In short
LastPass vs Keeper for business: LastPass includes dark web monitoring in every plan, while Keeper sells BreachWatch as an add-on. Their small-team plans are sized differently: LastPass Teams covers up to 50 users and Keeper Business Starter 5 to 10 seats. LastPass Business and Keeper Business both give each user a personal account outside the work vault.
Want an impartial recommendation?
Tell us about your users, systems and priorities and we will tell you which option fits, and why.
LastPass vs Keeper at a glance
| LastPass | Keeper | |
|---|---|---|
| Made by | LastPass (marks of LastPass US LP) | Keeper Security, Inc., headquartered in Chicago |
| Vault encryption | 256-bit AES with zero-knowledge security | AES-256 GCM, encrypted and decrypted on your device (zero knowledge) |
| Unlocking the vault | Master password (PBKDF2 with SHA-256, 600,000 iterations); federated login with your identity provider on Business and Business Max | Master password (key derived on the device with PBKDF2), biometrics, or SAML 2.0 single sign-on on Enterprise |
| Business plans | Teams (up to 50 users), Business and Business Max (no user limit) | Business Starter (5 to 10 seats), Business (minimum 5 seats), Enterprise; KeeperMSP for IT providers |
| Single sign-on and provisioning | Business and Business Max: directory integrations with Active Directory, Entra ID, Google Workspace, Okta and OneLogin; SSO for 3 apps on Business, unlimited on Business Max | Enterprise: SAML 2.0 SSO, SCIM provisioning, AD and LDAP sync; Entra ID, Okta, Google Workspace and Ping |
| SIEM | Splunk and Microsoft Sentinel on Business and Business Max | SIEM integration add-on (requires Advanced Reporting & Alerts) |
| Breach and password monitoring | Dark web monitoring in every plan | BreachWatch dark web monitoring, an add-on |
| Business trials | 14 days, no credit card and no seat limit; new customers also get a Business Max trial | Free trials of Business and Enterprise |
| Certifications named | SOC 2 Type II, ISO 27001, SOC 3, BSI C5 and TRUSTe | ISO 27001, 27017 and 27018; SOC 2 Type 2; FIPS 140-3 validated encryption |
Sources: LastPass Business (opens in a new tab), Is LastPass secure? (opens in a new tab), Keeper Enterprise (opens in a new tab) and Keeper security (opens in a new tab). The sections below explain what the differences mean in use.
Still not sure which way to go? Ask us
Tell us what matters most to you and we will recommend one, with the trade-offs explained.
Security model
Both encrypt your vault on your own device, and both derive the key from your master password with PBKDF2.
LastPass uses "256-bit AES and PBKDF2 with SHA-256 hashing and salting", with iterations "increased to 600,000", and says its zero-knowledge model keeps your data private. LastPass sets out what it has changed since the incidents it disclosed in 2022 on its Is LastPass secure? (opens in a new tab) page, and its own incident update (opens in a new tab) explains what happened.
Keeper encrypts vault data on the device "using AES-256 GCM" and describes PBKDF2 key derivation on the device with 1,000,000 iterations. It lists ISO 27001, 27017 and 27018, SOC 2 Type 2 and FIPS 140-3 validated encryption, and offers a Europe (EU) data region (Keeper security (opens in a new tab)).
See are password managers safe? for what these designs protect against.
Business plans, single sign-on and admin
| LastPass | Keeper | |
|---|---|---|
| Plans and seats | Teams (up to 50 users), Business and Business Max (no user limit) | Business Starter (5 to 10 seats), Business (minimum 5 seats), Enterprise; KeeperMSP for IT providers |
| Sign-in and provisioning | Business and Business Max: directory integrations with Active Directory, Entra ID, Google Workspace, Okta and OneLogin; SSO for 3 apps on Business, unlimited on Business Max | Enterprise: SAML 2.0 SSO, SCIM provisioning, AD and LDAP sync; Entra ID, Okta, Google Workspace and Ping |
| Sharing | Shared folders on every business plan, with customisable permissions | Shared team folders on Business and Enterprise; one-time sharing with people who have no Keeper account; time-limited access |
| Policies and admin | Essential security policies on Teams; 100+ advanced policies and group user management on Business and Business Max | Policy engine by user, role or team; delegated administration on Business; vault transfer when someone leaves |
| Reporting and SIEM | Splunk and Microsoft Sentinel on Business and Business Max | SIEM integration add-on (requires Advanced Reporting & Alerts) |
| Breach monitoring | Dark web monitoring in every plan | BreachWatch dark web monitoring, an add-on |
| Family benefit for staff | Free Families account with 5 licences for each Business and Business Max user | Free Family Plan for every user on Business and Enterprise, for up to 5 family members |
| Trial | 14 days, no credit card and no seat limit; new customers also get a Business Max trial | Free trials of Business and Enterprise |
Small-team plans. LastPass Teams covers up to 50 users with an admin console, shared folders and essential security policies (LastPass Teams (opens in a new tab)). Keeper's business plan pages list Business Starter for 5 to 10 users, with an encrypted vault and admin console and credential sharing; shared team folders come with Keeper Business.
Policies. LastPass Business adds "100+ advanced security policies" and group user management. Keeper's policy engine enforces policies "by user, role or team", and Keeper Business adds delegated administration.
Single sign-on. LastPass Business and Business Max offer federated login with your identity provider, plus single sign-on to three of your own apps on Business and unlimited on Business Max (opens in a new tab). Keeper Enterprise adds SAML 2.0 single sign-on, SCIM provisioning and Active Directory and LDAP sync (Keeper Enterprise (opens in a new tab)).
Weighing up the options?
We can compare them against your own requirements and recommend what fits.
Which suits you?
Match the facts to your situation:
- You are a team of 11 to 50 without directory integration: LastPass Teams covers up to 50 users; Keeper Business Starter is sized for 5 to 10
- You want dark web monitoring included: LastPass includes it in every plan; Keeper sells BreachWatch as an add-on
- You want single sign-on to other cloud apps from the password manager: LastPass Business includes three SSO apps, Business Max unlimited
- You run Active Directory or LDAP on premises: Keeper Enterprise lists AD and LDAP sync; LastPass lists Active Directory among its directory integrations on Business
- You want personal accounts for staff, kept apart from the work vault: both include one, on LastPass Business and Keeper Business
Moving from LastPass to Keeper, or back
Keeper's documentation includes a dedicated import from LastPass (Keeper (opens in a new tab)), and LastPass imports from a generic CSV file, so you can move in either direction.
For a business, recreate shared folders once, by team, rather than letting each person import their own copy. Export on a trusted computer, delete the export file afterwards, and keep the old account until everyone has checked their items. Our switching guide covers each step.
Buying LastPass or Keeper for your organisation
We can quote LastPass and Keeper for your business, so we can help you choose between them rather than steer you to one; the plan and terms are confirmed at quote. We can:
- Help you choose between LastPass and Keeper against your identity platform (Microsoft Entra ID, Google Workspace or Okta), your team size and how your teams share logins
- Set up single sign-on and user provisioning on the plans that include them, so accounts are created and removed from your directory
- Set policies and build shared folders or vaults for each team before staff are invited
- Import passwords from browsers, spreadsheets or the other password manager
- Keep licensing in one place: licences can be billed monthly, with terms confirmed at quote
See our LastPass and Keeper business pages for each plan in detail. Contact us for free advice on which fits, or a quote.
Frequently asked questions
Is LastPass or Keeper more secure?
Both encrypt your vault on your own device so the provider cannot read it, and both derive the key from your master password with PBKDF2. LastPass uses 256-bit AES with 600,000 iterations and publishes what it changed after the 2022 incidents; Keeper uses AES-256 GCM and publishes ISO, SOC 2 and FIPS 140-3 certifications. See are password managers safe?.
Can we trial both?
Yes. LastPass offers a 14-day business trial with no seat limit or credit card. Keeper offers free trials of Keeper Business and Enterprise. We can help you set up a pilot group on each.
Does LastPass Teams or Keeper Business Starter suit a small business?
It depends on size. LastPass Teams covers up to 50 users with shared folders and essential policies. Keeper Business Starter covers 5 to 10 seats; Keeper Business, from 5 seats, adds delegated administration.
Do both include dark web monitoring?
LastPass includes dark web monitoring in every plan, Teams included (LastPass (opens in a new tab)). Keeper's dark web monitoring is BreachWatch, sold as an add-on (Keeper (opens in a new tab)).
Can Keeper import from LastPass?
Yes. Keeper's documentation has a dedicated guide to importing from LastPass (Keeper (opens in a new tab)), and our switching guide covers the steps.
Still deciding?
Ask us and a member of our team will get back to you.
More password manager guides
LastPassLastPass's business plans, from Teams to Business Max, and how we can quote and set up LastPass.
KeeperKeeper Security's business plans and add-ons, and how we can quote and set up Keeper for your business.Compare password managersKeeper, 1Password, NordPass and LastPass business plans side by side on published facts.Keeper vs 1PasswordKeeper and 1Password business plans compared on security model, seats, sharing, SSO and admin.NordPass vs KeeperNordPass and Keeper business plans compared on security model, seats, sharing, SSO and admin.Switching password managerHow to move passwords between password managers and off browsers or spreadsheets, safely.