{"slug": "lastpass", "name": "LastPass", "category": "security", "category_name": "Security and passwords", "description": "", "recommenders": 2, "commenters": 19, "warners": 14, "score": -9.842, "rising": -0.65, "first": "2025-12-15", "latest": "2026-10-14", "why": "LastPass works fine on Android, iOS, Mac, and Windows", "why_is_quote": true, "has_verdict": false, "sentiment": {"recommend": 2, "neutral": 3, "compare": 0, "warn": 14}, "spark": [0, 0, 0, 0, 0, 0, 0, 0, 2, 0, 0, 0], "listed": false, "loved": [], "caveat": "", "short_quote": "LastPass works fine on Android, iOS, Mac, and Windows", "icon": false, "domain": "wikipedia.org", "github_repo": null, "official_url": "https://wikipedia.org", "pricing": "", "aliases": ["LastPass"], "verdict": null, "praise": [{"label": "", "summary": "", "quotes": [{"id": 784164368, "item_id": 49010273, "url": "https://news.ycombinator.com/item?id=49010273", "by": "Ajedi32", "date": "2026-07-22", "stance": "recommend", "quote": "LastPass works fine on Android, iOS, Mac, and Windows", "excerpt": "> That's just wrong. I use android, my partner uses ios. If he creates the passkey in safari, it's not going to get synced over to my phone It would, if the people implementing it weren't all so obsessed with pushing their own platform-specific solutions over enabling open standards. LastPass works fine on Android, iOS, Mac, and Windows, but each one of those platforms defaults to saving passkeys in their own platfor", "context": "", "use_case": "cross-platform passkey storage", "switched_from": "", "story": "Passkeys were invented by engineers with zero understanding of consumer brain"}]}], "caveats": [{"label": "", "summary": "", "quotes": [{"id": 801536593, "item_id": 50096037, "url": "https://news.ycombinator.com/item?id=50096037", "by": "nonfamous", "date": "2026-10-14", "stance": "warn", "quote": "I switched from LastPass to Passwords a couple of years ago.", "excerpt": "In my experience iCloud Passwords is a superior cross-platform password manager than LastPass today, so I\u2019d recommend going in the other direction. (Source: I switched from LastPass to Passwords a couple of years ago.)", "context": "", "use_case": "password manager", "switched_from": "", "story": "Passkeys are not a trap"}, {"id": 793093617, "item_id": 49568351, "url": "https://news.ycombinator.com/item?id=49568351", "by": "bicepjai", "date": "2026-09-04", "stance": "warn", "quote": "Moved from LastPass because of sketchy behaviour", "excerpt": "Moved from LastPass because of sketchy behaviour, now we have to do this again. What happens to ethics in our society :) I love 1Password, how we can share password with link, they have it on all os and browsers; works well with Fastmail and other apps. Does Proton Pass have all these and if they have how is the appX ? Thanks", "context": "", "use_case": "", "switched_from": "", "story": "1Password Replied to My Disappointment"}, {"id": 784222880, "item_id": 49013930, "url": "https://news.ycombinator.com/item?id=49013930", "by": "tecoholic", "date": "2026-07-22", "stance": "warn", "quote": "Last pass has had so many breaches, at this point it\u2019s just not worth it.", "excerpt": "> and I use LastPass Oh! No. Please switch to something else. Last pass has had so many breaches, at this point it\u2019s just not worth it.", "context": "", "use_case": "password management", "switched_from": "", "story": "Passkeys were invented by engineers with zero understanding of consumer brain"}, {"id": 778830592, "item_id": 48676912, "url": "https://news.ycombinator.com/item?id=48676912", "by": "sleepybrett", "date": "2026-06-25", "stance": "warn", "quote": "I stopped paying them when they killed local valuts, and secondarily when then moved away from native apps.", "excerpt": "I stopped paying them when they killed local valuts, and secondarily when then moved away from native apps. I drifted along on the old 7.x client for awhile with local values. I've more or less switched to apple keychain/passwords at this point. I need a solution for linux, and have been thinking about some kind of simple 1-way sync issue that dumps stuff from keychain into some other tool for use on linux.", "context": "", "use_case": "password management", "switched_from": "", "story": "LastPass notifies users of yet another data breach"}]}], "who": [{"by": "gortok", "context": "In tech for 26 years, uses many devices and browsers", "url": "https://news.ycombinator.com/item?id=49007871", "date": "2026-07-22"}, {"by": "dwoosley", "context": "security consultant for hundreds of companies", "url": "https://news.ycombinator.com/item?id=48672708", "date": "2026-06-25"}], "tags": [], "use_cases": ["password management", "password manager", "storing passkeys and passwords", "cross-platform passkey storage", "exporting passkeys", "password management across devices"], "compared": [{"slug": "1password", "name": "1Password", "co": 7, "switched_from": 0, "switched_to": 3}, {"slug": "bitwarden", "name": "Bitwarden", "co": 6, "switched_from": 0, "switched_to": 3}, {"slug": "keepassxc", "name": "KeePassXC", "co": 3, "switched_from": 0, "switched_to": 1}, {"slug": "apple-passwords", "name": "Apple Passwords", "co": 1, "switched_from": 0, "switched_to": 1}], "makers": [], "threads": [{"url": "https://news.ycombinator.com/item?id=49007374", "title": "Passkeys were invented by engineers with zero understanding of consumer brain", "mentions": 5}, {"url": "https://news.ycombinator.com/item?id=48671468", "title": "LastPass notifies users of yet another data breach", "mentions": 4}, {"url": "https://news.ycombinator.com/item?id=48163389", "title": "The Quiet Renovation at Bitwarden", "mentions": 2}, {"url": "https://news.ycombinator.com/item?id=47042431", "title": "Ask HN: Which password manager do you use / would you recommend?", "mentions": 2}, {"url": "https://news.ycombinator.com/item?id=50088935", "title": "Passkeys are not a trap", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=49559182", "title": "1Password Replied to My Disappointment", "mentions": 1}], "sentiment_by_month": {"2025-11": {}, "2025-12": {"warn": 2}, "2026-01": {"warn": 1}, "2026-02": {"warn": 2}, "2026-03": {}, "2026-04": {}, "2026-05": {"warn": 2}, "2026-06": {"warn": 4, "neutral": 1}, "2026-07": {"recommend": 2, "neutral": 2, "warn": 1}, "2026-08": {}, "2026-09": {"warn": 1}, "2026-10": {"warn": 1}}, "quotes": [{"id": 801536593, "item_id": 50096037, "url": "https://news.ycombinator.com/item?id=50096037", "by": "nonfamous", "date": "2026-10-14", "stance": "warn", "quote": "I switched from LastPass to Passwords a couple of years ago.", "excerpt": "In my experience iCloud Passwords is a superior cross-platform password manager than LastPass today, so I\u2019d recommend going in the other direction. (Source: I switched from LastPass to Passwords a couple of years ago.)", "context": "", "use_case": "password manager", "switched_from": "", "story": "Passkeys are not a trap"}, {"id": 793093617, "item_id": 49568351, "url": "https://news.ycombinator.com/item?id=49568351", "by": "bicepjai", "date": "2026-09-04", "stance": "warn", "quote": "Moved from LastPass because of sketchy behaviour", "excerpt": "Moved from LastPass because of sketchy behaviour, now we have to do this again. What happens to ethics in our society :) I love 1Password, how we can share password with link, they have it on all os and browsers; works well with Fastmail and other apps. Does Proton Pass have all these and if they have how is the appX ? Thanks", "context": "", "use_case": "", "switched_from": "", "story": "1Password Replied to My Disappointment"}, {"id": 784222880, "item_id": 49013930, "url": "https://news.ycombinator.com/item?id=49013930", "by": "tecoholic", "date": "2026-07-22", "stance": "warn", "quote": "Last pass has had so many breaches, at this point it\u2019s just not worth it.", "excerpt": "> and I use LastPass Oh! No. Please switch to something else. Last pass has had so many breaches, at this point it\u2019s just not worth it.", "context": "", "use_case": "password management", "switched_from": "", "story": "Passkeys were invented by engineers with zero understanding of consumer brain"}, {"id": 784186416, "item_id": 49011651, "url": "https://news.ycombinator.com/item?id=49011651", "by": "Saris", "date": "2026-07-22", "stance": "neutral", "quote": "Your passkeys would be in LastPass as well like your passwords", "excerpt": ">If I accidentally set up a passkey on my phone (let\u2019s say I use Safari one day instead of my go-to, Brave), can I still log in without that passkey on other devices? Yes, but you can also add the passkey to your password manager so it's available on all your devices. >Can I add another passkey on another device? Yes. >How many passkeys can I set up for a particular site/app? I haven't really seen a specified limit o", "context": "", "use_case": "storing passkeys and passwords", "switched_from": "", "story": "Passkeys were invented by engineers with zero understanding of consumer brain"}, {"id": 784164368, "item_id": 49010273, "url": "https://news.ycombinator.com/item?id=49010273", "by": "Ajedi32", "date": "2026-07-22", "stance": "recommend", "quote": "LastPass works fine on Android, iOS, Mac, and Windows", "excerpt": "> That's just wrong. I use android, my partner uses ios. If he creates the passkey in safari, it's not going to get synced over to my phone It would, if the people implementing it weren't all so obsessed with pushing their own platform-specific solutions over enabling open standards. LastPass works fine on Android, iOS, Mac, and Windows, but each one of those platforms defaults to saving passkeys in their own platfor", "context": "", "use_case": "cross-platform passkey storage", "switched_from": "", "story": "Passkeys were invented by engineers with zero understanding of consumer brain"}, {"id": 784160816, "item_id": 49010051, "url": "https://news.ycombinator.com/item?id=49010051", "by": "malfist", "date": "2026-07-22", "stance": "neutral", "quote": "Lastpass, 1password and bitwarden all do that.", "excerpt": "This is not much simpler than they think it is. > But you're not going to lose it, because you use a password manager, and the passkey will be stored there and synchronized to all of your other devices That's just wrong. I use android, my partner uses ios. If he creates the passkey in safari, it's not going to get synced over to my phone. And that's just the first of the family sharing passwords issues. Same person i", "context": "", "use_case": "exporting passkeys", "switched_from": "", "story": "Passkeys were invented by engineers with zero understanding of consumer brain"}, {"id": 784125936, "item_id": 49007871, "url": "https://news.ycombinator.com/item?id=49007871", "by": "gortok", "date": "2026-07-22", "stance": "recommend", "quote": "", "excerpt": "I do not know how to use a Passkey in a way that won\u2019t impede how I log in to systems. I\u2019ve been in tech for 26 years, and I understand the Public/private key behind what a Passkey is. Here\u2019s what I don\u2019t understand: I access a website through at least four different devices (my iPad, iPhone, Windows Desktop computer, and MacBook Pro) and three different browsers on each device (Brave, Firefox, Safari) , and I use La", "context": "In tech for 26 years, uses many devices and browsers", "use_case": "password management across devices", "switched_from": "", "story": "Passkeys were invented by engineers with zero understanding of consumer brain"}, {"id": 778830592, "item_id": 48676912, "url": "https://news.ycombinator.com/item?id=48676912", "by": "sleepybrett", "date": "2026-06-25", "stance": "warn", "quote": "I stopped paying them when they killed local valuts, and secondarily when then moved away from native apps.", "excerpt": "I stopped paying them when they killed local valuts, and secondarily when then moved away from native apps. I drifted along on the old 7.x client for awhile with local values. I've more or less switched to apple keychain/passwords at this point. I need a solution for linux, and have been thinking about some kind of simple 1-way sync issue that dumps stuff from keychain into some other tool for use on linux.", "context": "", "use_case": "password management", "switched_from": "", "story": "LastPass notifies users of yet another data breach"}, {"id": 778815283, "item_id": 48675955, "url": "https://news.ycombinator.com/item?id=48675955", "by": "bradley13", "date": "2026-06-25", "stance": "warn", "quote": "WTF is LastPasd doing, handing customer details to a market research company?", "excerpt": "WTF is LastPasd doing, handing customer details to a market research company? Any such data should have been fully anonymized: no names, no specific addresses, etc.. For anyone looking for a recommendation: I use KeepassXC with Keepass2Android. Open source, with a local database that you can choose to sync (or not). I sync using Own cloud.", "context": "", "use_case": "", "switched_from": "", "story": "LastPass notifies users of yet another data breach"}, {"id": 778787264, "item_id": 48674204, "url": "https://news.ycombinator.com/item?id=48674204", "by": "angelmm", "date": "2026-06-25", "stance": "warn", "quote": "Quite happy I moved away from LastPass long time ago.", "excerpt": "Quite happy I moved away from LastPass long time ago. There are many options out there you can use.", "context": "", "use_case": "password management", "switched_from": "", "story": "LastPass notifies users of yet another data breach"}, {"id": 778763328, "item_id": 48672708, "url": "https://news.ycombinator.com/item?id=48672708", "by": "dwoosley", "date": "2026-06-25", "stance": "neutral", "quote": "I\u2019m not saying I recommend LastPass for that reason, but I wouldn\u2019t write them off for that reason.", "excerpt": "I\u2019ve done a lot of security consulting work for hundreds of companies and one thing I noticed is that the companies that actually took security seriously were the ones that had been breached in the past. Until the execs and board see the dollar impact themself and not just read about it, the security program never gets the funds it needs. I\u2019m not saying I recommend LastPass for that reason, but I wouldn\u2019t write them ", "context": "security consultant for hundreds of companies", "use_case": "password management", "switched_from": "", "story": "LastPass notifies users of yet another data breach"}, {"id": 778415712, "item_id": 48650982, "url": "https://news.ycombinator.com/item?id=48650982", "by": "hydrogen7800", "date": "2026-06-23", "stance": "warn", "quote": "I've never been able to access my old LastPass vault to delete its contents since its first breach", "excerpt": "I've never been able to access my old LastPass vault to delete its contents since its first breach when I switched to bitwarden. I recall contacting them to make sure my data was erased, but I never got a good confirmation of that.", "context": "", "use_case": "password manager", "switched_from": "", "story": "LastPass confirms data breach in Klue supply chain attack"}, {"id": 770978883, "item_id": 48186180, "url": "https://news.ycombinator.com/item?id=48186180", "by": "kjuulh", "date": "2026-05-18", "stance": "warn", "quote": "I've been screwed over by dashlane, lastpass, potentially bitwarden now", "excerpt": "At this point it is too high of a risk to store my password elsewhere. I've been screwed over by dashlane, lastpass, potentially bitwarden now, I am with 1password now, but I've had my passwords in all these places, and I've had to change them each time, probably missing a few. I like 1password, it is by far the highest quality product I've used in this category. I moved from BitWarden back then because their browser", "context": "", "use_case": "password management", "switched_from": "", "story": "The Quiet Renovation at Bitwarden"}, {"id": 770902001, "item_id": 48181375, "url": "https://news.ycombinator.com/item?id=48181375", "by": "Havoc", "date": "2026-05-18", "stance": "warn", "quote": "After the LastPass fiasco", "excerpt": "After the LastPass fiasco I switched to selfhosting a password manager (bw). Rapidly starting to think even a vibecoded solution may be a better plan relying on commercial options. High risk of don\u2019t roll your own crypto mistakes but realistically that\u2019s not the threat model here anymore for the random individual. It\u2019s online breaches or perhaps a wrench attack not highly skilled crypto adversary. Plus there are prob", "context": "", "use_case": "", "switched_from": "", "story": "The Quiet Renovation at Bitwarden"}, {"id": 752682240, "item_id": 47042640, "url": "https://news.ycombinator.com/item?id=47042640", "by": "unodonut", "date": "2026-02-16", "stance": "warn", "quote": "a one-click exfiltration vulnerability has existed for more than half a year and hasn't been fixed", "excerpt": "According to the wiki, a one-click exfiltration vulnerability has existed for more than half a year and hasn't been fixed: > In their default configurations, these extensions were shown to be exposed to a DOM-based extension clickjacking technique, allowing attackers to exfiltrate user data with just a single click. LastPass version 4.146.8 (September 12, 2025), which was intended to address the issue, remains vulner", "context": "", "use_case": "password manager", "switched_from": "", "story": "Ask HN: Which password manager do you use / would you recommend?"}, {"id": 752681648, "item_id": 47042603, "url": "https://news.ycombinator.com/item?id=47042603", "by": "blahaj", "date": "2026-02-16", "stance": "warn", "quote": "Do not use Lastpass.", "excerpt": "Just an anti recommendation: Do not use Lastpass. Reading the security breach section of their Wikipedia article should be enough reason. For anyone reading this who uses LastPass: Switch away!", "context": "", "use_case": "password management", "switched_from": "", "story": "Ask HN: Which password manager do you use / would you recommend?"}, {"id": 747420928, "item_id": 46713808, "url": "https://news.ycombinator.com/item?id=46713808", "by": "nja", "date": "2026-01-21", "stance": "warn", "quote": "LastPass continually makes their apps worse and more painful to use", "excerpt": "Has anyone migrated off of LastPass recently? How was it? I've been a user for decades, and though my frustration with them has been mounting for a long time, I've felt locked in. Migrating seems like a pain, especially for elderly relatives on my plan who will have difficulty picking up a new manager (it was hard enough for them to learn to use a manager in the first place), but every time I use 1Pass for work it bl", "context": "user for decades, manages elderly relatives on plan", "use_case": "password management", "switched_from": "", "story": "Don't click on the LastPass 'create backup' link \u2013 it's a scam"}, {"id": 742902562, "item_id": 46431410, "url": "https://news.ycombinator.com/item?id=46431410", "by": "lightandlight", "date": "2025-12-30", "stance": "warn", "quote": "This year I moved off LastPass", "excerpt": "This year I moved off LastPass, and started using [Syncthing](https://syncthing.net/) to sync my [KeepassXC](https://keepassxc.org/). It works pretty well, but doesn't have any automatic conflict resolution (I've been working on [something](https://github.com/LightAndLight/syncthing-merge) for this). Next up I'm moving my TODOs off Todoist to something local-first, and plugging that into my Syncthing setup.", "context": "", "use_case": "password management", "switched_from": "", "story": "Bye Bye Big Tech: How I Migrated to an Almost All-EU Stack (and Saved 500\u20ac/Year)"}, {"id": 740467072, "item_id": 46279192, "url": "https://news.ycombinator.com/item?id=46279192", "by": "cebert", "date": "2025-12-15", "stance": "warn", "quote": "LastPass never apologized for their handling of the breach and weren\u2019t very transparent about it.", "excerpt": "Was this an advertisement since it\u2019s labeled \u201cbranded content\u201d? I don\u2019t know many technologists who trust LastPass. They\u2019ve all switched to 1Password, Bitwarden, or similar services. LastPass never apologized for their handling of the breach and weren\u2019t very transparent about it. This article is a joke.", "context": "", "use_case": "password management", "switched_from": "", "story": "LastPass Rebuilt Trust in the Digital Age"}]}