In short
1Password vs LastPass for business: 1Password protects each vault with the account password plus a 128-bit Secret Key, while LastPass derives its key from the master password with PBKDF2 at 600,000 iterations. LastPass Teams covers up to 50 users; 1Password's Teams Starter Pack covers 10 to 20. Both main business plans keep staff's personal logins out of the work vault.
Want an impartial recommendation?
Tell us about your users, systems and priorities and we will tell you which option fits, and why.
1Password vs LastPass at a glance
| 1Password | LastPass | |
|---|---|---|
| Made by | AgileBits Inc. | LastPass (marks of LastPass US LP) |
| Vault encryption | AES 256-bit end-to-end encryption, with Secure Remote Password sign-in | 256-bit AES with zero-knowledge security |
| Unlocking the vault | Account password plus a 128-bit Secret Key (Two-Key Derivation); Unlock with SSO on 1Password Business | Master password (PBKDF2 with SHA-256, 600,000 iterations); federated login with your identity provider on Business and Business Max |
| Business plans | Teams Starter Pack (10 users minimum, up to 20), 1Password Business (1 user minimum), Enterprise Password Manager (quote only) | Teams (up to 50 users), Business and Business Max (no user limit) |
| Single sign-on and provisioning | 1Password Business: Unlock with SSO over OpenID Connect; SCIM provisioning with Entra ID, Google Workspace, Okta, OneLogin and JumpCloud | Business and Business Max: directory integrations with Active Directory, Entra ID, Google Workspace, Okta and OneLogin; SSO for 3 apps on Business, unlimited on Business Max |
| SIEM | Event streaming to SIEM tools including Splunk, Microsoft Sentinel, Elastic and Sumo Logic | Splunk and Microsoft Sentinel on Business and Business Max |
| Breach and password monitoring | Watchtower alerts for breaches and weak, reused or expiring passwords | Dark web monitoring in every plan |
| Business trials | 14-day free trial, no credit card | 14 days, no credit card and no seat limit; new customers also get a Business Max trial |
| Certifications named | SOC 2 Type 2; ISO 27001, 27017, 27018 and 27701 | SOC 2 Type II, ISO 27001, SOC 3, BSI C5 and TRUSTe |
Sources: 1Password security (opens in a new tab), 1Password Unlock with SSO (opens in a new tab), LastPass Business (opens in a new tab) and Is LastPass secure? (opens in a new tab). The sections below explain what the differences mean in use.
Still not sure which way to go? Ask us
Tell us what matters most to you and we will recommend one, with the trade-offs explained.
Security model, and LastPass since 2022
Both are zero-knowledge designs: your vault is encrypted on your own device and the provider does not hold your master or account password.
1Password adds a Secret Key to every account. It is "34 letters and numbers, separated by dashes", has "128 bits of entropy", and is stored on your signed-in devices and in your Emergency Kit; 1Password has "no record of your Secret Key" (1Password (opens in a new tab)). Sign-in uses Secure Remote Password, which "authenticates your account without sending your credentials over the Internet" (1Password security (opens in a new tab)).
LastPass says it uses "256-bit AES and PBKDF2 with SHA-256 hashing and salting", and that "Your master password is never stored in plain text" (LastPass (opens in a new tab)).
The 2022 incidents. LastPass's own incident update (opens in a new tab) of 1 March 2023 describes two incidents disclosed in 2022, in which an attacker took backups holding "encrypted and unencrypted LastPass customer data". LastPass says "end user master passwords are never known to LastPass" and that vault data "can only be decrypted with a unique encryption key derived from each user's master password". Since then, LastPass says it has increased PBKDF2 iterations to 600,000, introduced enhanced vault encryption and a secure software factory, and holds SOC 2 Type II, ISO 27001, SOC 3, BSI C5 and TRUSTe (Is LastPass secure? (opens in a new tab)).
Our guide are password managers safe? explains what zero knowledge protects against and what to do if a provider reports an incident.
Business plans, single sign-on and admin
| 1Password | LastPass | |
|---|---|---|
| Plans and seats | Teams Starter Pack (10 users minimum, up to 20), 1Password Business (1 user minimum), Enterprise Password Manager (quote only) | Teams (up to 50 users), Business and Business Max (no user limit) |
| Sign-in and provisioning | 1Password Business: Unlock with SSO over OpenID Connect; SCIM provisioning with Entra ID, Google Workspace, Okta, OneLogin and JumpCloud | Business and Business Max: directory integrations with Active Directory, Entra ID, Google Workspace, Okta and OneLogin; SSO for 3 apps on Business, unlimited on Business Max |
| Sharing | Shared vaults with role-based permissions, guest accounts, and sharing items with anyone, even without 1Password | Shared folders on every business plan, with customisable permissions |
| Policies and admin | Custom policies, recovery of team members' accounts, Travel Mode controls and custom business reports | Essential security policies on Teams; 100+ advanced policies and group user management on Business and Business Max |
| Reporting and SIEM | Event streaming to SIEM tools including Splunk, Microsoft Sentinel, Elastic and Sumo Logic | Splunk and Microsoft Sentinel on Business and Business Max |
| Breach monitoring | Watchtower alerts for breaches and weak, reused or expiring passwords | Dark web monitoring in every plan |
| Family benefit for staff | Free 1Password Families membership for every 1Password Business user | Free Families account with 5 licences for each Business and Business Max user |
| Trial | 14-day free trial, no credit card | 14 days, no credit card and no seat limit; new customers also get a Business Max trial |
Identity provider sign-in. 1Password Business offers Unlock with SSO over OpenID Connect, with one identity provider per account, and separate SCIM provisioning (1Password (opens in a new tab)). LastPass Business and Business Max offer directory integrations "like Microsoft Active Directory, Microsoft Entra ID, Google Workspace, OneLogin, and Okta" and federated login, and LastPass says you can deploy it "on top of or in place of your existing single sign-on (SSO) and multifactor authentication (MFA) solution" (LastPass Business (opens in a new tab)).
Beyond the vault. LastPass Business includes single sign-on for three of your own apps, and Business Max (opens in a new tab) adds unlimited SSO apps, advanced MFA, and AI, SaaS and web monitoring. 1Password sells Enterprise Password Manager, Device Trust, SaaS Manager and Privileged Access as quote-only products within its Unified Access platform.
Weighing up the options?
We can compare them against your own requirements and recommend what fits.
Which suits you?
Match the facts to your situation:
- You want a second secret protecting every account: 1Password adds the Secret Key automatically
- You want single sign-on to other business apps from the password manager: LastPass Business includes three SSO apps, and Business Max unlimited
- You are a team of up to 50 without directory integration: LastPass Teams covers up to 50 users; 1Password's Teams Starter Pack covers 10 to 20
- You use Active Directory: LastPass lists Active Directory among its directory integrations; 1Password provisioning lists Entra ID, Google Workspace, JumpCloud, Okta and OneLogin
- You travel with sensitive vaults: 1Password's Travel Mode removes vaults from your devices except those marked safe for travel
Moving from LastPass to 1Password, or back
1Password can import directly from a LastPass account. Its guide says that for LastPass Families or Business, "your shared folders will be converted to vaults in 1Password", folders become tags, and "Passkeys won't be imported", so move passkeys separately (1Password (opens in a new tab)). Shared folders can only be imported by someone with administrator rights in that folder.
Moving the other way, LastPass imports from a generic CSV file. Whichever way you go, export on a trusted computer, delete the export file afterwards, and keep the old account until everyone has checked their items. Our switching guide covers each step.
Buying 1Password or LastPass for your organisation
We can quote 1Password and LastPass for your business, so we can help you choose between them rather than steer you to one; the plan and terms are confirmed at quote. We can:
- Help you choose between 1Password and LastPass against your identity platform (Microsoft Entra ID, Google Workspace or Okta), your team size and how your teams share logins
- Set up single sign-on and user provisioning on the plans that include them, so accounts are created and removed from your directory
- Set policies and build shared folders or vaults for each team before staff are invited
- Import passwords from browsers, spreadsheets or the other password manager
- Keep licensing in one place: licences can be billed monthly, with terms confirmed at quote
See our 1Password and LastPass business pages for each plan in detail. Contact us for free advice on which fits, or a quote.
Frequently asked questions
Is 1Password or LastPass more secure?
Both encrypt your vault on your own device so the provider cannot read it. 1Password combines your account password with a 128-bit Secret Key; LastPass derives the key from your master password with PBKDF2 at 600,000 iterations and describes the changes it made after the 2022 incidents. Our guide are password managers safe? explains both models.
Can we trial both?
Yes. 1Password offers 14-day free trials of its Teams Starter Pack and 1Password Business, with no credit card. LastPass offers a 14-day business trial with no seat limit or credit card, and a Business Max trial for new customers.
What has LastPass changed since 2022?
LastPass says it has rebuilt its core technology and raised PBKDF2 iterations to 600,000 since the incidents it disclosed in 2022 (LastPass (opens in a new tab)). Our guide are password managers safe? sums up LastPass's own account of the incidents.
Do both keep staff's personal logins separate from the work vault?
Yes, on the main business plans. 1Password Business users get a complimentary 1Password Families membership, and LastPass Business and Business Max users each get a LastPass Families account, so personal logins stay out of the work vault. LastPass Teams does not include it.
Can I move from LastPass to 1Password without a CSV file?
Yes. 1Password can import straight from your LastPass account, converting shared folders to vaults. Passkeys are not imported, so move them separately (1Password (opens in a new tab)).
Still deciding?
Ask us and a member of our team will get back to you.
More password manager guides
1Password1Password's business plans, Secret Key security model and wider Unified Access range, and how we can quote and set up 1Password.
LastPassLastPass's business plans, from Teams to Business Max, and how we can quote and set up LastPass.Compare password managersKeeper, 1Password, NordPass and LastPass business plans side by side on published facts.Switching password managerHow to move passwords between password managers and off browsers or spreadsheets, safely.NordPass vs LastPassNordPass and LastPass business plans compared on security model, seats, sharing, SSO and admin.Are password managers safe?How password managers protect your vault, what happens in a breach, and the NCSC's view.