LastPass
Ranked 11 of 21 password managers by recommenders
People recommend it as a cross-platform password manager that syncs well and has rarely failed day to day, though critics point to repeated data breaches and weak security practices.
People recommend it as a cross-platform password manager that syncs well and has rarely failed day to day, though critics point to repeated data breaches and weak security practices.
136 people gave an opinion
- recommend it
- 20
- criticize it
- 116
- approval share
- 15%
Recommended in 9 of 13 months
- November 2025: not recommended
- December 2025: recommended
- January 2026: recommended
- February 2026: recommended
- March 2026: not recommended
- April 2026: recommended
- May 2026: recommended
- June 2026: recommended
- July 2026: recommended
- August 2026: recommended
- September 2026: not recommended
- October 2026: recommended
- November 2026: not recommended (month in progress)
Why it doesn’t carry the badge
- 20 people recommend itNeeds 10 or more, met.
- 0.1 recommenders for every criticNeeds 2 to 1 or better, not met.
- Recommended in 9 of 13 monthsNeeds 4 or more, met.
The same three rules apply to every product, and the badge can’t be bought. How the badge works
What people say about it
The reasons people give, with the number of comments that give each one. Open a reason to read what they said.
Why people recommend it
Each mark is one comment
Works across all major platforms
“All sync seamlessly and support the major (and often minor) browsers.”
Comment from 17 Dec 2025 in “Yep, Passkeys Still Have Problems” “LastPass works fine on Android, iOS, Mac, and Windows”
Comment from 22 Jul 2026 in “Passkeys were invented by engineers with zero understanding of consumer brain” Reliable, unobtrusive apps for heavy use
“Used it for years and never encountered a single bug, and I'm quite a power user with hundreds of items stored in it”
Comment from 26 Jun 2026 in “LastPass notifies users of yet another data breach” “The mobile app is quite good, it works and gets out of your way.”
Comment from 25 Jun 2026 in “LastPass notifies users of yet another data breach” “Pretty good experience tbh”
Comment from 25 Jun 2026 in “LastPass notifies users of yet another data breach” Passkeys work across devices
“Passkeys work just fine with Bitwarden, LastPass, KeepassXC”
Comment from 22 Jul 2026 in “Passkeys were invented by engineers with zero understanding of consumer brain” “Then the passkey travels with you to your devices/apps.”
Comment from 22 Jul 2026 in “Passkeys were invented by engineers with zero understanding of consumer brain” Reliable access to sites and apps
“to ensure you can get into all of your digital sites and assets”
Comment from 30 May 2026 in “Show HN: I made an emergency page for my family. You should too” “I can be sure I'll be able to get into a site/app.”
Comment from 22 Jul 2026 in “Passkeys were invented by engineers with zero understanding of consumer brain”
What people warn about
Each mark is one comment
Repeated breaches and security lapses
“LastPass has had several such breaches over the years, and I think people are right to say that the company has a reputation of poor security hygiene.”
Comment from 25 Jun 2026 in “LastPass notifies users of yet another data breach” “If the execs and board of a password manager company need to experience a breach to take security seriously, I don't really know what to say.”
Comment from 25 Jun 2026 in “LastPass notifies users of yet another data breach” “I remember ten years ago telling our so-called leaders that the data will get leaked from LastPass.”
Comment from 25 Jun 2026 in “LastPass notifies users of yet another data breach” - Comment from 15 Dec 2025 in “LastPass Rebuilt Trust in the Digital Age”
- Comment from 21 May 2026 in “Get your passwords out of Bitwarden while you still can”
Breaches can cause real financial harm
“had a breach of user vaults. If they hadn't implemented E2EE then it would have been more devastating than it was”
Comment from 14 Aug 2026 in “Google Is Making Private AI Practical with Homomorphic Encryption” “I know someone personally who had their savings account wiped out because malware dumped their lastpass database.”
Comment from 29 Aug 2026 in “Show HN: Sesame - a local-first, open-source password manager” Profit focus over security
“the priority of sales and profits has resulted in the sacrifice of the main quality measure of their main and only product”
Comment from 25 Jun 2026 in “LastPass notifies users of yet another data breach” “Lastpass is owned by PE. Why? Because Francisco Partners and Elliott Management bought a cashflow that is sticky.”
Comment from 25 Jun 2026 in “LastPass notifies users of yet another data breach” “When their CRM and support systems are improperly secured, it doesn't bode well for the security of their vaults.”
Comment from 25 Jun 2026 in “LastPass notifies users of yet another data breach”
Other password managers people recommend
The four most recommended other password managers, with the same counts for each, so you can compare like for like. The tick on each bar marks the 2 to 1 line the badge needs.
| Product | Recommend | Criticize | Approval | Months | Owned | Badge |
|---|---|---|---|---|---|---|
| Bitwarden | 278 | 213 | 57% | 12 | 6.5 yrs23 owners | — |
| 1Password | 238 | 179 | 57% | 12 | 15 yrs28 owners | — |
| KeePassXC | 131 | 38 | 78% | 12 | 5 yrs5 owners | Approved |
| Vaultwarden | 112 | 13 | 90% | 11 | 3 yrs9 owners | Approved |
| LastPassThis page | 20 | 116 | 15% | 9 | — | — |
What people said
40 of the 154 comments that mention it, newest first. Each links to the original comment.
“Even lastpass has a better and faster extension”
“I know someone personally who had their savings account wiped out because malware dumped their lastpass database.”
“had a breach of user vaults. If they hadn't implemented E2EE then it would have been more devastating than it was”
“Passkeys work just fine with Bitwarden, LastPass, KeepassXC”
“LastPass works fine on Android, iOS, Mac, and Windows”
“Then the passkey travels with you to your devices/apps.”
“I can be sure I'll be able to get into a site/app.”
“Used it for years and never encountered a single bug, and I'm quite a power user with hundreds of items stored in it”
“using Lastpass or any other third party to store your passwords was never good security practice”
“LastPass has had several such breaches over the years, and I think people are right to say that the company has a reputation of poor security hygiene.”
“If the execs and board of a password manager company need to experience a breach to take security seriously, I don't really know what to say.”
“One of the nice things about a 'bring your own vault syncing' is that breaches like this don't have to mean a goddamned thing to you.”
“when things like LastPASS getting hacked are on the front page... imagine advising people to use that one!”
“When their CRM and support systems are improperly secured, it doesn't bode well for the security of their vaults.”
“LastPass is a company that wants to make you believe that you can trust them with some of your most important assets.”
“Personally, I left Lastpass for 1Password several breaches ago”
“It seems like that's what LP does and probably every other company in this space does.”
“Also use them as a password manager like an advanced version of Excel that fills in the passwords for you.”
“I remember ten years ago telling our so-called leaders that the data will get leaked from LastPass.”
“It's a bad look for them and if I trusted them this would make me lose my trust in them.”
“load 30 different providers for some reason, to maximize the reach of their data sharing and advertising network”
“Lastpass is owned by PE. Why? Because Francisco Partners and Elliott Management bought a cashflow that is sticky.”
“The mobile app is quite good, it works and gets out of your way.”
“Pretty good experience tbh”
“This isn't great but it's not that big of a deal either.”
“They were using LP immediately following a previous LP security incident and had no plans to migrate away.”
“you business plan is to secure peoples personal data by handing some of that data to a third party”
“the priority of sales and profits has resulted in the sacrifice of the main quality measure of their main and only product”
“I've never been able to access my old LastPass vault to delete its contents since its first breach”
“to ensure you can get into all of your digital sites and assets”
“SaaS password managers that seem to semi-regularly get hit with breaches (well, mostly LastPass).”
“was hacked because a developer installed a bad version of Plex Media Server on his work computer”
“I have to keep looking up how to configure a site to never site and never ask”
“a one-click exfiltration vulnerability has existed for more than half a year and hasn't been fixed”
“I hope you used something like lastpass”
“It's been massively hacked in 2022 and 2024, and there's currently an ongoing attack (Jan 2026).”
“Bitwarden, OnePassword, LastPass, Proton Pass etc. are password managers with dozens of millions of users that agree.”
“All sync seamlessly and support the major (and often minor) browsers.”
“they can be actually valuable (e.g. LastPass, my own extension Ward)”
“Data breaches are not acceptable in the password business, not once, and surely not back-to-back.”
Counts come from 1,795,640 Hacker News comments, November 2025 to November 2026. How we count. Report a mistake.