LastPass review (2026): features, pros and cons, and what to check before you buy
Long-established business password manager with Teams, Business and Business Max tiers, still carrying the reputational weight of its 2022 breach.
Our take for buyers
LastPass was founded in 2008, is based in Boston and was spun off from GoTo in May 2024 under control of Francisco Partners and Elliott Investment Management. It remains familiar to many admins and has broad integrations, including Okta and Entra ID. The 2022 breach exposed encrypted vault backups and metadata, and the UK ICO fined the company 1.2M GBP in December 2025.
For a buyer, that history matters as much as features. Reviewers praise the familiar interface and broad integrations, and complain about damaged trust and SSO capped at 3 apps on Business. G2 shows 4.4 from 1,962 reviews. Shortlist it only if your security team accepts the breach record and an ownership structure that changed in 2024.
Pros
- Familiar interface and broad integrations.
- Low entry price.
Cons
- Trust damaged by 2022 breach.
- SSO capped at 3 apps on Business.
- Best for
- Teams already on LastPass wanting familiar admin tooling.
- Starting price
- $4 per user/month (Teams, billed annually)
- G2 rating
- 4.4 (1,962 reviews)
What is LastPass?
Long-established business password manager with Teams, Business and Business Max tiers, still carrying the reputational weight of its 2022 breach. Teams already familiar with its admin tooling can stay, with a free plan and Teams, Business and Business Max tiers. Before renewing, put the 2022 breach and the later UK ICO fine to your security reviewer. Business covers SSO for only three apps, so unlimited SSO means Business Max. LastPass was founded in 2008 and is based in Boston, Massachusetts, US.
Category: Business Password Managers
LastPass key features
| Criterion | What we found |
|---|---|
| SSO and directory sync | Business: SSO for 3 apps, directory integrations (Okta, Entra ID); Business Max: unlimited SSO. SCIM not named. |
| Encryption and security record | 2022 breach exposed encrypted vault backups and metadata; ICO fined LastPass 1.2M GBP in December 2025. |
| Dark web and breach monitoring | Dark web monitoring features in Business Max (AI/Web monitoring) |
| Pricing model | Per user per month billed annually. |
| Target company size | SMB to mid-market. |
LastPass plans and pricing
| Plan | Price | Unit | Notes |
|---|---|---|---|
| Teams | $4 | per user/month, billed annually | Up to 50 users; 14-day trial; no SSO |
| Business | $7 | per user/month, billed annually | SSO limited to 3 apps; directory integrations |
| Business Max | $9 | per user/month, billed annually | Unlimited SSO, advanced MFA, AI/SaaS/Web monitoring |
Plan prices are from third-party sources (CostBench, Capterra) and are not confirmed by the vendor. Vendr buyer data lists higher ranges: Teams $7-8, Business $9-10 per user/month.
Who should shortlist LastPass
A strong fit for
- Teams already on LastPass wanting familiar admin tooling.
- Small groups up to 50 users on the Teams tier.
A weak fit for
- Buyers for whom the 2022 breach and UK ICO fine are disqualifying.
- Teams needing SSO in the cheapest tier.
LastPass alternatives
1PasswordSmall teams of up to 20 via the Starter Pack.
BitwardenBudget-conscious teams: $4 per user per month for Teams.
DashlaneSmall and mid-size teams that want a polished employee-facing app.
Keeper SecurityRegulated or government-adjacent buyers needing FedRAMP, FIPS 140-3 or HIPAA alignment.
NordPassCost-focused SMBs on Google Workspace.
PassboltTechnical teams that want to self-host and audit the code.
Security, admin and compliance
The 2022 breach exposed encrypted vault backups and metadata, and the UK ICO fined LastPass 1.2M GBP over it. SSO is limited to 3 apps on Business and unlimited on Business Max. SCIM is not named, and audit logs, data residency and a DPA are not published. Contracts are annual, with a 14-day trial. Ask for current security attestations, the post-breach remediation record and exact SSO terms in writing.
- SAML SSO
- Business (3 apps); Business Max (unlimited)
Contract and buying terms
- Contract
- 14-day trial; annual billing.
- Starting price
- $4 per user/month (Teams, billed annually)
- Pricing model
- Per user.
- Free plan or trial
- Free plan, Free trial.
What to test in a LastPass demo or trial
Test the admin console with your real directory using Okta or Entra ID, and confirm how provisioning behaves, since SCIM is not named. On Business, check whether 3 SSO apps cover your needs; unlimited SSO requires Business Max. Trial Teams for 14 days if you have 50 users or fewer, and verify sharing, MFA and the dark web and SaaS monitoring in Business Max if you plan to pay for them. Ask what the Advanced MFA and SSO add-on costs on your tier.
Questions to ask LastPass before you sign
These are the points LastPass's public pages leave open. Get the answers in writing before procurement signs off.
- Is SCIM provisioning included, or a paid add-on?
- Which plan includes audit logs, and how long are they kept?
- Where is our data stored, and can we choose the region?
- Can we sign your standard DPA without changes?
- What will the price be at renewal, and is the increase capped?
Things to know before a demo
- Business SSO is limited to 3 apps; unlimited needs Business Max.
- Teams is capped at 50 users.
- UK ICO fined LastPass 1.2M GBP over the 2022 breach (theregister.com, Dec 2025)
- Vendr buyer data shows higher real quotes than list prices.
Head-to-head comparisons
LastPass FAQ
What is LastPass used for?
Teams already familiar with its admin tooling can stay, with a free plan and Teams, Business and Business Max tiers. Before renewing, put the 2022 breach and the later UK ICO fine to your security reviewer. Business covers SSO for only three apps, so unlimited SSO means Business Max. It suits teams already on LastPass wanting familiar admin tooling.
Does LastPass support SAML SSO or SCIM?
Business offers SSO for 3 apps and directory integrations such as Okta and Entra ID, and Business Max offers unlimited SSO. SCIM is not named, so ask the vendor.
What happened in the 2022 LastPass breach?
It exposed encrypted vault backups and metadata. The UK ICO fined LastPass 1.2M GBP in December 2025.
Who is LastPass best for?
Teams already on LastPass who want familiar admin tooling, and small groups up to 50 users on Teams. It is a poor fit for buyers who see the breach as disqualifying.
Vendor profile
- Founded
- 2008.
- Headquarters
- Boston, Massachusetts, US.
- Employees
- 800+ (2024)
- Funding or owner
- Spun off from GoTo in May 2024; controlled by Francisco Partners and Elliott Investment Management.
Sources
Every fact on this page comes from LastPass's own pricing, product or documentation pages, G2 and company records, checked on October 24, 2026. Unknown values are left out instead of estimated.