LastPass Review: Features, Plans, and Its Security History

The links in this post may be affiliate links.  That means that if you click them and make a purchase, this site makes a commission.  It will have no impact on the price you pay or the experience of your purchase.

LastPass has been around since 2008 and is one of the best known password managers out there. It is also one of the most talked about, for good reasons and not so good ones.

In this review, I am walking you through what LastPass does, how its plans work, its security history, and the pros and cons. That way you can decide if it is the right fit for you and your business.

What Is LastPass?

LastPass is a password manager. It stores all of your logins in one encrypted vault, so you only have to remember one master password instead of dozens.

It also creates strong passwords for you and fills them in automatically when you log in. And you know, around here, we love tools that take something off your plate.

LastPass works in your web browser through an extension and on your phone through the mobile app. There are plans for individuals, families, and businesses of different sizes.

Is LastPass Safe After the Breach?

You cannot talk about LastPass without talking about its security history. If you are trusting a tool with every password you have, you deserve to know the full story.

What Happened in 2022

In August 2022, an attacker got into LastPass’s development environment and took source code and technical information. Using what they learned, the attacker then reached a third-party cloud storage service LastPass used and took customer account information along with a backup of customer password vaults.

The passwords, usernames, and notes inside those vaults were encrypted and could only be unlocked with each user’s master password. Some details, like the website addresses saved in each vault, were not encrypted at the time.

The vault backup covered accounts that were active between August 20 and September 16, 2022. Many people, myself included, did not fully realize what that meant for them at the time.

As I update this post, I am researching alternatives to decide whether to switch from LastPass or stay put.

What LastPass Changed

Since the breach, LastPass has made several security upgrades:

• Stronger master password protection. LastPass raised the number of times your master password is processed (called iterations) to 600,000, which makes it much harder to crack.
• More encryption. Website addresses in your vault are now encrypted, and LastPass moved to a newer encryption standard.
• Rebuilt systems. LastPass rebuilt its development environment, rotated its credentials, added monitoring, and separated its development and live systems.
• Independence. LastPass separated from its former parent company, GoTo, in May 2024 and now operates on its own.

The 2026 Vendor Incident

In June 2026, LastPass disclosed a smaller incident. Attackers broke into Klue, an outside tool LastPass’s sales team used, and used that access to reach customer records in LastPass’s customer relationship system.

The exposed details included names, email addresses, phone numbers, physical addresses, and support case information. LastPass reported that password vaults were not involved.

This kind of attack hit a number of companies through the same vendor. It is a different category from the 2022 breach, but it is still worth knowing about.

What to Do If You Used LastPass Before 2023

If you had a LastPass account in 2022, here is what security experts recommend:

1. Change your most important passwords. Start with your email, banking, domain registrar, website hosting, and anything that holds recovery codes.
2. Check your iteration count. In your LastPass account settings, make sure your password iterations are set to 600,000.
3. Use a strong, unique master password. If your master password was short or reused anywhere else, change it.

Even with these steps, keep in mind that the 2022 vault copy is out of everyone’s control for good. That is why updating the passwords that matter most is the step that actually protects you.

Features of LastPass

LastPass covers everything you would expect from a password manager, plus a few extras.

Password Generator

LastPass creates long, random passwords with a mix of letters, numbers, and symbols. You can generate a new one right from the browser extension when you sign up for an account or reset a password.

Encrypted Vault

All of your passwords live in an encrypted vault that unlocks with your master password. LastPass uses a zero-knowledge model, which means LastPass itself does not have your master password and cannot see what is inside your vault.

Autofill and Browser Extensions

The browser extension fills in your username and password automatically when you visit a site. It works with the major browsers, including Chrome, Safari, Edge, and Firefox.

Mobile App

The LastPass mobile app gives you access to your vault on your phone or tablet. It syncs with your desktop, so a password you save on your computer shows up on your phone.

Secure Sharing

You can share logins with family members, teammates, or clients without sending passwords over text or email. This is one of the features that makes the biggest difference for small businesses.

If you are working with a designer, developer, or virtual assistant, sharing access this way lets you keep control of your accounts. I break down why that matters in Who Owns My Website? A Small Business Guide to Digital Ownership.

Emergency Access

Emergency Access lets you name trusted people who can request access to your vault if something happens to you. It is a simple way to make sure someone can step in and keep things running.

Dark Web Monitoring and Security Dashboard

LastPass alerts you if your email address shows up in a known data breach. The security dashboard also flags weak, reused, and old passwords so you know which ones to update first.

LastPass Plans

LastPass offers a free plan and several paid plans. Pricing changes from time to time, so check the current LastPass plans and pricing for the latest numbers.

Free

The free plan stores unlimited passwords and includes the password generator, autofill, and dark web monitoring. The catch is that it only works on one type of device, either your computer or your phone, not both.

Premium

Premium works across all of your devices and adds one-to-many sharing, Emergency Access, and encrypted file storage. This is the plan most individuals and solo business owners will want.

Families

Families includes Premium features for up to six people, plus a shared dashboard for managing household logins.

Teams and Business

Teams is built for small groups and includes an admin console and shared folders. Business adds more advanced controls, like single sign-on, for growing organizations.

Pros of LastPass

Easy to Use

Setup is simple. Create your account, install the browser extension, and LastPass starts saving passwords as you log in to your accounts.

Generates Strong Passwords

No more “password123” or your dog’s name with a 1 at the end. LastPass creates passwords that are hard to guess and hard to crack.

Password Autofill

LastPass fills in your logins for you, so you spend less time typing and resetting forgotten passwords.

Syncs Across Devices

On paid plans, your passwords follow you from your computer to your phone to your tablet.

Secure Sharing and Emergency Access

You can share access without revealing passwords and set up a backup plan for your accounts. Both are a big deal for business owners who work with other people.

Cons of LastPass

History of Security Incidents

The 2022 breach was serious, and the 2026 vendor incident added to concerns. LastPass has made real improvements, but some people will not be comfortable trusting it, and that is a fair decision to make.

Can Lag at Times

Sometimes it takes a few seconds for LastPass to load or fill in a password. It is not a deal breaker, but you will notice it when you are in a hurry.

Lots of Features to Learn at First

LastPass has a lot going on, which can feel overwhelming if you are new to password managers. Start with saving and filling passwords, then explore the rest as you get comfortable.

Is LastPass Right for You?

LastPass can be a good fit if you want an easy password manager with strong features, and you are comfortable with its security history and the changes it has made since.

If that history is a deal breaker for you, that is a valid choice. The most important thing is that you use a password manager, because reusing passwords or keeping them in a spreadsheet is a much bigger risk for most small businesses.

As with any tool I review, trust your own judgment about what is right for you and your business.

The TL;DR

LastPass makes it easy to create strong passwords, store them securely, and fill them in on any device. Secure sharing and Emergency Access make it especially useful for business owners who work with a team or outside help.

Its 2022 breach was serious, and it is worth understanding before you sign up. If you were a user back then, update your most important passwords no matter what you decide.

If you want help building a password and access system for your business, book a strategy session and we can map out what fits how you work.

Last Review FAQs