Keeper Security is a well-regarded password management solution designed for large organizations with complex technical and security needs. Driven by add-ons and annual price increases, Keeper offers a range of capabilities that many consumers, small businesses, and mid-sized organizations may not require.

LastPass is a solution designed for everyone, from the non-technical users in need of personal password management to tech-savvy IT admins who need to secure their enterprise organization. With LastPass, users can generate, save, autofill, manage, and share passwords from anywhere, on any device, while businesses get the flexibility to customize their solution to their needs – all with no hidden costs.

Yes, LastPass is still safe in 2024. While LastPass experienced security incidents in the past, the effects of the events were minimal – no personal user data was accessed. Moreover, we were transparent with our customers the moment the incident was identified, informing them of what happened, what was impacted, and how we were acting to resolve the issue and tighten our security even further.

We remain committed to security practices at LastPass, maintaining global compliance certificates and implementing best-in-class security architecture practices, including top-of-the-line encryption, hashing, and salting at all entry points.

Security comes first at LastPass, and we’re continually evolving to remain ahead of an ever-evolving cybersecurity landscape.

LastPass secures all passwords, so you don't have to, ensuring that your most important credentials are protected, private, and always within reach. We have undergone an extensive security transformation; emerging as a stronger, more innovative, and independent company with an unwavering commitment to security, privacy, and customer satisfaction.

We seized a unique opportunity to implement an entirely new security and privacy infrastructure across our development and production environments, moved to a purpose-built, highly available and secure Cloud platform, rolled out an entirely new fleet of managed end user devices, and enhanced security and privacy within our digital vault, including achieving ISO 27701 compliance.

We’ve also invested significant resources to strengthen our privacy and security teams, establishing new business units, such as our Privacy Operations, Safety and Trust (POST) team, which focuses on safeguarding customer privacy and protecting against fraud and abuse. Additionally, our new Threat Intelligence, Mitigation, and Escalation (TIME) team provides actionable security insights and advanced threat intelligence on LastPass Labs, our content hub for the market and our customers.

We have documented so much of this journey through updated support articles and close to real-time monitoring of LastPass systems within our Compliance Center, keeping customers informed every step of the way.

LastPass is one of the most secure password management solutions available on the market. LastPass is committed to providing users with complete transparency, and we’re proud to discuss how we’ve built our security structure off best-in-class security practices.

LastPass is built on a zero–knowledge security model, which means your data is kept secret – even from us. Only you can unlock your encrypted password vault with your master password or biometrics. We also implement top-tier security measures, using 256-bit AES encryption plus PBKDF2 hashing with SHA-256 salting to protect, scramble, and anonymize user data.

We maintain a global data privacy program, which ensures that the data of our customers, users, and end-users are always protected and private. Moreover, LastPass has proved its security model through industry-tested compliance metrics. We’ve received third-party security certifications like ISO 27001, SOC2 Type II, SOC3, BSI C5, TRUSTe, and many more.

Lastly, we at LastPass value transparency more than anything else. That’s why we provide in-depth reports on the goings on at LastPass, and why we ask third-party professionals to investigate and test our security systems so we can maintain the best security standards possible.