LastPass vs 1Password: Which Is Better in 2026?

Start 1Password trialAffiliate link · how it works →

I opened a 1Password trial on 10/09/2026 and took its checkout to the payment step. Its prices were the same when I re-read the pricing page on 10/20/2026. This site has no LastPass account. The LastPass column comes from its pricing page, free sign-up page, personal terms, security page and two incident notices, all read on 10/20/2026.

One wrinkle: the LastPass pricing page showed our network prices in euros. The dollar figures below come from the price catalog embedded in that page’s own script. It lists Premium at $36 and Families at $48 a year.

Side-by-side comparison

Feature	1Password	LastPass
Our score	7.1/10	Not scored: no test account
Company	AgileBits Inc., Toronto, Canada	LastPass US LP
Cheapest paid plan, per year	$47.88 (Individual)	$36 (Premium), per the page’s price catalog
Paying month to month	$4.99	Not offered: annual billing only
Group plan	Families, $71.88 for 5 people	Families, $48 for 6 people
Free plan	No	Yes, one device type (computers or mobile)
Trial	14 days, no card; read-only after	30 days of Premium, no card; drops to Free after
Total with tax before a card	Yes: $52.13 with New York tax	Not checked; “applicable taxes will be applied at checkout”
Refund	None after a charge	None: “all payments are final and non-refundable”
Auto-renewal	Yes; cancel any time before the term ends	Yes; terms ask for cancellation 30 days before the term expires
Two-factor authentication	Authenticator app or security key, off by default	Listed on every plan; not tested
Also included	Watchtower, Travel Mode, 1 GB storage	Dark web monitoring, security dashboard; Plus plan adds a Windows-only VPN for $84
Published audits	ISO 27001, SOC 2 Type 2, pen tests via a Trust Center	ISO 27001, SOC 2 Type II, SOC 3, BSI C5, TRUSTe
Last disclosed incident	Okta support-system intrusion, 09/2023, no user data accessed	Vault backup copied, disclosed 12/22/2022; update 03/01/2023
Check prices	See plans	See plans

Prices verified on 10/20/2026. LastPass’s figures are from the catalog in its pricing page script, billed annually in USD. The page itself rendered euros for our network.

Price: first year and renewal

LastPass is about $12 a year cheaper for one person: $36 against 1Password’s $47.88. Its family plan is cheaper too and covers one more person, $48 for 6 against $71.88 for 5. Only one of them sells a month-to-month option: 1Password, at $4.99. The LastPass personal page offered annual billing only. LastPass also sells a Plus plan at $84 that bundles a VPN, but the VPN runs on Windows only.

Neither company printed a renewal price next to the first-year price. 1Password’s terms say the subscription renews “under the same conditions.” Its checkout showed “the annual fee of $52.13 USD starting on October 23, 2026,” with a reminder email 7 days before.

LastPass’s terms say price changes “will be effective as of your next renewal” and that promotional prices “may expire” on renewal. The 1Password figure is the post-increase price. Regular prices went up on 03/27/2026 from $35.88 to $47.88 for Individual.

Full numbers and cancel steps for 1Password are on the 1Password pricing page.

Free plan and trial

This is where LastPass wins on paper. LastPass Free stores unlimited passwords, generates them, fills them in and shares them. The limit is one device type: either computers or mobile devices, not both. Every free account starts with a 30-day Premium trial that needs no card and falls back to Free when it ends.

1Password has no free tier. Its 14-day trial asked me for a name, an email and an account password, and no card. When a trial ends without a payment method the account turns read-only. You can still see and copy your items, but not add or fill them. Details are on the 1Password free trial page.

Refunds and getting out

Both companies keep your money once you pay. 1Password’s terms say “all amounts paid are non-refundable,” with case-by-case exceptions. Its help center says it can’t refund past charges or unused time. LastPass’s personal terms, last updated July 2025, say “all payments are final and non-refundable.”

The cancellation rules differ in one detail worth knowing. 1Password’s help center puts a Cancel subscription button under Billing, and the plan stays active to the end of the term. LastPass’s terms say subscriptions renew automatically unless a party cancels “at least thirty (30) days before the current subscription term expires.”

You cancel through My Account in the vault’s Account Settings or by writing to support. Cancel a LastPass plan in the last month of the term and, by the letter of the terms, you may still be charged for another year.

Security: what each company publishes

Both use a zero-knowledge design. The master password never leaves your device, and the vault is encrypted with AES-256. On top of that, 1Password adds a 128-bit Secret Key that is combined with your password and never stored by the company. That is the main architectural difference. LastPass derives the key from the master password with PBKDF2 and SHA-256.

1Password lists ISO 27001, 27017, 27018 and 27701 certifications and a SOC 2 Type 2 report on its audits page. It moved its pen-test reports to a Trust Center in November 2025 and runs a bug bounty on HackerOne. Its last disclosed incident was in September 2023: suspicious activity on the Okta instance that manages employee apps. The company said it touched no user data.

LastPass’s security page lists ISO 27001, SOC 2 Type II, SOC 3, BSI C5 and TRUSTe. Its incident history is the heavier one. In August 2022 an attacker took source code and technical information from a development environment.

On 12/22/2022 LastPass disclosed what that material was used for. The attacker reached a cloud storage service and copied a backup of customer vault data. By the notice, that backup holds “both unencrypted data, such as website URLs, as well as fully-encrypted sensitive fields such as website usernames and passwords.” The same backup held customer names, billing addresses, emails, phone numbers and IP addresses.

The 03/01/2023 update added how. The attacker compromised a senior DevOps engineer’s computer through a vulnerability in third-party software. A backup of the MFA and federation database was copied as well.

What that means for you: if you had a LastPass vault before late 2022, an encrypted copy is in someone else’s hands. Its safety depends on the length of your master password and the hashing iterations your account used at the time. LastPass’s own notice advised changing passwords for anyone with a weak master password or fewer than the default iterations.

Data handling

1Password’s sign-up asked for a name and an email. The data region (United States, Canada or EU) follows where you create the account. Two switches to check: the web app’s first-run prompt to share usage analytics was on by default, and Manage Account has the same checkbox. Account deletion is in Manage Account, with 30 days to ask support to restore it.

LastPass’s sign-up starts with an email only, and I didn’t go further. Its terms say an expired paid account “may automatically be converted to a ‘free’ or ‘basic’ version.” The data stays with LastPass until you delete the account yourself.

What it’s like to be a U.S. customer

	1Password	LastPass
What you’ll pay at checkout	$47.88 plus tax; $52.13 with New York tax, shown before a card	$36 a year plus tax; the checkout asks you to create an account before it shows a total (LastPass pricing)
How to cancel	Billing → Cancel subscription; active to the end of the term, then read-only	Account Settings → My Account → Cancel, or a notice to support, at least 30 days before the term ends
Deleting your data	Manage Account → Permanently Delete Account; 30 days to restore	Not checked
Who can sign up	Worldwide; data region US, Canada or EU; Ontario law	Not checked; terms published by LastPass US LP
Support	Email, form, chatbot; “24/7 support” claimed; auto-reply in a minute, human reply pending	Support site and community; not contacted
Inside the account	Web app with vaults, generator, Watchtower, import from 15 sources	Not seen

Details for 1Password are in the 1Password review.

Who should pick 1Password

• You want the full total with tax printed before you enter a card.
• You want the Secret Key on top of your master password and hardware-key 2FA.
• You’d rather pay $12 more a year for a company with no disclosed theft of customer vaults.
• You can live without a refund by using the 14 trial days well.

Who should pick LastPass

• You want a free plan and only use passwords on one kind of device.
• You need 6 seats and $48 a year is the budget.
• You use the security dashboard and dark web alerts and are fine with the 2022 history.
• You will put the renewal date in your calendar, because the terms want 30 days’ notice to cancel.

Verdict

1Password is the one I’d pick for most people. It costs more, $47.88 against $36, and it has no free plan. But it printed $52.13 with New York tax before asking for a card, and its last disclosed incident reached no user data. The Secret Key means a stolen vault file is useless without a second piece of information the company never holds.

LastPass is the cheaper, more generous plan on paper, and its free tier is real. The 2022 incident is why it sits second. A backup of customer vaults was copied, and LastPass’s own notices say the attacker can try to guess master passwords against it offline.

If you already use LastPass with a long master password and current settings, you don’t have to leave today. If you’re choosing fresh, start with the 1Password review and LastPass’s own terms before you pay.

What we checked

• Test accounts: 1Password 14-day trial opened 10/09/2026 and used in the web app. LastPass: none, this site has no test account there
• Checkout: 1Password Individual taken to the payment step on 10/09/2026, $52.13 with New York tax shown before a card. LastPass: its Subscribe button opens an account-creation form before any price, so no checkout was opened. U.S. prices come from the price catalog inside its pricing page script on 10/20/2026
• Vendor pages: 1Password's pricing page re-read 10/20/2026, its terms, refund policy and audits page from 10/09/2026. LastPass's pricing, free sign-up, personal terms, security page and two incident notices captured 10/20/2026
• Support: one email to 1Password on 10/09/2026, auto-reply only. LastPass not contacted
• Public records: LastPass's incident notices of 12/22/2022 and 03/01/2023, 1Password's Okta incident of 09/2023. CFPB and CourtListener searched for 1Password on 10/09/2026, nothing with the company as a party. Not searched for LastPass

FAQ