1Password, Bitwarden, F-Secure and LastPass

About Bitwarden

Bitwarden sells an open source, end-to-end encrypted password manager that stores, shares and manages the credentials, passkeys and sensitive information used by people, AI agents and machines.^[1]

Bitwarden says it serves customers from individuals to large organizations. The company's pages describe business plans for teams and growing companies, and for businesses that need advanced protection and control. Bitwarden Password Manager is described as being for organizations and individuals requiring password security to reduce the risk of breaches, boost productivity, and achieve compliance.^[4][10]

On the business side, the Teams plan includes audit activity with event logs, directory synchronization and provisioning with SCIM. Enterprise policies let an organization set minimum password strength, configure specific features and enforce SSO login. Event logs can be exported or ingested into SIEM software. Large organizations can talk to the company about a tailored plan.^[10][11]

Bitwarden Access Intelligence reports on weak, reused and exposed passwords shared in a Bitwarden organization. It is available to all Bitwarden enterprise subscriptions.^[12]

Bitwarden Secrets Manager is for developers and DevOps teams who need to centrally store, manage and deploy secrets. Secrets are organized by project and held in an end-to-end encrypted vault, and each machine or agent can be given its own access token. The Secrets Manager CLI is described as the primary method to deploy secrets into applications, agent workflows and infrastructure. The Secrets Manager page also names GitHub Actions, GitLab CI/CD and Jenkins integrations and a Kubernetes Operator. A free plan is for solo developers and small projects, with Teams and Enterprise plans above it.^[4][13][14]

Bitwarden states that it is certified and compliant with SOC II, ISO 27001, GDPR, DPF and HIPAA, and that it undergoes annual third-party audits. Its source code is hosted on GitHub for anyone to review. Its financial services page says Bitwarden provides audit trails and access controls that meet GLBA and SOX requirements.^[11][17]

Bitwarden publishes case studies naming customers such as NASA, AccuRanker, Glovo, University of Toronto Press and Bitdefender. Support is offered 24/7/365, and qualified enterprise customers are assigned a dedicated global accounts manager.^[18][19]

Bitwarden was founded in 2016 and is headquartered in Santa Barbara, California. The company says it serves over 80,000 businesses and more than 15 million users in over 180 countries. Bitwarden, Inc is the parent company of 8bit Solutions LLC. Michael Sullivan is Chief Executive Officer and Kyle Spearrin is Founder and Chief Innovation Officer. The company also offers Passwordless.dev for developers building FIDO2 WebAuthn-based passkey authentication.^{[4][11][12][14][15][17]}

About F-Secure

F-Secure sells protection that combines antivirus, VPN, identity protection and scam protection in one app. F-Secure works on protecting family devices, privacy, identity and online lives. F-Secure offers digital protection across three key areas. F-Secure uses VPN services to shield online activities from tracking.^[2]

Customers can choose individual F-Secure solutions or get protection with F-Secure Total.^[2]

F-Secure Scam Protection gives shopping and banking scam alerts, blocks phishing sites and malicious links, and filters scam SMS messages automatically. F-Secure ID Protection is a password manager with identity protection that sends alerts to help avoid identity theft, saves passwords for later access and provides 24/7 dark web monitoring. F-Secure Mobile Security was formerly known as Lookout Life.^[2]

F-Secure offers a free detection tool that checks for deepfakes or AI-generated images and videos. F-Secure has a tool that checks if a person's details have been leaked in a data breach. F-Secure's free tools do not require joining a mailing list or saving an email address.^[2]

F-Secure works with partners that add online security to their own offering. More than 200 global brands use F-Secure to keep their own customers safe.^[2]

F-Secure publishes a guide to the cyber security threats facing consumers, informed by its own experts. F-Secure publishes guidance on protecting against identity theft, spotting the signs of a data breach and what to do when personal details are exposed. F-Secure publishes material on scams that use voice cloning, deepfakes and AI-enhanced phishing attempts. F-Secure publishes guidance on five ways to report a scam website.^[2]

About LastPass

LastPass sells a password manager with an encrypted password vault. LastPass says end users continue to adopt and share cloud-based apps outside IT's control, and it offers a centralized password management tool for that problem. LastPass says SaaS apps and AI tools now power every department across a business, yet nearly 50% of tools are invisible to IT and security personnel.^[1][6][7][8]

LastPass prices Teams at $4.25 per user per month, Business at $7.00 per user per month and Business Max at $11.00 per user per month, billed annually. Teams is limited to up to 50 users, while Business and Business Max have an unlimited user limit. LastPass describes Teams as simple credential management for small teams and startups. Business Max is described as advanced protection and secure access for any business with more admin control.^[9][10]

LastPass says its encrypted vault stores an unlimited amount of passwords and notes, such as Wi-Fi logins, banking cards and documents. LastPass says its Free plan offers simple password management with unlimited password storage, autofill, dark web monitoring and basic password sharing, limited to 1 device type. LastPass describes its architecture as zero-knowledge with AES-256 bit local encryption. LastPass says it uses AES-256 data encryption plus PBKDF2 hashing with SHA-256 salting. LastPass business customers can enable dark web monitoring to receive immediate alerts if company or personal data is at risk.^[7][9][11]

LastPass says directory integration with identity providers like Okta and Azure automates user onboarding and offboarding. LastPass says Unlimited SSO adds Single Sign-On to an unlimited number of apps, in addition to the three included in the base Business plan. LastPass says Advanced MFA extends passwordless authentication to all endpoints, meaning workstations, VPNs and identity providers, by combining biometric and contextual policies. Employees gain access to their LastPass vaults or workstations using the LastPass Authenticator. LastPass also offers biometric passwordless login to the vault with the LastPass Authenticator app.^[7][9][10]

LastPass says Business Max provides the visibility and governance to roll out AI tools and SaaS apps quickly and securely, all from the browser extension a team already uses. Business Max identifies every AI tool a team is using, including unsanctioned ones that bypass SSO or vault storage. LastPass says its AI usage guidance warns employees in real time when they try to share credentials, API keys or personal information with an AI tool. Admins can set block, warn or allow rules for specific tools. Business Max governs entire categories of sites, from social media and gambling to phishing and malware, in one action. LastPass says Business Max blocks phishing, malware and high-risk sites across an organization in a single click. Business Max also detects weak, reused, breached or expired passwords across an organization. LastPass says everything is built directly into the LastPass browser extension, so there are no additional agents, proxies or hardware to deploy.^[8]

LastPass says Families for employees is included in the LastPass Business package at no extra cost. Each employee gets a personal LastPass account plus five additional licenses to share with their family or friends. LastPass says the personal account data of users and their family will never be accessible to employers. LastPass Families lets up to 6 users store, manage and share passwords. LastPass says emergency access ensures someone you trust has one-time access to your LastPass vault in case of a medical emergency. LastPass Plus is priced at $7.00 per month and includes password protection and a VPN. LastPass says Premium includes up to 1 GB of file storage for sensitive data and personal documents inside the vault.^[12][14]

LastPass holds third-party security certifications including ISO 27001, SOC2 Type II, SOC3 and BSI C5. LastPass says 100,000+ businesses rely on LastPass. LastPass describes LastPass Business as scalable password management software readily deployable to enterprise-sized organizations. LastPass offers a Customer Success Manager to help with its enterprise password management solution.^{[7][8][9][10][11][14]}