Review
LastPass
Capable features undercut by a serious 2022 breach
Pricing
| Plan | Price |
|---|---|
| Free (single device type) | $0 |
| Premium | $3/mo |
| Families (6 users) | $4/mo |
Security
Pros
Cons
Security & Encryption
LastPass uses AES-256 encryption under a zero-knowledge architecture, meaning the company itself cannot read vault contents. That architecture was tested by a real incident: in 2022, attackers exfiltrated encrypted customer vault backups from a cloud storage system. Master passwords were not obtained directly, but the episode is a serious mark against a product whose entire value proposition is trust.
Features
LastPass still ships a broad feature set — form filling, secure notes, shared folders, and dark web monitoring. The free tier was restructured in 2021 to a single device type (all mobile or all desktop, not both).
Pricing
Premium is $3/mo and Families covers six users for $4/mo, both mid-pack for the category — reasonable on price alone, separate from the trust question.
Ease of Use
The interface is mature and familiar to long-time users, with straightforward autofill and a well-organized vault view, though it feels dated next to newer entrants.
Customer Support
Email support is available on all paid tiers with an extensive help center; the free tier has more limited support access.
The verdict
LastPass still ships a broad feature set, but the 2022 incident — attackers made off with encrypted vault backups — is hard to ignore for a password manager. Master passwords held, but it is a real mark against a category built on trust.
Visit LastPass → ← All reviewsCompare with
Frequently asked questions
Is LastPass safe to use after the 2022 breach?
LastPass's zero-knowledge encryption meant attackers got encrypted data, not plaintext passwords — but the incident is a legitimate factor to weigh, and many security researchers recommend switching if you were affected and haven't rotated your master password.
What happened in the LastPass breach?
In 2022, attackers accessed a cloud storage environment and copied encrypted customer vault backups along with some unencrypted metadata (like website URLs).
Does LastPass have a free plan?
Yes, but since 2021 it's limited to syncing across one device type — either mobile or desktop, not both simultaneously.
Should I switch away from LastPass?
That depends on your risk tolerance. If you do stay, use a long, unique master password and enable multi-factor authentication.