LastPass is a proprietary, cloud-hosted password manager whose closed source vaults were exposed in a major 2022 security breach, prompting many users to look for auditable alternatives. Full details →

Switching from LastPass to an open source alternative gives you client code that’s publicly auditable, which matters especially after LastPass’s 2022 breach exposed encrypted vault backups and unencrypted metadata for a large share of its users. Bitwarden is the closest drop-in replacement: a similar cloud-synced, cross-platform experience, but with GPL-3.0/AGPL-3.0 licensed clients and server code you can inspect or self-host yourself. KeePassXC takes a different approach, storing your vault as a single local encrypted file with no mandatory cloud account at all, syncing only through whatever file-sync tool you choose. Both eliminate the single point of failure a proprietary vendor’s cloud infrastructure represents.

Open Source Alternatives

Bitwarden is an open source password manager with end-to-end encryption, cross-platform apps, and self-hosting, offered as an alternative to 1Password and LastPass.

GPL-3.0

KeePassXC is a free, open source password manager that stores credentials in an offline encrypted database, with no cloud dependency and browser integration.

GPL-3.0