Zero-knowledge model
Your data is kept secret, even from us. Only you can unlock your encrypted vault with your Master Password.
Top-tier security measures
LastPass uses AES-256 data encryption plus PBKDF2 hashing with SHA-256 salting.
Private by design
LastPass maintains a global data privacy program designed to protect the data of customers, users, and end-users.
Industry-tested compliance
LastPass holds third-party security certifications like ISO 27001, SOC2 Type II, SOC3, BSI C5, TRUSTe, and more.
Regular expert security audits
LastPass employs trusted, world-class security organizations to conduct routine audits and testing of the LastPass service and infrastructure.
Bug bounty program
LastPass futureproofs its security measures by supporting a bug bounty program where white-hat hackers can submit found bugs and vulnerabilities.
Responsible disclosure
LastPass users have direct access to our security intelligence team to report and investigate potential vulnerabilities and attacks.
