Best LastPass Alternatives in 2026: Switching from LastPass, 1Password or Dashlane

If you are leaving LastPass, the strongest alternatives are Bitwarden, which has a free plan, open-source code and an importer for LastPass, 1Password and Dashlane exports, and Proton Pass, a free hosted manager. KeePassXC suits anyone who wants a local file, and Passbolt and Keeper are the picks for teams.

This guide is about the move itself: how vaults are imported, how team features differ and what each vendor says about its security model. For a general ranking of password managers, read the best password managers guide first. The table below pulls in licence, self-hosting and pricing data live.

Why people look for LastPass, 1Password and Dashlane alternatives

LastPass, 1Password and Dashlane are commercial password managers that are closed source and hosted only, and Enlisted records no free plan for any of them, though LastPass and Dashlane offer free trials. The reasons readers give for moving are mostly about cost, control and scope:

• Paid plans only. Each product sells individual and business plans, so a household that only needs a basic vault may prefer a free tier.
• The products have grown beyond vaults. LastPass pitches shadow IT visibility and AI governance for companies. 1Password groups an enterprise password manager, a credential broker for AI agents and machine workloads, privileged access and a SaaS manager under Unified Access. Dashlane's business product, Omnix, focuses on credential risk in the browser. Teams that want only a shared vault may not need those layers.
• No inspectable code or self-hosting. All three are closed source, which rules them out where policy requires code review or an on-premises server.
• The vault is on the vendor's servers. Local-file and self-hosted managers keep it on your own devices or hardware.

LastPass also published a notice on 22 December 2022 about a security incident. In it, LastPass says an unauthorized party used information from an earlier incident in August 2022 to access cloud backup storage and copy customer account information and encrypted vault data, and that sensitive vault fields stay encrypted and can only be decrypted with each user's master password. You can read the full LastPass notice and judge it yourself.

How we picked

A product made this list if it stores logins in an encrypted vault and fills them in, and if it either documents an import path from the three products above or reads common export files. Enlisted favours open-source projects with recent GitHub activity, a free tier or a published pricing model, and notes whether each can be self-hosted. Security statements are the vendors' own, attributed as such. The sources behind each write-up are catalogue data and vendor documentation, with no first-hand testing involved. See how Enlisted ranks tools.

How to switch: export, import and clean up

Every move follows the same shape, whichever manager you choose.

1. Export from the old manager. Check the vendor's own export guide for the format and whether the file is encrypted. Treat the file as sensitive, because most export files are readable text.
2. Import into the new one. Bitwarden's help centre lists LastPass, 1Password, Dashlane, Keeper, KeePass and others as import sources, and it can import from the web app, desktop app, browser extension or command line. Proton's support page says you can migrate from LastPass, 1Password, Dashlane, Bitwarden, Keeper, NordPass and KeePass. KeePassXC's user guide has sections on importing CSV files, KeePass 1 databases and data from other applications.
3. Check what carried over. Look for shared folders, attachments, notes, passkeys and one-time-code settings, because importers differ in what they bring across and some items may need re-entering.
4. Run both for a short while, then retire the old vault. Delete the export file, and change the passwords on your most important accounts if you have any doubt about the old vault.

What each vendor says about its security model

Open source lets anyone read the code, but it does not prove a product is secure. These come from the vendors' own pages and Enlisted's catalogue entries, not from Enlisted's own findings.

1. Bitwarden: best all-round switch with built-in importers

Bitwarden is a password manager with open-source code, a free personal plan and a choice of using its cloud or running its server yourself. It is a natural first stop for people leaving LastPass, because its documentation lists importers for LastPass, 1Password, Dashlane, Keeper and more.

For teams, Enlisted lists Teams and Enterprise plans, and the server repository includes identity, SCIM and SSO services. The web vault, browser extension, desktop app and command line have their own Bitwarden clients entry. Bitwarden says it commissions third-party audits and uses zero-knowledge encryption, and that its code is under the AGPL v3.0 or the Bitwarden License v1.0.

• Best for: individuals, families and teams who want a mainstream manager with a free tier and an exit to self-hosting.
• Watch out for: the two licences need reading if you plan to modify or redistribute the code, and the business plans add the admin features you will compare with LastPass Business.

2. Proton Pass: best free hosted manager with email aliases

Proton Pass is a password manager from Proton that stores passwords, passkeys and 2FA codes and creates hide-my-email aliases. Proton says it uses zero-knowledge, end-to-end encryption, is open source and has been independently audited, and its support page lists importers for LastPass, 1Password, Dashlane, Bitwarden, Keeper, NordPass and KeePass.

The free plan has unlimited logins and devices, and apps cover Windows, macOS, Linux, Android and iOS, with browser extensions for Chrome, Safari, Firefox, Edge and Brave. Paid Pass Plus, Pass Family and Proton Unlimited plans sit above it.

• Best for: people who want a free hosted manager and care about hiding their real email address from sites.
• Watch out for: the free plan limits aliases, and Enlisted lists the main product as proprietary, with a separate open-source listing for the Android app.

3. NordPass: best commercial option from a well-known privacy brand

NordPass is a password and passkey manager from the company behind NordVPN. It stores logins in an encrypted vault, fills them in automatically and manages passkeys.

Enlisted records a limited free tier alongside paid plans for individuals and teams, and it is closed source and hosted only. The vendor's website blocked automated access when Enlisted prepared its entry, so details such as import sources and team features are not itemised here.

• Best for: people who want a commercial hosted manager with a free tier to try.
• Watch out for: confirm NordPass's import path for your old vault and read its security documentation yourself, since Enlisted's entry does not detail the encryption design.

4. Keeper: best for businesses that also need privileged access

Keeper is a password manager and privileged access platform with personal, family, business and enterprise editions. Beyond the vault, the catalogue lists KeeperPAM for privileged access, a Secrets Manager for developers, KeeperDB for database access, Endpoint Privilege Manager and remote browser isolation.

Keeper says its encryption and decryption always occur locally on the user's device, using AES 256-bit encryption with elliptic-curve cryptography, and it lists SOC 2 Type 2, ISO 27001, 27017 and 27018 and a FedRAMP High certification for its government platform. Bitwarden and Proton list Keeper as an import source.

• Best for: IT teams that need credential management plus privileged access and secrets in one vendor.
• Watch out for: it is closed source and hosted only, and the broader platform may be more than a team that just shares passwords needs.

5. KeePassXC: best offline vault with no account

KeePassXC is a community-driven password manager for Windows, macOS and Linux that keeps credentials and notes in an encrypted database file that works offline. It started as a community port of KeePass and can generate passwords and passphrases.

The user guide documents CSV import, KeePass 1 database import and importing from other applications, plus a browser extension, passkey support, SSH agent integration and a YubiKey backup procedure. Because the file lives wherever you put it, you decide how it syncs; the Dropbox alternatives guide covers storage that can carry it.

• Best for: people who want a free, account-free vault and are happy to manage sync and backups.
• Watch out for: there is no vendor sync or support desk, and there is no shared-vault feature for teams.

6. Vaultwarden: best lightweight self-hosted server for Bitwarden apps

Vaultwarden is an unofficial, Bitwarden-compatible server written in Rust under AGPL-3.0 that works with the official Bitwarden clients. It reimplements most of the Bitwarden client API, including personal vaults, Send, attachments and organizations with collections, member roles, groups, event logs and policies.

Multi-factor options include authenticator apps, email, FIDO2 WebAuthn, YubiKey and Duo, and it has emergency access and an admin backend. It suits families and small teams who find the official server heavy.

• Best for: self-hosters who want Bitwarden apps on a small server they control.
• Watch out for: it is a community project, not Bitwarden's own server, so you handle HTTPS, updates and backups yourself.

7. Passbolt: best open-source manager for shared team credentials

Passbolt is an open-source password manager built for teams. It lets organisations gather, structure and share passwords and other secrets, with access auditing and policies, through browser extensions, mobile apps, a command-line tool and a desktop app.

Passbolt says its security model rests on OpenPGP-based end-to-end encryption in which the private key is generated and stored on the user's device, and that it is audited by third parties several times a year with public reports. You can self-host the Community Edition or use the vendor's cloud, and Pro is priced per user with a minimum number of users.

• Best for: IT teams replacing shared spreadsheets or a business plan from LastPass, 1Password or Dashlane.
• Watch out for: it is built around teams, so an individual may find it more than needed, and the Pro edition has a minimum user count.

8. Enpass: best if you want the vault stored on your own devices

Enpass is a password manager that keeps the encrypted vault on your own devices rather than a vendor-run server. Syncing between devices goes through a cloud account you already own, which suits people who want a conventional app without handing the vault to a vendor.

It is proprietary software for desktop and mobile, and Enlisted records a free tier. Check Enpass's site for supported sync providers, team options and current plan limits.

• Best for: individuals who want a polished app but prefer to control where the vault is stored.
• Watch out for: it is closed source, and you rely on a cloud account of your own to sync.

Other options worth a look

• More hosted managers: RoboForm has a free plan for one device and paid Premium and Family options, Sticky Password can sync over a local Wi-Fi network, and Google Password Manager is free with a Google account. Compare more on the 1Password alternatives and Dashlane alternatives pages.
• KeePass-format apps: KeePassDX for Android, Keepass2Android, MacPass for macOS and KeeWeb in the browser all open KeePass databases.
• Self-hosted team tools: Passwordstate is a self-hosted manager for enterprises with a free edition for small teams, and Gopass is a command-line manager that stores credentials in git.
• Privacy-focused: AliasVault combines a password manager with email aliases and its own mail server.

Which LastPass alternative should you choose?

Browse every LastPass alternative in the catalogue, or the wider password management category.

Leaving LastPass, 1Password or Dashlane: a few last checks

Pick the destination for the features you use, not the ones on the pricing page. If you share logins with a family or team, test sharing and permissions first. If you depend on passkeys or one-time codes in the old vault, check that the new manager can store them, and keep the old vault until you are sure.

Finally, secure the new vault itself with a long, unique master password and two-factor authentication where the product offers it. A password manager only helps if the master password is one nobody else can guess.