Plans and prices side by side (checked 30 October 2026)
| NordPass | LastPass | |
|---|---|---|
| Free plan limit | One active session on one device [5] | One device type: desktop or mobile, not both [4] |
| Sharing on Free | Secure item sharing is a Premium feature [5] | Share one password with one person at a time [4] |
| Individual plan | Premium $23.88 first year, renews $35.88/yr [2]; or $37.53 for 2 years plus 3 months [11] | Premium $3.00/month billed annually ($36/yr) [4] |
| Family plan | Family, 6 accounts: $44.28 first year, renews $71.88/yr [3]; or $67.23 for 27 months [12] | Families, 6 users: $4.00/month billed annually ($48/yr) [4] |
| With VPN | Not in NordPass plans | Plus: $7.00/month billed annually, includes LastPass VPN [4] |
| Try before paying | 30-day money-back guarantee on paid plans [1] | 30-day Premium trial for personal plans [4] |
| Vault encryption | XChaCha20, key derived with Argon2id [6] | AES-256 with PBKDF2 SHA-256 [4] |
| Certifications listed | ISO 27001, SOC 2 Type 2 [10] | ISO 27001, ISO 27701, SOC 2 Type II, BSI C5 [4] |
Three-year cost for one person and for a family
LastPass prices are per month billed annually, so we multiplied by 12; LastPass notes taxes are added at checkout and promotional pricing has separate terms [4]. We assumed its price stays the same each year. NordPass rows use checkout prices and the renewal prices in each checkout's auto-renew notice [2] [3] [11] [12].
- For one person, NordPass is cheaper on either route.
- For a family, NordPass's 2-year route is slightly cheaper over three years, but from year 2 onward LastPass Families ($48) costs less per year than NordPass Family's $71.88 renewal.
| Route | Year 1 | Year 2 | Year 3 | 3-year total before tax |
|---|---|---|---|---|
| NordPass Premium, 2-year then renew | $37.53 | $0 | $35.88 | $73.41 |
| NordPass Premium, 1-year then renew | $23.88 | $35.88 | $35.88 | $95.64 |
| LastPass Premium | $36.00 | $36.00 | $36.00 | $108.00 |
| NordPass Family, 2-year then renew | $67.23 | $0 | $71.88 | $139.11 |
| NordPass Family, 1-year then renew | $44.28 | $71.88 | $71.88 | $188.04 |
| LastPass Families | $48.00 | $48.00 | $48.00 | $144.00 |
Security history: what LastPass itself disclosed
LastPass's own incident notice says that in August 2022 an unauthorized party used a compromised developer account to take portions of source code and proprietary technical information. In its 22 December 2022 update, LastPass said the attacker used information from that incident to access a third-party cloud storage service and copied a backup of customer vault data, along with basic account information such as names, billing addresses, email addresses, phone numbers and IP addresses [7].
LastPass said website URLs in that vault backup were unencrypted, while usernames, passwords, secure notes and form-filled data were encrypted with 256-bit AES and could only be decrypted with a key derived from each user's master password. It said users with default settings (a 12-character minimum master password and 100,100 PBKDF2 iterations) had no recommended action, and suggested others consider changing stored website passwords [7].
LastPass's 1 March 2023 update added that the attacker targeted a senior DevOps engineer by exploiting vulnerable third-party software, and that the stolen material also included an MFA and federation database backup containing LastPass Authenticator seeds and backup phone numbers [8].
We summarize only LastPass's published disclosures here. For NordPass's published audits and certifications, see our guide on whether NordPass is safe.
Encryption model in plain terms
NordPass says it encrypts data locally on your device before upload, uses XChaCha20 for vault encryption, derives a Master Key from your Master Password with Argon2id and a 16-byte salt, and uses public-key (asymmetric) encryption to protect encryption keys and their exchange; it describes the design as zero-knowledge [6]. LastPass says it uses AES-256 encryption with PBKDF2 SHA-256 salted hashes [4], and its incident notice says encrypted vault fields can only be decrypted with a key derived from each user's master password [7].
The 2022 incident shows what matters more than the cipher name: anything left unencrypted (URLs in LastPass's case) is readable if a backup is copied, and an encrypted vault is only as strong as the master password protecting it [7]. Whichever you pick, use a long, unique master password and turn on multi-factor authentication.
Switching from LastPass to NordPass
NordPass documents two routes [9]. The automatic import is in NordPass Settings, Import items, LastPass: you enter your LastPass credentials and choose the passwords to transfer. The manual route is a CSV export from the LastPass extension (Account, Export vault items, Export data for use anywhere) or the website vault (Advanced Options, Export, with an email confirmation step).
- Download LastPass file attachments first: the LastPass export does not include them [9].
- SSH keys, custom items and bank accounts arrive in NordPass as Secure Notes [9].
- Do not send the CSV file by email or another untrusted channel [9].
- Consider deleting the LastPass vault afterwards so credentials do not live in two places [9].
Who should pick which
- Pick NordPass if you want the lowest price for one person, or if the LastPass incident history is a deal-breaker for you.
- Pick LastPass Families if you are pricing a household beyond year 2: $48 a year against NordPass Family's $71.88 renewal.
- Skip NordPass Free if you need the vault on a phone and a laptop at the same time: it allows one active session.
- Skip LastPass Free if you use both desktop and mobile: it is limited to one device type.
- Want a VPN in the same plan? LastPass Plus includes one; NordPass sells NordVPN separately.
Questions before you decide
Is NordPass cheaper than LastPass?
For one person, yes: $23.88 for NordPass Premium's first year and $35.88 renewals against $36 a year for LastPass Premium. For families, LastPass Families is cheaper per year after NordPass's intro term.
Can NordPass import my LastPass vault?
Yes. NordPass has an automatic LastPass import in Settings and also accepts a LastPass CSV export. Attachments are not included, and some item types become Secure Notes.
What did LastPass say was taken in 2022?
LastPass said an attacker copied a backup of customer vault data in which URLs were unencrypted and usernames, passwords, notes and form data were AES-256 encrypted, plus basic account information.
Does LastPass Free work on my phone and computer?
No. LastPass says the Free plan is limited to one device type, desktop or mobile, not both.
Sources & verification
Product details and prices can change. Check the linked provider before buying.
- NordPass plans (personal, 1-year and 2-year tabs) Accessed 30 Oct 2026
- NordPass checkout order summary: Premium 1-year Accessed 30 Oct 2026
- NordPass checkout order summary: Family 1-year Accessed 30 Oct 2026
- LastPass plans and pricing (Personal and Business tabs, FAQ) Accessed 30 Oct 2026
- NordPass: Premium vs Free version of NordPass Accessed 30 Oct 2026
- NordPass security overview Accessed 30 Oct 2026
- LastPass blog: notice of recent security incident (Aug to Dec 2022 updates) Accessed 30 Oct 2026
- LastPass blog: security incident update and recommended actions (1 March 2023) Accessed 30 Oct 2026
- NordPass: how to export passwords from LastPass to NordPass Accessed 30 Oct 2026
- NordPass Business plans and feature comparison Accessed 30 Oct 2026
- NordPass checkout order summary: Premium 2-year Accessed 30 Oct 2026
- NordPass checkout order summary: Family 2-year Accessed 30 Oct 2026
Sources link directly to providers. Product buttons may use separately labeled affiliate links. Read our disclosure.