vs
1Password vs LastPass
Both are closed source and cloud-only. 1Password has no vault theft on record and adds a Secret Key; LastPass's 2022 breach exposed encrypted vaults with unencrypted website addresses.
Where they differ most
Free plan
- 1Password
- No
- LastPass
- One device type only (computers or mobiles, not both); unlimited items; limited sharing
Personal plan, per year
- 1Password
- $35.88, Individual
- LastPass
- $36, Premium
After the first year
- 1Password
- $47.88 per year (1.3×)
- LastPass
- Not stated
Extra secret key
- 1Password
- YesYes
- LastPass
- NoNo
Master password hashing
- 1Password
- PBKDF2-HMAC-SHA256, 650,000 iterations on the account password, combined with a 128-bit Secret Key via HKDF (Two-Secret Key Derivation)
- LastPass
- PBKDF2-HMAC-SHA256, 600,000 iterations (current default; username as salt)
Known incidents
- 1Password
- None found
- LastPass
- 2022, 2022, 2026
Which one to pick
Pick 1Password if
- You want a clean record: no stolen vaults or source code
- You want the Secret Key on top of your master password
- You want to unlock your vault with a passkey
Pick LastPass if
- You want a free tier: LastPass has one (one device type), 1Password only a 14-day trial
- Your company already standardised on it
Every fact, side by side
Open a row to see notes and sources. Highlighted rows differ.
1PasswordLastPassPrice
What's encrypted, and how
Who you're trusting
Apps, passkeys and sign-in
Sharing, recovery and extras
Sources (28)
- Research summary of the vendor's pages (no single link)AI-assisted research, spot-checked, checked 2026-10-16
- Wikipedia: 1PasswordNews or reference, checked 2026-10-16
- 1Password security overviewVendor, checked 2026-10-16
- 1Password blog: why 1Password can't read your vault dataVendor, checked 2026-10-16
- 1Password security white paperVendor, checked 2026-10-16
- 1Password support: PBKDF2Vendor, checked 2026-10-16
- 1Password blog: how 1Password protects your dataVendor, checked 2026-10-16
- Research summary of the vendor's pages (no single link)AI-assisted research, spot-checked, checked 2026-10-16
- 1Password security assessments (reports now in its Trust Center)Audit, checked 2026-10-16
- 1Password personal pricingVendor, checked 2026-10-16
- 1Password business pricingVendor, checked 2026-10-16
- 1Password featuresVendor, checked 2026-10-16
- 1Password support: two-factor authenticationVendor, checked 2026-10-16
- 1Password: export your dataVendor, checked 2026-10-16
- 1Password support: passkey securityVendor, checked 2026-10-16
- 1Password developer docs: SSHVendor, checked 2026-10-16
- 1Password developer docs: CLIVendor, checked 2026-10-16
- Wikipedia: LastPassNews or reference, checked 2026-10-16
- LastPass zero-knowledge securityVendor, checked 2026-10-16
- LastPass blog: encrypting URLsVendor, checked 2026-10-16
- LastPass support: what makes LastPass secureVendor, checked 2026-10-16
- LastPass notice of the 2022 security incidentVendor, checked 2026-10-16
- BleepingComputer: LastPass confirms data breach in Klue supply-chain attack (2026)News or reference, checked 2026-10-16
- Wikipedia: LastPass 2022 data breachNews or reference, checked 2026-10-16
- LastPass personal pricingVendor, checked 2026-10-16
- LastPass featuresVendor, checked 2026-10-16
- LastPass support: about passkeysVendor, checked 2026-10-16
- LastPass support: passkey FAQsVendor, checked 2026-10-16