LastPass in 2026: the breach, the pricing, and whether it's worth it

LastPass owns two records in password-manager history: the product that popularized the category, and the breach that taught a generation of security writers the phrase "vault metadata." The 2022 incidents are four years behind us, but the consequences kept arriving well into the present — a £1.2 million UK regulatory fine in November 2025, a $24.5 million class-action settlement reported in February 2026, and a customer base that never fully came back.

Here is the honest ledger as of November 2026: what the attackers actually took, what changed afterward, what the plans cost now, and who the product still suits.

What happened in 2022

Two incidents, both in August 2022, disclosed slowly.

The first ran from August 8 to 11. An attacker compromised a software developer's laptop and left with fourteen source code repositories, technical documentation, and an encrypted copy of the key protecting backups stored in Amazon S3. Encrypted, so not directly usable. LastPass announced this one on August 25 as a development-environment incident, saying it had seen no evidence of access to customer data.

The second is the one that mattered. On August 12, the personal computer of a senior DevOps engineer — one of four people able to decrypt that backup key — was compromised through an unpatched Plex media server. The attacker installed a keystroke logger, captured the engineer's master password, and from his linked corporate vault obtained the credentials that eventually reached the cloud backups. Between August 20 and September 16, the attacker pulled the user database and several vault backups. In October the attacker returned, and AWS GuardDuty raised alerts on the 15th and 22nd — but a mailing-list misconfiguration meant LastPass's security team did not see them until November 2. On December 22, four months after the first compromise, LastPass published the notice that laid it out, followed by a March 2023 update with recommended actions.

What the attackers actually got

Two categories, and the distinction is the whole story.

Account data, in the clear: names, email addresses, billing addresses, partial credit-card numbers, and IP addresses from server logs. No passwords there, but everything a phishing campaign needs to aim well.

Vault backups, encrypted — partially. LastPass encrypted the sensitive fields with AES-256, deriving each user's key from their master password: usernames, passwords, secure notes, form-fill data. What it did not encrypt were the website URLs stored alongside them. An attacker holding your backup therefore knows your bank, your crypto exchange, and your email provider by name, while holding the passwords as ciphertext — a targeting list stapled to a cracking project. And the cracking was not theoretical. Older vaults used the weaker default iteration counts of earlier eras, since LastPass raised its minimum over time, and in September 2023 researchers linked more than 150 victims and over $35 million in cryptocurrency thefts to decrypted vaults — the common factor being seed phrases stored inside LastPass. A $150 million heist was tied to the same stolen data in 2025.

The lesson is architectural, and it is fair to state plainly: the encryption held where it existed. The damage came from the fields nobody encrypted and the master passwords nobody could replace.

What changed since

LastPass brought in Mandiant, rotated the exposed credentials, and rebuilt its infrastructure around cloud accounts with stricter boundaries. What did not change is the core model — the company still describes zero-knowledge encryption with AES-256 and PBKDF2-SHA256, and the sensitive vault fields remain encrypted on that basis.

The accountability, though, arrived late and kept arriving. On November 20, 2025, the UK Information Commissioner's Office fined LastPass UK Ltd £1,228,283 for failings spanning December 2021 to December 2024 — specifically, letting senior employees use corporate vaults from personal devices and linking personal and corporate accounts under a single master password, which is precisely the design that turned one engineer's home media server into a skeleton key. The regulator counted over a million affected UK data subjects. In February 2026, the class action resolved at $24.5 million, with $16 million earmarked for cryptocurrency losses.

What LastPass costs now

Plan	Price	Devices	The shape of it
Free	$0	1 device type	Unlimited passwords, autofill, dark web monitoring, basic sharing
Premium	$3.00/mo, billed annually	All	1 user, emergency access, passkeys, 1 GB of note storage
Families	$4.00/mo, billed annually	All	6 users, shared folders, hardware MFA options
Plus	$7.00/mo, billed annually	All	Premium plus LastPass VPN on 10 devices

The pricing page confirms the lineup, and the free tier's defining limit is unchanged since 2021: one device type. Computers or mobile, pick a lane. That single restriction is why our roundup of the best free password managers of 2026 puts LastPass Free near the bottom of the free list — the competition gives away cross-device sync.

The 2FA fine print

LastPass's two-factor story is better than its pricing story, with two sharp caveats.

The good part: protecting the vault itself is free on every plan, including Free. The LastPass Authenticator app handles push approvals, time-based codes, and biometric confirmation, and any major authenticator works too. Standard multifactor is available, in the company's own words, to all plans from Free to Business.

The caveats sit in the plan comparison. FIDO2 passwordless vault login — desktop biometrics, security keys — requires a paid plan, and Free users can only go passwordless through the LastPass Authenticator app. Stranger still, hardware MFA options like YubiKeys are included on exactly one personal plan: Families. Premium and Plus, which cost more per feature in most respects, do not include them. And if you wanted your vault to generate TOTP codes for other sites, that feature exists only on Teams and Business — no personal plan has it. The free, standalone LastPass Authenticator app covers the gap, working with any site that supports standard TOTP.

None of this is a reason to skip vault 2FA. It is the layer that would have stopped a keylogger with your password and nothing else — and it fails more often than people assume, as our guide to 2FA bypasses documents.

Who it still suits — and who should walk

It suits teams already deployed on it. Teams ($4.25/user/month), Business ($7.00), and Business Max ($11.00) carry the policies, SSO, and admin reporting that IT departments buy password managers for, and the business tiers include the TOTP generation and hardware-key support the personal tiers lack. It also suits individuals who like the interface, kept strong master passwords, and rotated anything sensitive after 2022 — the day-to-day product remains fast and polished.

Walk away if the architecture leaves you cold. If you want open-source code you can audit, or a server you can run yourself, the Bitwarden guide covers the strongest counterpoint at two-thirds the price. If you want a commercial vault with a cleaner record, the 1Password guide is the usual landing spot. And if you are staying on Free for the unlimited passwords, accept that one-device-type limit consciously or move to a manager that does not impose it.

Master password discipline

The 2022 vault backups are still out there, which makes your master password the entire product. It derives the AES-256 key. It cannot be reset by support. Its strength decides whether your ciphertext is a wall or a suggestion.

So: a long, unique passphrase — four or five unrelated words beat a mangled eight-character string — never reused anywhere, because reuse is what turns one breached site into every site. Anything sensitive that sat in a LastPass vault before December 2022 should have been rotated already, and if it was not, rotate it now. Never store cryptocurrency seed phrases in any cloud vault. Turn on multifactor for the vault itself with the authenticator app. And consider keeping the second factor physically separate from the first: passwords in LastPass, codes in a different tool with different credentials, so no single compromise hands over both halves.

That separation is what we build, so weigh it accordingly. 2FA by DependsiT is a vault for second factors only — entries encrypted in the browser before upload, PBKDF2 deriving the key, HKDF splitting it per purpose, AES-256-GCM doing the encryption, Argon2id protecting login. It speaks TOTP, HOTP, and Steam Guard, runs offline as an installed app, and the guest generator needs no account: paste a secret, get a code, nothing stored and nothing sent.

Frequently asked questions

Is LastPass safe in 2026?

The cryptography is unchanged and standard: zero-knowledge AES-256 with PBKDF2-SHA256, keys derived from your master password on your device. The operational record is the open question — the ICO found failings persisting into late 2024, and the fine landed in November 2025. For an individual with a strong, unique master password and current data, the residual risk is manageable. Trust is a separate calculation from safety, and no feature list settles it.

Was my vault decrypted in the breach?

Not by any mass decryption — there was none to do. Attackers took ciphertext and have been cracking it offline, vault by vault, against the strength of each master password. The documented victims, 150-plus with over $35 million in crypto losses by 2023, shared weak or old configurations and stored seed phrases. If your 2022-era master password was short, reused, or common, treat the vault as opened and rotate what mattered. If it was a long unique passphrase, the arithmetic has been on your side.

Is LastPass free?

Yes, within its famous limit: one device type. Free covers unlimited passwords, autofill, dark web monitoring, basic sharing, and vault multifactor through the LastPass Authenticator app. Cross-device sync starts at Premium, $3.00 a month billed annually. Families is $4.00 for six users, and the new Plus bundles a VPN at $7.00. As free tiers go in 2026, it is the most restricted of the major managers.

Can I use a YubiKey with LastPass?

On personal plans, only on Families. The hardware MFA row — YubiKeys, fingerprint scanners, card readers — is a Families inclusion that Premium and Plus oddly lack, though every business tier has it. Every plan, Free included, supports TOTP authenticator apps and the LastPass Authenticator's push approvals. If hardware-key login is your requirement, check the current comparison table before paying for the wrong tier.

Should I switch from LastPass to Bitwarden?

If you want open-source code, optional self-hosting, or the cheapest complete paid tier — Bitwarden Premium runs $19.80 a year against LastPass Premium's $36 — the answer is yes. Bitwarden's free tier also syncs across unlimited devices, which LastPass Free will not do. If you prefer a commercial product with a cleaner recent record, 1Password is the alternative. Either migration is an export-and-import afternoon, and both importers are documented.

Whatever holds your passwords, keep the second factor somewhere with its own credentials. You can test the idea in under a minute with the guest generator — paste a TOTP secret, watch the code tick, and confirm nothing asks for your name.