Skip to main content

LastPass

SCORE4.4FAIR

Once popular, now defined by its 2022 breach

BEST FORNobody starting fresh in 2025 — existing users with years of saved data who have not yet migrated and want the cheapest path to keep their current setup running.
Reviewed by the Clientele Research Team · Last checked 9 days ago (2026-07-15)
Visit site ↗
Scores — click any row to see our rationale
Security Architecture & Track Record2/10

In August 2022, attackers stole encrypted vault backups plus unencrypted metadata including URLs, usernames, and IP addresses. By November 2022, the full vault data was confirmed taken — the worst breach in password manager history.

Pricing & Value vs. Free Options5/10

At $3/mo individual the price is mid-range. In 2021 LastPass removed free-tier multi-device sync — free users must now choose either mobile or desktop, not both.

Cross-Device Sync & Offline Access4/10

Free tier restricts sync to either mobile or desktop since March 2021. No other major free competitor imposes this limitation.

Emergency Access & Account Recovery6/10

Offers SMS recovery, one-time passwords, and a mobile account recovery option. These are standard features not differentiated from the rest of the market.

Included Extras (Breach Monitoring, Aliases, VPN)5/10

Dark web monitoring and 1GB encrypted file storage are included on Premium ($3/mo). These features do not offset the trust damage from the breach.

PROS
At $3/mo, the paid plan is cheaper than Dashlane and 1Password — relevant for users who are locked in and haven't migrated
1GB of encrypted file storage is included on Premium — useful for storing scanned documents like a passport photo
Dark web monitoring alerts you if your email address appears in known data leaks
Emergency access lets a trusted contact request your vault after a waiting period of 1 hour to 30 days
Works across iOS, Android, Windows, Mac, and all major browsers on the paid plan
The large legacy user base means browser extension compatibility with obscure websites is broadly tested
CONS
Attackers confirmed they obtained full encrypted vault backups in November 2022 — vaults with weak master passwords can be brute-forced offline with no time limit
Unencrypted metadata was also stolen — URLs of sites you have accounts on, usernames, and IP addresses were exposed even for users with strong master passwords
The 2022 breach triggered a £1.2M fine from the UK's Information Commissioner's Office and multiple US class-action lawsuits
Free tier no longer syncs between mobile and desktop since March 2021 — Bitwarden provides genuinely free cross-device sync
LastPass's incident response in 2022 delayed disclosure — the first public notice downplayed the severity, and the full scope took months to acknowledge
Switching away is straightforward: export to CSV, import to any competitor. There is no technical reason to stay if you are starting fresh.