LastPass

Overview

LastPass launched in 2008 and grew into one of the most widely used consumer password managers, offering browser extensions, mobile apps, and a web vault built around a cloud-synced, encrypted password store. It was acquired by LogMeIn in 2015, which later spun off its password-management business as an independent company, GoTo (formerly LogMeIn, Inc.), continuing to operate LastPass as a standalone product.

LastPass’s reputation was significantly damaged by a series of security incidents disclosed between August and December 2022: attackers used a compromised employee credential to access cloud storage backups containing encrypted vault data, along with unencrypted metadata such as website URLs, for a large portion of its customer base. While vault contents remained protected by each user’s master password (assuming a strong, unique password was used), the incident renewed scrutiny of LastPass’s security architecture and drove many users and security researchers to migrate to alternatives with published, auditable client code. LastPass has since stated it strengthened its security practices, and the service remains proprietary and closed source.

Key Features

• Cloud-synced vault — Encrypted password storage synced automatically across devices via LastPass’s servers
• Browser extensions and apps — Autofill and password capture across major browsers, desktop, and mobile
• Password generator — Configurable random password generation
• Dark web monitoring — Alerts if saved credentials appear in known data breaches
• Shared folders — Team and family plans for sharing logins across multiple users
• Emergency access — Designate trusted contacts who can request vault access

Use Cases

• Individuals — Everyday password storage and autofill across devices
• Families — Shared vaults for household accounts
• Small teams — Centralized credential sharing for businesses

Who It’s For

LastPass is aimed at individuals and businesses who want a straightforward, cloud-synced password manager without self-hosting. It’s distributed on a freemium model with paid tiers for multi-device sync, family sharing, and business administration; prospective users should weigh its 2022 breach history against providers offering independently auditable client code.