1Password vs LastPass
These two are separated less by features than by history. In 2022 attackers copied LastPass vault backups, with website URLs unencrypted. 1Password adds a 128-bit Secret Key that never reaches its servers, and is the best-designed manager in our ranking. LastPass Teams lists lower per user; new buyers still mostly choose 1Password, while existing LastPass customers weigh the migration.
Niels AbrahamsenAnalyst, Security & Infrastructure
Sebastiaan Smits
Hannah ReiterVendors can pay for visibility on this site; it never changes what we say about a product. How that works.
Choose 1Password ifyou are making a fresh choice, want a manager staff will still be using after a month, and want a key model where a stolen vault alone is useless.
Choose LastPass ifyou are already deployed on it, the cost and disruption of migrating outweigh the benefit for now, and your security review has explicitly addressed the 2022 breach.
1Password and LastPass side by side
| 1Password | LastPass | |
|---|---|---|
| Our password manager rank | #7 of 12 | #10 of 12 |
| Established in | Canada | United States |
| Pricing | Per user per month, published; flat-price Teams Starter Pack for up to 10; 14-day trial | Free plan for one user on one device type; business plans per user per month, published |
| List price, 30 September 2026 | Teams Starter Pack $24.95 USD per month for up to 10 members; Business $8.99 USD per user per month, paid annually | Teams $4 per user per month, billed annually, up to 50 users (shown as €4.42 on the euro pricing page) |
| Free tier | — | Yes |
| Open source | — | — |
| Self-hostable | Yes | — |
| Built for | A team where adoption is the whole battle | An organisation already deployed on it and managing the migration cost |
| Not for | An organisation that requires source availability | Any new deployment with a free choice |
Both are reviewed in full in our password manager ranking: 1Password and LastPass.
Where they differ
1Password 3 · LastPass 1 · open 1- 01
Track record
LastPass's own notice says an attacker copied a backup of customer vault data in 2022: passwords and notes stayed encrypted, but website URLs, email addresses, billing addresses and IP addresses were taken unencrypted. 1Password reported suspicious activity on its Okta tenant in September 2023 and concluded after investigating that no user data was accessed. One vendor lost vaults; the other did not.
Edge: 1Password
- 02
If the vault is stolen
1Password encrypts with two secrets: your account password and a Secret Key with 128 bits of entropy that is created on your device and never sent to 1Password, so server data alone cannot be brute-forced. LastPass derives the vault key from the master password alone, now through 600,000 rounds of PBKDF2-SHA-256, so a stolen vault is only as strong as that password.
Edge: 1Password
- 03
Whether people keep using it
1Password is the manager people keep using after the first month and has the best interface in this category in our assessment. LastPass's advantage is familiarity: it is widely adopted and many employees have met it before. Familiarity helps a rollout, but on design quality we place 1Password clearly in front, and an unused manager protects nothing.
Edge: 1Password
- 04
List price and plan limits
LastPass Teams is listed at $4 per user per month for up to 50 users; its Business plan lifts the cap and includes three SSO apps, with unlimited SSO reserved for Business Max. 1Password's Teams Starter Pack is a flat $24.95 USD per month for up to 10 members, and Business is $8.99 USD per user. Ten people pay less at 1Password, forty at LastPass.
Depends on the buyer
- 05
The cost of moving
An organisation already running LastPass has working integrations, trained users and stored credentials, and leaving has a real migration cost. That is the one situation in which LastPass still makes sense. 1Password has to be rolled out from scratch, vault by vault. For existing LastPass customers weighing effort against risk, staying can be defensible if the breach has been reviewed.
Edge: LastPass
When neither fits
If your security review requires source code that can be inspected, look past both: 1Password is closed source and LastPass is not sold on that basis either. Bitwarden publishes its client and server code and has it audited annually, and Psono publishes its client source and can be self-hosted.
1Password or LastPass: questions
4 answersIs LastPass still safe to use compared with 1Password?
LastPass encrypts vaults on the device with AES-256 and now applies 600,000 PBKDF2 rounds, but the vault backups copied in 2022 remain in an attacker's hands.
1Password adds a Secret Key that it never holds, so server data cannot be decrypted with a guessed password alone.
Should we switch from LastPass to 1Password?
It depends on migration cost. LastPass suits organisations already deployed on it that have reviewed the 2022 incident; it is hard to recommend for a new deployment with a free choice.
If you do move, both vendors offer a 14-day business trial, so you can test 1Password with a pilot group first.
Does LastPass or 1Password have a free plan?
LastPass has a free personal plan for one user, limited to one device type, with unlimited passwords.
1Password has no free plan; its personal and business plans come with a 14-day free trial. Neither free option includes the shared folders and admin console a team needs.
How much do LastPass and 1Password cost for a business?
On annual billing LastPass lists Teams at $4 per user per month, capped at 50 users. 1Password lists the Teams Starter Pack at $24.95 USD per month for up to 10 members and Business at $8.99 USD per user per month.
Sources
Checked 30 September 2026- LastPass blog: notice of security incident: what was copied in the 2022 incident, encrypted and unencrypted.
- 1Password blog: Okta incident report: the 2023 Okta-related incident and its conclusion.
- 1Password support: Secret Key: Secret Key entropy and that 1Password never holds it.
- LastPass zero-knowledge security page: 600,000 PBKDF2 rounds and AES-256 on the device.
- LastPass Teams vs Business page: Teams at $4 per user and the 50-user cap, SSO app limits.
- LastPass pricing page: free plan limits, trial length and euro prices.
- 1Password business pricing page: Starter Pack and Business prices, 14-day trial.
- 1Password personal pricing page: no free personal plan, 14-day trial.