LastPass

LastPass
Name	LastPass
Type	Private
Industry	Software
Founded	2008
Founders	Joe Siegrist, Marcin Kleczynski, Brett McDanel
Headquarters	United States
Products	Password manager, digital vault, single sign-on

LastPass

LastPass is a proprietary password management service and digital vault used for storing encrypted passwords, notes, and form data. It competes with contemporaries in the identity and access management market and integrates with numerous browser and mobile ecosystems. The service has been cited across reporting by technology outlets and scrutinized by security researchers, regulators, and industry commentators.

History

Launched in 2008, LastPass emerged amid growth in password management alongside companies such as 1Password, Dashlane, KeePass, RoboForm, and NordPass. Early coverage placed the company among start-ups discussed at conferences like TechCrunch Disrupt and events hosted by RSA Conference, while venture activity connected it to investors familiar with Andreessen Horowitz-style portfolios and Accel Partners-type funds. Over time, LastPass adapted to shifts driven by platform operators including Google, Microsoft, Apple, and browser vendors such as Mozilla Foundation and Opera Software. Corporate milestones intersected with acquisitions and leadership changes that mirrored consolidation trends seen in firms like Okta and Ping Identity within the identity sector.

Features and functionality

The product offers a vault for encrypted storage of credentials, autofill for web forms, password generation, and secure notes. Common feature comparisons reference services from Google Password Manager, Microsoft Authenticator, Apple iCloud Keychain, and enterprise tools from Okta and Duo Security. Functionality spans browser extensions on engines developed by Google Chrome, Mozilla Firefox, Microsoft Edge, and Apple Safari as well as mobile apps for Android and iOS. Enterprise capabilities extend to single sign-on (SSO) and provisioning, paralleling offerings from OneLogin and Centrify, and integrate with directory services like Active Directory and identity standards promoted by FIDO Alliance and OpenID Foundation.

Security incidents and vulnerabilities

Security researchers and incident responders have publicly analyzed breaches, disclosure timelines, and vulnerability reports. High-profile incidents prompted comparisons to other incidents involving Equifax and Yahoo! in terms of impact discussion, while technical analyses often referenced methodologies used by teams at Mandiant and Kaspersky Lab. Vulnerability research published in venues associated with Black Hat and DEF CON has examined cryptographic design, implementation bugs, and extension hardening similar to scrutiny faced by Zoom and Adobe. Regulatory interest included inquiries by authorities in jurisdictions where firms like Uber and Facebook have been investigated. Responses have invoked best practices recommended by standards bodies such as NIST and ISO.

Business model and ownership

The company historically used a freemium model offering consumer tiers and paid business subscriptions, akin to pricing structures used by Dropbox and Slack Technologies. Enterprise revenue streams included team and corporate plans, competitive with LastPass competitors omitted: 1Password etc. and enterprise identity firms like Ping Identity. Ownership shifts and investment rounds paralleled consolidation seen in the tech sector, with strategic maneuvers resembling acquisition activity involving companies such as LogMeIn and private equity firms similar to Thoma Bravo. Corporate governance and executive appointments have been reported in the context of board decisions comparable to those at Salesforce and Microsoft.

Reception and criticism

Technology press, cybersecurity analysts, and consumer advocates have evaluated the service for usability, feature set, and incident response. Reviews often compare user experience against products by Google, Apple, and Mozilla Foundation, and enterprise reviewers weigh management capabilities against Okta and OneLogin. Criticism has focused on response timelines and architectural decisions, echoing debates that followed incidents at Equifax and public discussions involving Cambridge Analytica about data practices. Advocacy groups and commentators referencing standards from NIST and privacy frameworks promoted by Electronic Frontier Foundation have urged transparency and robust breach disclosure protocols.

Integrations and platform support

Support spans major web browsers and mobile platforms, interoperating with systems developed by Google, Apple, Microsoft, and browser projects such as Mozilla Foundation and Opera Software. Enterprise integrations include directory and single sign-on connectors compatible with Active Directory, LDAP, and SAML providers used in deployments alongside products from Okta, Ping Identity, and Azure AD. Third-party integrations extend to passwordless initiatives promoted by the FIDO Alliance and federated identity standards endorsed by the OpenID Foundation, while plugin and extension ecosystems mirror those for developers using GitHub and cloud platforms from Amazon Web Services and Google Cloud Platform.

Category:Password managers