Bitwarden vs LastPass
The classic switch. LastPass had encrypted vault backups and source code stolen in 2022; Bitwarden has no incident on record, is open source and costs less.
Where they differ most
Free plan
- Bitwarden
- Unlimited passwords on unlimited devices; sharing with one other user (free two-person organization)
- LastPass
- One device type only (computers or mobiles, not both); unlimited items; limited sharing
Personal plan, per year
- Bitwarden
- $19.80, Premium
- LastPass
- $36, Premium
After the first year
- Bitwarden
- Same price
- LastPass
- Not stated
Master password hashing
- Bitwarden
- PBKDF2-HMAC-SHA256, 600,000 iterations (default); optional Argon2id, 32 MiB memory, 6 iterations, 4 parallelism
- LastPass
- PBKDF2-HMAC-SHA256, 600,000 iterations (current default; username as salt)
Known incidents
- Bitwarden
- None found
- LastPass
- 2022, 2022, 2026
Open-source apps
- Bitwarden
- All appsAll apps
- LastPass
- NoNo
Which one to pick
Pick Bitwarden if
- You want a password manager with no vault theft on record
- You want a free plan that syncs phone and computer (LastPass free is one device type only)
- You want open-source code and the option to self-host
Pick LastPass if
- Your workplace already runs LastPass and you'd rather keep one tool
- You want its emergency access and 1 GB of file storage in one plan, and accept its history
Every fact, side by side
Open a row to see notes and sources. Highlighted rows differ.
Price
What's encrypted, and how
Who you're trusting
Apps, passkeys and sign-in
Sharing, recovery and extras
Sources (26)
- Research summary of the vendor's pages (no single link)AI-assisted research, spot-checked, checked 2026-10-16
- About BitwardenVendor, checked 2026-10-16
- Bitwarden security white paperVendor, checked 2026-10-16
- Research summary of the vendor's pages (no single link)AI-assisted research, spot-checked, checked 2026-10-16
- Bitwarden help: vault dataVendor, checked 2026-10-16
- Bitwarden: encryption key derivationVendor, checked 2026-10-16
- Bitwarden on GitHubSource code, checked 2026-10-16
- Bitwarden compliance, audits and certificationsAudit, checked 2026-10-16
- Bitwarden pricingVendor, checked 2026-10-16
- Bitwarden help: password manager plansVendor, checked 2026-10-16
- Bitwarden help: product highlights and recent updatesVendor, checked 2026-10-16
- Bitwarden blog: passkey managementVendor, checked 2026-10-16
- Bitwarden help: SSH agentVendor, checked 2026-10-16
- Bitwarden help: export your dataVendor, checked 2026-10-16
- Bitwarden help: emergency accessVendor, checked 2026-10-16
- Wikipedia: LastPassNews or reference, checked 2026-10-16
- LastPass zero-knowledge securityVendor, checked 2026-10-16
- LastPass blog: encrypting URLsVendor, checked 2026-10-16
- LastPass support: what makes LastPass secureVendor, checked 2026-10-16
- LastPass notice of the 2022 security incidentVendor, checked 2026-10-16
- BleepingComputer: LastPass confirms data breach in Klue supply-chain attack (2026)News or reference, checked 2026-10-16
- Wikipedia: LastPass 2022 data breachNews or reference, checked 2026-10-16
- LastPass personal pricingVendor, checked 2026-10-16
- LastPass featuresVendor, checked 2026-10-16
- LastPass support: about passkeysVendor, checked 2026-10-16
- LastPass support: passkey FAQsVendor, checked 2026-10-16