In short
LastPass vs Bitwarden for business: LastPass sells Teams (up to 50 users), Business and Business Max, with directory integrations, federated login and SSO to other apps on Business. Bitwarden sells Teams and Enterprise with no user limit, with SCIM and Directory Connector on Teams and SAML 2.0 or OIDC SSO and a self-host option on Enterprise.
Want help weighing them up?
Tell us about your users, systems and priorities and we can compare them against your requirements.
LastPass vs Bitwarden at a glance
| LastPass | Bitwarden | |
|---|---|---|
| Made by | LastPass (marks of LastPass US LP) | Bitwarden, Inc., headquartered in Santa Barbara, California; source code published on GitHub |
| Vault encryption | 256-bit AES with zero-knowledge security | AES-CBC with 256-bit keys and HMAC-SHA256, encrypted on your device (zero knowledge) |
| Unlocking the vault | Master password (PBKDF2 with SHA-256, 600,000 iterations); federated login with your identity provider on Business and Business Max | Master password (PBKDF2 SHA-256 at 600,000 iterations by default, or Argon2id); login with SSO on Enterprise, where trusted devices can unlock without a master password |
| Business plans | Teams (up to 50 users), Business and Business Max (no user limit) | Teams and Enterprise, both with no user limit; a tailored plan on request for large organisations |
| Single sign-on and provisioning | Business and Business Max: directory integrations with Active Directory, Entra ID, Google Workspace, Okta and OneLogin; SSO for 3 apps on Business, unlimited on Business Max | Teams and Enterprise: SCIM provisioning and Directory Connector sync (Entra ID, Google Workspace, Okta, OneLogin, Active Directory and LDAP); Enterprise: SSO over SAML 2.0 or OIDC |
| SIEM | Splunk and Microsoft Sentinel on Business and Business Max | Event logs and the Public API on both plans; Bitwarden Event Logs apps for Splunk and Microsoft Sentinel |
| Breach and password monitoring | Dark web monitoring in every plan | Vault health reports (weak, reused and exposed passwords) for every user; Access Intelligence at-risk reporting on Enterprise |
| Business trials | 14 days, no credit card and no seat limit; new customers also get a Business Max trial | Free 14-day trials of Teams and Enterprise |
| Certifications named | SOC 2 Type II, ISO 27001, SOC 3, BSI C5 and TRUSTe | ISO 27001; SOC 2 Type II and SOC 3; HIPAA compliance; annual third-party audits |
Sources: LastPass Business (opens in a new tab), Is LastPass secure? (opens in a new tab), Bitwarden plans (opens in a new tab), Bitwarden SSO (opens in a new tab) and Bitwarden encryption (opens in a new tab). The sections below explain what the differences mean in use.
Still not sure which way to go? Ask us
Tell us what matters most to you and we can go through the trade-offs with you.
Security model, and LastPass since 2022
Both encrypt your vault on your own device, and both derive the key from your master password with PBKDF2 SHA-256 at 600,000 iterations.
LastPass uses "256-bit AES and PBKDF2 with SHA-256 hashing and salting", with iterations "increased to 600,000" (LastPass (opens in a new tab)). Its own incident update (opens in a new tab) of 1 March 2023 describes two incidents disclosed in 2022, and its Is LastPass secure? (opens in a new tab) page sets out what has changed since, including enhanced vault encryption and certifications including SOC 2 Type II, ISO 27001, SOC 3, BSI C5 and TRUSTe.
Bitwarden encrypts with AES-CBC 256-bit keys and HMAC-SHA256 (Bitwarden (opens in a new tab)). Its default is 600,000 PBKDF2 iterations, and in its 2026.2.1 release Bitwarden "increased the minimum number of PBKDF2 KDF iterations to the default level, 600,000"; Argon2id is also available (Bitwarden KDF (opens in a new tab)). Its source code is on GitHub, it publishes annual third-party assessments (Bitwarden audits (opens in a new tab)), and it names ISO 27001, SOC 2 Type II and SOC 3.
See are password managers safe for business? for what these designs protect against.
Business plans, directory integration and single sign-on
| LastPass | Bitwarden | |
|---|---|---|
| Plans and seats | Teams (up to 50 users), Business and Business Max (no user limit) | Teams and Enterprise, both with no user limit; a tailored plan on request for large organisations |
| Sign-in and provisioning | Business and Business Max: directory integrations with Active Directory, Entra ID, Google Workspace, Okta and OneLogin; SSO for 3 apps on Business, unlimited on Business Max | Teams and Enterprise: SCIM provisioning and Directory Connector sync (Entra ID, Google Workspace, Okta, OneLogin, Active Directory and LDAP); Enterprise: SSO over SAML 2.0 or OIDC |
| Sharing | Shared folders on every business plan, with customisable permissions | Unlimited sharing through collections and user groups on both plans; Bitwarden Send for encrypted text and files to anyone |
| Policies and admin | Essential security policies on Teams; 100+ advanced policies and group user management on Business and Business Max | Admin Console, groups and organisation-wide Duo two-step login on both plans; enterprise policies, custom roles and account recovery on Enterprise |
| Reporting and SIEM | Splunk and Microsoft Sentinel on Business and Business Max | Event logs and the Public API on both plans; Bitwarden Event Logs apps for Splunk and Microsoft Sentinel |
| Breach monitoring | Dark web monitoring in every plan | Vault health reports (weak, reused and exposed passwords) for every user; Access Intelligence at-risk reporting on Enterprise |
| Family benefit for staff | Free Families account with 5 licences for each Business and Business Max user | Free Families plan for every user on Enterprise, shared with up to five family members or friends |
| Trial | 14 days, no credit card and no seat limit; new customers also get a Business Max trial | Free 14-day trials of Teams and Enterprise |
Plan sizing. LastPass Teams covers up to 50 users, and LastPass points larger teams to Business: "Scale beyond Teams with support for 50+ users" (LastPass Teams (opens in a new tab)). Bitwarden Teams and Enterprise "can have an unlimited number of users (priced per user)" (Bitwarden plans (opens in a new tab)).
Directory and sign-in. LastPass Business and Business Max offer directory integrations "like Microsoft Active Directory, Microsoft Entra ID, Google Workspace, OneLogin, and Okta" and federated login (LastPass Business (opens in a new tab)). Bitwarden includes SCIM and Directory Connector on Teams and Enterprise (Bitwarden Directory Connector (opens in a new tab)), and login with SSO over SAML 2.0 or OIDC on Enterprise (Bitwarden SSO (opens in a new tab)).
Single sign-on to other apps. LastPass Business includes single sign-on for three of your own apps, and Business Max (opens in a new tab) unlimited apps. Bitwarden's SSO signs staff in to Bitwarden itself through your identity provider.
Policies. LastPass Business adds "100+ advanced security policies" and group user management. Bitwarden's enterprise policies, from master password requirements to required SSO and blocking vault export, are on Enterprise (Bitwarden policies (opens in a new tab)).
Weighing up the options?
We can talk through the differences that matter for your organisation.
Reporting and hosting
SIEM and audit. LastPass lists Splunk and Microsoft Sentinel on Business and Business Max. Bitwarden's event logs, on Teams and Enterprise, record "over 60 event types" and are "retained indefinitely" (Bitwarden event logs (opens in a new tab)), with Event Logs apps for Splunk (opens in a new tab) and Microsoft Sentinel (opens in a new tab).
Breach alerts. LastPass includes dark web monitoring in every plan. Bitwarden gives every business user vault health reports for weak, reused and exposed passwords, and adds Access Intelligence on Enterprise (Bitwarden Access Intelligence (opens in a new tab)).
Hosting. Bitwarden's cloud stores data in United States or European Union regions (Bitwarden regions (opens in a new tab)), and Bitwarden Enterprise can be self-hosted on your own servers with Docker (Bitwarden self-hosting (opens in a new tab)).
Which suits which organisation
Match the facts to your situation:
- You want single sign-on to other cloud apps from the password manager: LastPass Business includes three SSO apps, and Business Max unlimited
- You want SCIM or Active Directory sync on a team plan: Bitwarden includes SCIM and Directory Connector on Teams; LastPass lists directory integrations on Business
- You want dark web monitoring included in every plan: LastPass includes it, Teams too
- You need to self-host: Bitwarden Enterprise has a self-host option
- You want the source code open to review: Bitwarden publishes its code on GitHub
- You want personal accounts for staff, kept apart from the work vault: LastPass Business and Business Max include a Families account; Bitwarden Enterprise can sponsor a Families plan for every user
Both offer business trials: a 14-day LastPass business trial with no seat limit or credit card, and 14-day trials of Bitwarden Teams and Enterprise.
Moving from LastPass to Bitwarden, or back
Bitwarden's browser extension and desktop app can import directly from a LastPass account, or you can export a CSV file from the LastPass web vault or browser extension and import it (Bitwarden (opens in a new tab)). Bitwarden notes that a LastPass export printed to the screen can turn special characters such as & into their HTML-encoded values, so check the file before importing. Moving the other way, LastPass imports from a generic CSV file, and Bitwarden exports vaults as .csv or .json (Bitwarden export (opens in a new tab)).
For a business, recreate shared folders or collections once, by team, delete any export file afterwards, and keep the old account until everyone has checked their items. Our switching guide covers each step.
Buying LastPass for your organisation
We can quote LastPass's business plans for your organisation, with the plan and terms confirmed at quote, and help you weigh LastPass against Bitwarden on the points that decide it: your identity provider, your team size, how teams share logins and where your data should be held. We can:
- Help you choose the LastPass plan that fits your identity platform (Microsoft Entra ID, Google Workspace or Okta), your team size and your reporting needs
- Set up single sign-on and user provisioning on the LastPass plans that include them, so accounts are created and removed from your directory
- Set policies and build shared folders or vaults for each team before staff are invited
- Import passwords from browsers, spreadsheets or a CSV export from another password manager
- Keep licensing in one place: licences can be billed monthly, with terms confirmed at quote
See our LastPass business page for each plan in detail, or the business password manager comparison. Contact us for free advice or a quote.
Frequently asked questions
Is LastPass or Bitwarden more secure?
Both encrypt your vault on your own device, and both derive the key with PBKDF2 SHA-256 at 600,000 iterations. LastPass publishes what it changed after the 2022 incidents and names SOC 2 Type II, ISO 27001, SOC 3, BSI C5 and TRUSTe. Bitwarden also offers Argon2id, publishes its source code and annual audits, and names ISO 27001, SOC 2 Type II and SOC 3. See are password managers safe for business?.
Which suits a team of 30?
LastPass Teams covers up to 50 users, so a team of 30 fits it. Bitwarden Teams has no user limit and includes SCIM and Directory Connector. If you want single sign-on to Bitwarden itself, that is on Bitwarden Enterprise.
Can Bitwarden import from LastPass?
Yes. Bitwarden's browser extension and desktop app can import directly from a LastPass account, or from a CSV export of your LastPass vault (Bitwarden (opens in a new tab)).
Do both include dark web or breach monitoring?
LastPass includes dark web monitoring in every plan. Bitwarden gives every business user vault health reports that show weak, reused and exposed passwords, and adds Access Intelligence on Enterprise.
Still deciding?
Ask us and a member of our team will get back to you.
More password manager guides
LastPassLastPass's business plans, from Teams to Business Max, and how we can quote and set up LastPass.1Password vs Bitwarden1Password and Bitwarden business plans compared on Secret Key, SSO, provisioning, hosting and admin.Keeper vs BitwardenKeeper and Bitwarden business plans compared on security model, provisioning, SSO, hosting and admin.1Password vs LastPass1Password and LastPass business plans compared on security model, seats, sharing, SSO and admin.Compare password managersKeeper, 1Password, NordPass and LastPass business plans side by side on published facts.Switching password managerHow to move passwords between password managers and off browsers or spreadsheets, safely.