Hacker ApprovedDepartments

LastPass

Ranked 11 of 21 password managers by recommenders

People recommend it as a cross-platform password manager that syncs well and has rarely failed day to day, though critics point to repeated data breaches and weak security practices.

People recommend it as a cross-platform password manager that syncs well and has rarely failed day to day, though critics point to repeated data breaches and weak security practices.

136 people gave an opinion

recommend it
20
criticize it
116
approval share
15%
Each figure is one person. RecommendsCriticizes

Recommended in 9 of 13 months

  1. November 2025: not recommended
  2. December 2025: recommended
  3. January 2026: recommended
  4. February 2026: recommended
  5. March 2026: not recommended
  6. April 2026: recommended
  7. May 2026: recommended
  8. June 2026: recommended
  9. July 2026: recommended
  10. August 2026: recommended
  11. September 2026: not recommended
  12. October 2026: recommended
  13. November 2026: not recommended (month in progress)

Why it doesn’t carry the badge

  • 20 people recommend itNeeds 10 or more, met.
  • 0.1 recommenders for every criticNeeds 2 to 1 or better, not met.
  • Recommended in 9 of 13 monthsNeeds 4 or more, met.

The same three rules apply to every product, and the badge can’t be bought. How the badge works

What people say about it

The reasons people give, with the number of comments that give each one. Open a reason to read what they said.

Why people recommend it

Each mark is one comment

  • Works across all major platforms

    “All sync seamlessly and support the major (and often minor) browsers.”

    Comment from 17 Dec 2025 in “Yep, Passkeys Still Have Problems”

    “LastPass works fine on Android, iOS, Mac, and Windows”

    Comment from 22 Jul 2026 in “Passkeys were invented by engineers with zero understanding of consumer brain”
  • Reliable, unobtrusive apps for heavy use

    “Used it for years and never encountered a single bug, and I'm quite a power user with hundreds of items stored in it”

    Comment from 26 Jun 2026 in “LastPass notifies users of yet another data breach”

    “The mobile app is quite good, it works and gets out of your way.”

    Comment from 25 Jun 2026 in “LastPass notifies users of yet another data breach”

    “Pretty good experience tbh”

    Comment from 25 Jun 2026 in “LastPass notifies users of yet another data breach”
  • Passkeys work across devices

    “Passkeys work just fine with Bitwarden, LastPass, KeepassXC”

    Comment from 22 Jul 2026 in “Passkeys were invented by engineers with zero understanding of consumer brain”

    “Then the passkey travels with you to your devices/apps.”

    Comment from 22 Jul 2026 in “Passkeys were invented by engineers with zero understanding of consumer brain”
  • Reliable access to sites and apps

    “to ensure you can get into all of your digital sites and assets”

    Comment from 30 May 2026 in “Show HN: I made an emergency page for my family. You should too”

    “I can be sure I'll be able to get into a site/app.”

    Comment from 22 Jul 2026 in “Passkeys were invented by engineers with zero understanding of consumer brain”

What people warn about

Each mark is one comment

  • Repeated breaches and security lapses

    “LastPass has had several such breaches over the years, and I think people are right to say that the company has a reputation of poor security hygiene.”

    Comment from 25 Jun 2026 in “LastPass notifies users of yet another data breach”

    “If the execs and board of a password manager company need to experience a breach to take security seriously, I don't really know what to say.”

    Comment from 25 Jun 2026 in “LastPass notifies users of yet another data breach”

    “I remember ten years ago telling our so-called leaders that the data will get leaked from LastPass.”

    Comment from 25 Jun 2026 in “LastPass notifies users of yet another data breach”
  • Breaches can cause real financial harm

    “had a breach of user vaults. If they hadn't implemented E2EE then it would have been more devastating than it was”

    Comment from 14 Aug 2026 in “Google Is Making Private AI Practical with Homomorphic Encryption”

    “I know someone personally who had their savings account wiped out because malware dumped their lastpass database.”

    Comment from 29 Aug 2026 in “Show HN: Sesame - a local-first, open-source password manager”
  • Profit focus over security

    “the priority of sales and profits has resulted in the sacrifice of the main quality measure of their main and only product”

    Comment from 25 Jun 2026 in “LastPass notifies users of yet another data breach”

    “Lastpass is owned by PE. Why? Because Francisco Partners and Elliott Management bought a cashflow that is sticky.”

    Comment from 25 Jun 2026 in “LastPass notifies users of yet another data breach”

    “When their CRM and support systems are improperly secured, it doesn't bode well for the security of their vaults.”

    Comment from 25 Jun 2026 in “LastPass notifies users of yet another data breach”

Other password managers people recommend

The four most recommended other password managers, with the same counts for each, so you can compare like for like. The tick on each bar marks the 2 to 1 line the badge needs.

LastPass compared with 4 alternatives
ProductRecommendCriticizeApprovalMonthsOwnedBadge
Bitwarden27821357%126.5 yrs23 owners—
1Password23817957%1215 yrs28 owners—
KeePassXC1313878%125 yrs5 ownersApproved
Vaultwarden1121390%113 yrs9 ownersApproved
LastPassThis page2011615%9——
See all 21 password managers, ranked

What people said

40 of the 154 comments that mention it, newest first. Each links to the original comment.

“Even lastpass has a better and faster extension”

RecommendsComment from 10 Oct 2026 in “Bitwarden Dual License Model”

“I know someone personally who had their savings account wiped out because malware dumped their lastpass database.”

CriticizesComment from 29 Aug 2026 in “Show HN: Sesame - a local-first, open-source password manager”

“had a breach of user vaults. If they hadn't implemented E2EE then it would have been more devastating than it was”

MixedComment from 14 Aug 2026 in “Google Is Making Private AI Practical with Homomorphic Encryption”

“Passkeys work just fine with Bitwarden, LastPass, KeepassXC”

RecommendsComment from 22 Jul 2026 in “Passkeys were invented by engineers with zero understanding of consumer brain”

“LastPass works fine on Android, iOS, Mac, and Windows”

RecommendsComment from 22 Jul 2026 in “Passkeys were invented by engineers with zero understanding of consumer brain”

“Then the passkey travels with you to your devices/apps.”

RecommendsComment from 22 Jul 2026 in “Passkeys were invented by engineers with zero understanding of consumer brain”

“I can be sure I'll be able to get into a site/app.”

RecommendsComment from 22 Jul 2026 in “Passkeys were invented by engineers with zero understanding of consumer brain”

“Used it for years and never encountered a single bug, and I'm quite a power user with hundreds of items stored in it”

RecommendsComment from 26 Jun 2026 in “LastPass notifies users of yet another data breach”

“using Lastpass or any other third party to store your passwords was never good security practice”

CriticizesComment from 26 Jun 2026 in “LastPass notifies users of yet another data breach”

“LastPass has had several such breaches over the years, and I think people are right to say that the company has a reputation of poor security hygiene.”

CriticizesComment from 25 Jun 2026 in “LastPass notifies users of yet another data breach”

“If the execs and board of a password manager company need to experience a breach to take security seriously, I don't really know what to say.”

CriticizesComment from 25 Jun 2026 in “LastPass notifies users of yet another data breach”

“One of the nice things about a 'bring your own vault syncing' is that breaches like this don't have to mean a goddamned thing to you.”

CriticizesComment from 25 Jun 2026 in “LastPass notifies users of yet another data breach”

“when things like LastPASS getting hacked are on the front page... imagine advising people to use that one!”

CriticizesComment from 25 Jun 2026 in “Cloudflare launched self-managed OAuth for all”

“When their CRM and support systems are improperly secured, it doesn't bode well for the security of their vaults.”

CriticizesComment from 25 Jun 2026 in “LastPass notifies users of yet another data breach”

“LastPass is a company that wants to make you believe that you can trust them with some of your most important assets.”

CriticizesComment from 25 Jun 2026 in “LastPass notifies users of yet another data breach”

“Personally, I left Lastpass for 1Password several breaches ago”

MixedComment from 25 Jun 2026 in “LastPass notifies users of yet another data breach”

“It seems like that's what LP does and probably every other company in this space does.”

MixedComment from 25 Jun 2026 in “LastPass notifies users of yet another data breach”

“Also use them as a password manager like an advanced version of Excel that fills in the passwords for you.”

CriticizesComment from 25 Jun 2026 in “LastPass notifies users of yet another data breach”

“I remember ten years ago telling our so-called leaders that the data will get leaked from LastPass.”

CriticizesComment from 25 Jun 2026 in “LastPass notifies users of yet another data breach”

“It's a bad look for them and if I trusted them this would make me lose my trust in them.”

MixedComment from 25 Jun 2026 in “LastPass notifies users of yet another data breach”

“load 30 different providers for some reason, to maximize the reach of their data sharing and advertising network”

CriticizesComment from 25 Jun 2026 in “LastPass notifies users of yet another data breach”

“Lastpass is owned by PE. Why? Because Francisco Partners and Elliott Management bought a cashflow that is sticky.”

CriticizesComment from 25 Jun 2026 in “LastPass notifies users of yet another data breach”

“The mobile app is quite good, it works and gets out of your way.”

RecommendsComment from 25 Jun 2026 in “LastPass notifies users of yet another data breach”

“Pretty good experience tbh”

RecommendsComment from 25 Jun 2026 in “LastPass notifies users of yet another data breach”

“This isn't great but it's not that big of a deal either.”

MixedComment from 25 Jun 2026 in “LastPass notifies users of yet another data breach”

“They were using LP immediately following a previous LP security incident and had no plans to migrate away.”

CriticizesComment from 25 Jun 2026 in “LastPass notifies users of yet another data breach”

“you business plan is to secure peoples personal data by handing some of that data to a third party”

CriticizesComment from 25 Jun 2026 in “LastPass notifies users of yet another data breach”

“the priority of sales and profits has resulted in the sacrifice of the main quality measure of their main and only product”

CriticizesComment from 25 Jun 2026 in “LastPass notifies users of yet another data breach”

“I've never been able to access my old LastPass vault to delete its contents since its first breach”

CriticizesComment from 23 Jun 2026 in “LastPass confirms data breach in Klue supply chain attack”

“to ensure you can get into all of your digital sites and assets”

RecommendsComment from 30 May 2026 in “Show HN: I made an emergency page for my family. You should too”

“SaaS password managers that seem to semi-regularly get hit with breaches (well, mostly LastPass).”

CriticizesComment from 21 May 2026 in “Get your passwords out of Bitwarden while you still can”

“was hacked because a developer installed a bad version of Plex Media Server on his work computer”

CriticizesComment from 21 May 2026 in “GitHub confirms breach of 3,800 repos via malicious VSCode extension”

“I have to keep looking up how to configure a site to never site and never ask”

MixedComment from 29 Apr 2026 in “Ghostty is leaving GitHub”

“a one-click exfiltration vulnerability has existed for more than half a year and hasn't been fixed”

CriticizesComment from 17 Feb 2026 in “Ask HN: Which password manager do you use / would you recommend?”

“I hope you used something like lastpass”

RecommendsComment from 7 Feb 2026 in “Show HN: If you lose your memory, how to regain access to your computer?”

“It's been massively hacked in 2022 and 2024, and there's currently an ongoing attack (Jan 2026).”

CriticizesComment from 25 Jan 2026 in “Google confirms 'high-friction' sideloading flow is coming to Android”

“Bitwarden, OnePassword, LastPass, Proton Pass etc. are password managers with dozens of millions of users that agree.”

RecommendsComment from 23 Jan 2026 in “Proton Spam and the AI Consent Problem”

“All sync seamlessly and support the major (and often minor) browsers.”

RecommendsComment from 17 Dec 2025 in “Yep, Passkeys Still Have Problems”

“they can be actually valuable (e.g. LastPass, my own extension Ward)”

RecommendsComment from 16 Dec 2025 in “8M users' AI conversations sold for profit by "privacy" extensions”

“Data breaches are not acceptable in the password business, not once, and surely not back-to-back.”

CriticizesComment from 15 Dec 2025 in “LastPass Rebuilt Trust in the Digital Age”

Counts come from 1,795,640 Hacker News comments, November 2025 to November 2026. How we count. Report a mistake.