LastPass

LastPass

Cost-conscious individuals and small teams under 25 users who want a familiar, browser-based password manager with a free tier and straightforward vault sharing

Security ★★★★☆ 4/5 Free plan available; Premium from $3/month; Business from $7/user/month Visit Website

Pros

  • Free plan stores unlimited passwords with autofill, a password generator, and one-to-one sharing on a single device type (mobile or computer)
  • Browser extension for Chrome, Firefox, Safari, and Edge auto-fills login forms, generates passwords up to 99 characters, and stores secure notes and form-fill profiles
  • Emergency Access lets you designate a trusted contact who can request vault access after a configurable waiting period (0-30 days) if you become incapacitated
  • Dark web monitoring on Premium scans your email addresses against breach databases and alerts you when credentials appear in known data leaks
  • Business plan at $7/user/month includes an admin console with security policies, group-based vault sharing, directory integration (AD, Azure AD, Okta), and compliance reports

Cons

  • 2022 security breach exposed encrypted vault data and unencrypted metadata (URLs, company names); users with weak master passwords remain at risk of brute-force decryption
  • Free plan restricts access to one device type only (mobile OR computer, not both), pushing most users to the $3/month Premium plan
  • Master password recovery relies on a one-time recovery key or SMS-based account recovery, which is less secure than 1Password's Secret Key model
  • Desktop app was discontinued; all access is through browser extensions and mobile apps, with no native Windows or macOS vault application

Key Features

  • AES-256 encrypted vault for passwords, secure notes, credit cards, bank accounts, and form-fill identities
  • Browser extensions with inline autofill, auto-capture of new logins, and password generator with length and character controls
  • Autofill on iOS (via keyboard extension) and Android (via accessibility service or autofill framework)
  • Password generator producing random or pronounceable passwords up to 99 characters
  • Dark web monitoring scanning email addresses against breach databases with alert notifications
  • Shared folders for team credential distribution with hide-password option on Business plans
  • Admin console with security score dashboard, MFA enforcement policies, directory sync (AD/Azure AD/Okta), and event logging on Business plans