice above LastPass because it has an impeccable track record with several independent audits. On top of that, it has great extras like Travel Mode, Privacy Cards, and email masking, while LastPass doesn’t have any of these extras. Dashlane on the other hand offers a VPN as well as live dark web monitoring. RoboForm is way better at form filling than LastPass, very affordable, and I really like its bookmark storage feature.
Security Improvements
In response to past security incidents, LastPass has made significant strides in enhancing its security infrastructure. Here are the key measures LastPass has implemented to ensure the safety and privacy of user data:
- Strengthened master password requirements — LastPass now enforces a 12-character minimum for master passwords, encouraging users to create stronger, more complex passwords that are harder to crack.
- Improved monitoring and alert systems — The company has upgraded its monitoring systems to detect and respond to unauthorized activity faster. This includes implementing real-time alerts and comprehensive logging to track suspicious actions.
- Regular security audits — LastPass conducts regular security audits and vulnerability assessments with independent cybersecurity firms to identify and mitigate potential risks. These audits help ensure that LastPass remains compliant with the highest security standards.
- Increased investment in security teams — LastPass has established a dedicated threat intelligence team composed of experienced security professionals. This team is responsible for proactively identifying and addressing emerging threats.
- Rotated credentials and access controls — Following the breaches, LastPass has rotated all relevant credentials and implemented stricter access controls to limit the exposure of sensitive information. This includes using multi-factor authentication for internal access to critical systems.
- User education and awareness — LastPass has increased efforts to educate users on best security practices, including creating strong passwords and recognizing phishing attempts. By empowering users with knowledge, LastPass aims to reduce the likelihood of successful attacks.
- Enhanced cloud storage security — The company has bolstered its cloud storage security by adding multiple layers of protection, including advanced encryption and regular security updates, to safeguard user data from unauthorized access.
- Transparent communication — LastPass has committed to transparent communication with its users regarding security practices and incidents. This includes timely updates and detailed reports on any security-related issues and the steps taken to resolve them.
Is LastPass Worth it in 2024?
LastPass offers a good set of features that cater to both individual and business users. Its free plan provides essential security tools, while the premium plans add significant value with features like emergency access and enhanced sharing capabilities. Despite past security incidents, LastPass has implemented comprehensive measures to improve its security infrastructure.
For individual users, the Premium plan offers great value with its advanced features and support options. Families can benefit from the shared folders and management dashboard provided by the Families plan. Small to medium-sized businesses will find the Teams plan useful for collaboration and basic administrative control, while larger organizations can leverage the extensive security policies and user management features of the Business plan.
Ultimately, the decision to upgrade from the free version to a paid plan depends on your specific needs and the level of security and convenience you require. By understanding the unique benefits of each plan, you can choose the best option to keep your digital life secure.
Frequently Asked Questions
Is it worth paying for LastPass Premium?
If you’re a multi-device user, upgrading to LastPass Premium is definitely worth considering. While the free version is great for using on just computers or just mobile devices, Premium unlocks synchronization across device types, which is essential if you regularly switch between your computer and mobile devices. You also get additional features like advanced multi-factor authentication options, emergency access, and LastPass’s customer support options. However, if you only use LastPass on 1 type of device, and don’t need advanced security features, the free version might be sufficient.
Is LastPass still recommended?
Yes, LastPass is still recommended as one of the best password managers available. It offers a decent set of features, including unlimited password storage, secure notes, and a password generator. LastPass uses bank-grade 256-bit AES encryption and has a zero-knowledge policy to ensure that your data remains private. However, it’s worth noting that LastPass has experienced security breaches in the past. While no passwords were compromised, some users may prefer alternatives like 1Password or Dashlane, which have never been hacked.
Can LastPass be hacked?
Like any online service, LastPass isn’t completely immune to cyberattacks. The company has faced security incidents in the past, including credential stuffing attacks in 2021 and a data breach in 2022. However, it’s important to understand that LastPass’s encryption model means that even if its servers are compromised, your actual passwords remain protected as long as you use a strong, unique master password. LastPass continues to improve its security measures, but users concerned about past breaches may want to consider alternatives like 1Password or Dashlane.
Is there a better alternative to LastPass?
While LastPass is a decent password manager, there are better alternatives. 1Password, for example, offers a clean security record and unique features like Travel Mode and Privacy Cards. It’s also more flexible for families, allowing you to add additional users for a small fee. Dashlane is another great option, with advanced features like a built-in VPN and live dark web monitoring. Ultimately, the “best” option will depend on your specific needs, but these alternatives are worth considering if you’re looking for something different from LastPass.