LastPass

The functional cryptographic model is standard but not modern — a zero-knowledge implementation with an adequate but below-best-in-class KDF, where the 2022 revelation that URL metadata was stored in plaintext is the architectural gap that persists beyond the breach itself.

LastPass uses AES-256 encryption with zero-knowledge architecture — vault data is encrypted before leaving the device. The 2022 breach is the central security evaluation point: attackers obtained encrypted vault backups. Whether those vaults are at risk depends on master password strength and LastPass's iteration count configuration, which was below recommended settings for some accounts at the time. LastPass has since updated security defaults and published post-breach architectural changes. The breach demonstrated that zero-knowledge architecture provides real protection against some breach scenarios while vault backup exposure is a different risk vector.

The audit record consists of compliance certifications rather than security research — a transparency posture built on SOC 2 and ISO 27001 without independent penetration testing, open source publication, or a bug bounty programme that would allow the security community to verify claims directly.

LastPass published breach disclosure reports and a post-incident architectural review. The disclosure timeline was criticized — full details of the scope took months to emerge after initial incident disclosure. Client code is not open source. The transparency picture post-2022 is mixed: the breach details were eventually published, but the disclosure process itself was widely criticized by the security community.

The practical privacy exposure is broader than zero-knowledge framing suggests — the 2022 breach exposed that credential encryption is only part of the privacy question, and that URL metadata, jurisdiction, and the absence of self-hosting create compounding structural limitations.

Zero-knowledge architecture limits what LastPass holds in readable form. The 2022 breach demonstrated that encrypted vault backups are held and can be exposed in an infrastructure compromise. US jurisdiction means data processing under US law. The breach also exposed unencrypted metadata — URLs, usernames, and other non-encrypted fields from vault entries. For users evaluating LastPass post-breach, the unencrypted metadata exposure is relevant alongside the encrypted vault backup exposure.

The browser extension is competent on standard web forms but the platform coverage gaps — no desktop app, no CLI, one-device free tier — are friction points that users from Bitwarden or Dashlane will notice immediately.

LastPass browser extensions and mobile apps have historically been strong for consumer usability. The product is mature and the user experience reflects years of UX iteration. The 2022 breach prompted many users to migrate away, but users who remain find the core usability solid. Free tier limitations introduced in 2021 (choice of mobile or desktop, not both) reduced the free tier's value significantly.

The recovery model covers the common case but the Premium requirement for emergency access recipients creates a friction point that competitors such as Bitwarden do not impose on the trusted contact.

Account recovery options include SMS recovery, mobile account recovery, and emergency access with a designated contact. The recovery architecture is designed for consumer accessibility. Master password hint system provides a reminder mechanism.

The enterprise feature set is broad and mature — especially SSO integrations and the Security Dashboard — making LastPass Business competitive for organisations that have accepted the 2022 incident as context rather than a disqualifier.

Core password management, password health monitoring, dark web monitoring, and emergency access are available across tiers. Authenticator app for TOTP codes. Secure notes and form filling. The feature set covers standard password management requirements. Since the 2022 breach, LastPass has added security improvements including mandatory re-encryption for some accounts.

The 2021 free tier downgrade removed the value proposition that built LastPass's user base — at Premium pricing it competes directly with Bitwarden at its paid tier, making the value case difficult to argue on price alone.

LastPass pricing is mid-market. The free tier's device restrictions (mobile or desktop, not both) significantly reduced its value relative to Bitwarden's free tier. Premium adds dark web monitoring, emergency access, and advanced 2FA. For users who remained post-breach and are evaluating value, the pricing is comparable to alternatives — the question is whether the post-breach trust assessment supports continued use.