Home » Password Manager » Review » LastPass Review: How Safe And Trustworthy It Is To Use In 2022?

LastPass Review: How Safe And Trustworthy It Is To Use In 2022?

Disclosure: All of our articles are unbased, well researched, and based on a true picture of the story. However we do sometimes get commissions from affiliate sites. Our readers get the best discount from buying from our links. Here is our complete affiliate disclosure.
LastPass Password Manager

Quick Review

4.3
(33)

LastPass is a simple, easy-to-use, affordable password manager offering free and premium plans for personal use and businesses. It is a popular password manager brand that uses AES 256-bit encryption and a zero-knowledge policy to secure the vault’s data. Besides this, SOC 2 Type 2 compliant guarantees that users’ data is safe with them. LastPass offers excellent features that cover all the basic password management features and a few extra features like country restriction and credit monitoring which no other password manager offers. However, LastPass has suffered from data breaches twice and has always been under the radar for having potential vulnerabilities. Thus, whether it’s the perfect choice to use, let’s compare its strengths and weaknesses. 

Strength
Zero-knowledge protocol
SOC 2 Type 2 Compliant
Various extra features
Browser extensions
Works across all devices
LastPass Authenticator
Weaknesses
Ineffective live customer support
No native apps for desktop devices
Limited browser extension features
Outdated UI and design
Past records of security breaches and vulnerabilities

LastPass ranks among the best password manager, stuffed with a range of features worth using. It is relatively safe to use as it deploys the industry’s highest encryption standard and is also SOC 2 Type 2 compliant, which means you can trust them with your data. 

The password manager includes many features that cover basic to advanced functions. Here’s a quick overview of LastPass’s features:

FeaturesDescription
Password GeneratorIt allows users to create and save passwords using the web vault, browser extensions, and apps. 
Security DashboardIt determines the health of the stored passwords by categorizing them as weak, reused, or compromised.
Dark Web MonitoringIt runs scan on the dark web to know if your credentials are leaked online.
Emergency AccessIt allows to add trusted contacts to access your vault.
Country RestrictionIt allows you to choose the countries where you want to access the LastPass vault. 
Multi-Factor AutheticaionIt enables users to add a secondary verification step to access the account and prevent unauthorized access.
Secure File StorageIt offers 1GB encrypted file storage to secure notes. 
AutofillsUsers can autofill their logins and other information with this feature
Multiple Folder SharingIt allows users to create,manage, and share folders with multiple users. 
Dashboard ManagementThe families and business plan users can manage the dashboard.
Credit MonitoringIt monitors the credit card reports and alerts users if they are any changes but this feature is only available to the US users. 
Passwordlesss LoginsIt allows users to access their online accounts without entering passwords.
Equivalent DomainsThis feature is for advanced users to use the same login for companies that use the same login service. 
Never URLsYou can add website URLs where you don’t want to use LastPass service or functions.

However, LastPass has severe security gaps, which makes people wonder if it’s worth using. It was hacked in 2022 and 2015. Besides this, the apps and browser extensions do have vulnerabilities. Let’s dive into this detailed LastPass password manager review to investigate the truth. 

Managing LastPass Settings

While setting up a password manager seems confusing to many users, LastPass keeps things simple and easy. To get started with LastPass, you can use two methods, i.e., download the applications or browser extensions. Both are quick and easy for non-tech savvy and advanced users. 

LastPass offers dedicated apps for Android and iOS platforms that users can easily download via their app store. The password manager also claims to offer apps for Linux, Windows and Mac, but it was shocking to visit the official site and learn that there was no app download option. Like Dashlane, integrate LastPass with the web browser extension to enjoy a seamless experience on desktop devices. 

LastPass Settings

To set up a LastPass user account, follow the steps below:

  1. Visit the LastPass site and select a plan you want to use. You can also click on the red Get LastPass for free button.
  2. Create the user account by entering a valid email address and a strong master password. (As it is the main password for accessing the vault, LastPass provides guidelines to create a strong and unique master password. Ensure the password is 12 characters long with at least one number, one lowercase, and an uppercase letter).
  3. After creating the master password, Sign up for a free account. 
  4. A prompt to download the browser extension will appear.
  5.  Install the browser extension and log into your account. The vault looks like this:
LastPass Password Manager

6. Click on the web vault and start storing passwords and other data. 

Setting up a LastPass account via browser extension was surprisingly convenient. However, it’s still essential to download the apps to manage the data and account settings fully.

LastPass’s Security

LastPass is relatively safe; it has security gaps that make people question its security standards. It uses standard AES 256-bit encryption, PBKDF2 SHA-256 key, and salted hashes to protect data in the vault. With such strong security measures, it is nearly impossible for anyone to break in and access the data. 

Besides this, LastPass also uses a zero-knowledge policy that ensures that it locally encrypts and decrypts the data on the device. At the same time, the user’s master password is not stored on the company’s servers. Hence LastPass doesn’t have any access to the master password or vault. All the LastPass plans offer the two-factor authentication feature that boosts account security. 

LastPass also claims to maintain users’ privacy and informs users about its commitment to privacy. In addition, LastPass is SOC 2 Type 2 compliant, meaning users can trust it to handle customers’ data securely and generate security audit reports available for the new admin console

However, on the darker side, LastPass’s security often falls under the gray area. It bears a past track record that’s full of security breaching incidents. 

In 2015, LastPass suffered a data breach in which attackers accessed and stole the cloud data but failed to access any sensitive information. In 2016 and 2019, vulnerabilities were found in the apps or browser extensions. In March 2020, the University of York published a white paper identifying multiple vulnerabilities within the password manager. It continued the following year when a researcher noticed different trackers in the Android app. In August 2022, LastPass recently admitted that its developer systems got hacked. But, hackers were not able to compromise any data. 

Trusting LastPass’s security is not easy. It must immediately undergo a security audit to prove its security standards and regain users’ lost trust. 

Interface and Ease of Use

LastPass interface is simple and easy to use. It doesn’t cause any user trouble during the entire navigation process. After logging into the web vault, the main dashboard appears on the screen:

LastPass Password Manager Interface

The design and UI are pretty outdated, which doesn’t impress the users. The left side of the menubar includes all the data entry categories, security features, account setting options, and advanced options. 

Start importing passwords by tapping on the import password at once option or by navigating into the account settings option and then clicking on the import category.

LastPass Password Manager Import Your Passwords

LastPass allows users to import passwords from all popular browsers and password managers and guides the steps to completing the task. Interestingly, you can also import passwords as .CSV files.  

With LastPass, you can store logins, payment info, secure notes, and other personal information in the vault by tapping on the add-one-by-one option on the main dashboard. The process is intuitive and allows users to add new customization data entry types. This makes it one of the most preferred choices of users looking for a service that excels more than logging passwords and login details. 

LastPass Add Item

To check the health of your passwords, click on the Security dashboard

LastPass Password Manager Security Dashboard

Within the Security Dashboard, the dark web monitoring tool asks you to add items to the vault so a scan can run on the dark web. 

LastPass add Item

LastPass’s most impressive web vault features were the Sharing Center and the Emergency Access. While the Sharing Center allows one to create multiple folders, manage them, and share them with friends and family, the Emergency Access lets to add contacts of trusted ones that can access the vault immediately or for a few hours, days, or even a month during an emergency.

LastPass Sharing Center
LastPass Emergency Access

But both features are available only in the premium plan. If you’re using LastPass in the free trial period, you can’t access these features, which might upset users. 

LastPass account setting options are quite appreciable. It includes General settings, 2FA option and advanced options that are rare in other password managers. To take advantage of more advanced features like credit monitoring go to the advanced option tab

LastPass Password Manager Account Settings

If you want to create passwords, enable the autofill login, or add websites to the vault, consider using the right menu bar

LastPass Password Manager welcome

Like the web interface, the mobile app interface is simple and offers great ease of use. But users again are not happy with it, and on Reddit have criticized this thing a lot. It’d be best if LastPass relaunched its app to ensure a highly customizable and user-friendly experience. 

Compatible Devices and Browser Extensions

LastPass is compatible with all popular devices, browsers, and operating systems. It offers well-designed and intuitive apps for Android and iOS. The apps are easy to use and download and offer similar functionality. After installing the apps from the app store and creating the user account, you can enjoy a hassle-free experience. The apps are super-friendly, so feel free to explore them. It is just a matter of a click, and you’ll find all the features. 

The password manager also ensures an incredible user experience on Windows, Linux, and Mac. Since a few password managers offer support for Linux so, it’s a great password manager for Linux users. To use LastPass’s desktop version, no need to install apps; instead, download the browser extensions. 

 LastPass also offers browser extensions for all mainstream browsers like:

  • Google Chrome
  • Mozilla Firefox
  • Microsoft Edge
  • Safari
  • Opera

It was utterly shocking to know that in 2020, LastPass removed its extension from Google web store. It means that desktop users who use Chrome browser won’t be able to use LastPass. But the issue got resolved soon, and now the extension is accessible to everyone. 

LastPass’s browser extensions seem nothing less than its apps. But after testing, it was evident why the downloading app is crucial. It offers limited functionality, allowing users to generate and save passwords and add data items. There is no autofill or password import option, which was a complete bummer. Also, it only includes one premium feature, the Security Dashboard. However, it redirects you to the web vault upon clicking on it. 

The limited functionality and features don’t make the LastPass browser extension worth using.

Features Overview

LastPass, like most other password managers, offers basic password management features. But some other notable features make LastPass shines out from its competitor: These extra features include:

  • Credit monitoring tool
  • Country restriction
  • Passwordless logins
  • Never URLs
  • Equivalent URLs
  • One-Time Passwords 

These features improve security and add more value to your overall user experience.

Other than this, below is the breakdown of the core LastPass features:

Password Generator

The Password generator is every password manager’s basic and core feature. This feature allows users to generate strong and unique passwords for their online accounts. The best thing about the LastPass password generator is that it’s built-in into the web vault and the browser extensions. Users don’t need to visit LastPass’s website to generate passwords.

Security Dashboard

The security dashboard is the most outstanding LastPass feature. Though it’s included in all other password managers, the unique thing about LastPass Security Dashboard is that it also has a dark web monitoring tool. Users can evaluate their stored passwords’ health and change any weak, reused, or compromised passwords. But, at the same time, they can also run a dark web scan by adding their email address and other details to know if their passwords or other personal information is leaked. Business plan users can benefit more from this feature and prevent credential-stuffing attacks.

Emergency Access

Emergency Access is another LastPass feature that allows users to add a trusted contact to access their vaults during an emergency. It asks users to add up the email address of the trusted contact and then choose the access period. Users can choose from immediate access to 30-day access. However, this feature is only available for premium users

Apart from this, LastPass also offers excellent features for business users. All these features play a vital role in protecting passwords and employees’ data and preventing potential online threats. 

LastPass Customer Support

If, while using LastPass, users encounter any issue, the customer support team is always there to help them out. The best way to address these issues is the website resources

LastPass includes comprehensive and knowledgeable resources with blogs, articles, video tutorials, FAQs, and user guides. 

LastPass Password Manager Resource

It also has an active user community and social media pages on all social networking sites, including Twitter, Instagram, and Facebook. Though it is the fastest way to ask for help, this isn’t the case with LastPass. The Twitter page seems inactive for a long time and isn’t the best choice. 

However, joining the user community is a great way to interact with experts and other users who assist you with extensive knowledge and prior experience. 

LastPass Community

To contact the sales department or request a demo, visit the Contact Us page

Besides this, LastPass also offers telephonic support and a live chat option. But it was, again wasn’t great to know that the live chat support agents are available from 9 am to 5 pm (EST). If someone needs immediate help, they can’t get it. However, when the live chat feature was tested, it raised skepticism. The virtual assistants were there to offer help, but in reality, they even failed to understand the query, which was another setback. 

LastPass Virtual Assistant

Overall, LastPass customer support is decent . As getting in touch with the support team representatives is quite challenging, they need to work on it. 

LastPass Pricing Plan

LastPass has free and paid versions. The paid version has subscription plans for personal and business use. All the plans are annually billed, which means it doesn’t offer a monthly plan like its competitors and is backed up by a 30-days free-trial period. 

LastPass Pricing Plan

The free version of the LastPass password manager is limited to only one user and device. The name implies that the LastPass free version will have a great limitation, leading to a frustrating user experience. But this is not the truth. Users can create and store unlimited passwords and secure notes in the vault and can access the following features:

  • MFA
  • One-to-one sharing
  • Passwordless logins
  • Automatic device sync
  • LastPass authenticator

 The premium plan starts at $3.00 per month and allows one user to access the LastPass account on unlimited devices. It includes all the free plan features with some extra features like:

  • One too many sharing
  • Unlimited shared folders 
  • 1GB encrypted file storage
  • Access to premium security tools (Security dashboard, dark web monitoring, Emergency Access, MFA, and Advanced MFA)

LastPass family plan is best suited for up to six users and costs $4 per month. It covers all the premium features with the addition of unlimited shared folders and a family dashboard manager. 

LastPass free version is the perfect plan for an individual looking for basic password protection. In contrast, the premium plan offers great value for money and is the most suitable subscription plan to opt for. 

Business Plan:

LastPass is also the top-most choice of business organizations. The password managers offer two premium subscription plans for teams and medium to large-size businesses. 

LastPass Business Plan

The Teams plan costs $4 per user/ month and allows access to up to 50 users. This makes it the best password manager for small-size businesses. The plan offers numerous business-specific features like:

  • Admin consoles
  • Add-ons
  • Customization security policies (up to ten)
  • All password management features
  • MFA and advanced MFA

The business plan includes all the features offered in the Teams plan with a range of other extra features like:

  • SSO
  • VPN with advanced MFA-add on
  • Integrations
  • Advanced Reporting
  • Advanced adoption
  • Customization user management
  • Families as a benefit

This plan costs $6 per user/ month and allows unlimited users to use it. If you have a limited-member team, choosing the Teams plan is a better option.

Does LastPass offer a free version?

LastPass offers a free version of the personal and family use plan. The free version of LastPass limits the access of the LastPass account to one user and device. But it does offer all basic password management features, which is appreciable. Users can generate unlimited passwords, autofill and save data, and sync across devices. The most impressive thing about LastPass free version is that it also provides access to the MFA feature that increases account security, along with access to the LastPass authentication app and passwordless logins. 

Did LastPass get hacked?

Despite offering the highest level of security, LastPass has a long hacking history. The password manager was recently hacked in August 2022 when some unauthorized person accessed the developers’ system. Before this, in 2015, LastPass experienced a data breach in which hackers compromised the cloud data. However, in both events, the users’ data wasn’t accessed. Also, there were several occasions when LastPass researchers found vulnerabilities in the password manager.

Does LastPass have a money-back guarantee offer?

LastPass offers a 30-days free trial period. During this time, it allows users to access and test out features and services and hence doesn’t have a refund policy. But there’s a catch: the premium security tools are not accessible during the trial period, and if users think that LastPass’s advanced features are not worth using, there’s no way to get the money back after the subscription. 

Is LastPass safe to use?

LastPass security breaches often make users doubt whether it is safe to use or not. However, the password manager is not as unsafe to use as it’s being picturized. It uses robust encryption, a zero-knowledge policy, and advanced features similar to all other standalone password managers. So it is safe to use. 

Final Verdict

LastPass ranks among the top-tier password manager list. It utilizes strong AES 256-bit encryption and zero-knowledge protocol to protect the logins and other data in the vault. Besides this, it offers several advanced features that, besides providing basic password management functions, improve online security and protect from potential threats. 

It is easy to use and offers a decent interface with a pretty old design that needs an immediate update. There are free and premium versions for all users, including businesses and families. 
However, there are some areas where LastPass needs to work. Customer support must have a 24/7 live chat team to provide instant help to the users. There’s an immense need for the company to undergo security audits to prove that they value users’ data. Moreover, it would be best if LastPass had standalone apps for desktop devices for a more smooth and more seamless experience.

Photo of author
Rebecca James is an IT consultant with forward thinking approach toward developing IT infrastructures of SMEs. She writes to engage with individuals and raise awareness of digital security, privacy, and better IT infrastructure.

Leave a Comment