CISO Tribune

Vendor comparison · 2 companies

Bitwarden vs LastPass

Bitwarden sells an open source, end-to-end encrypted password manager that stores, shares and manages the credentials, passkeys and sensitive information used by people, AI agents and machines. LastPass sells a password manager with an encrypted password vault. CISO Tribune files both under Password and secrets vaults for people. This page sets the two records side by side: what each sells, where it is based, who owns and funds it, the customers it names and its recent news, each fact numbered to its source.

Change the companies

Up to four companies side by side.

  • Bitwarden
  • LastPass
Bitwarden vs LastPass: Products, Customers and Funding Compared
BitwardenBitwarden sells an open source, end-to-end encrypted password manager that stores, shares and manages the credentials, passkeys and sensitive information used by people, AI agents and machines.bitwarden.comLastPassLastPass sells a password manager with an encrypted password vault.lastpass.com
What it sells
  • Enterprise[3][4][10][11][12][14][21]A business plan for advanced protection and control.
  • Access Intelligence[3][12][21]Reports on at-risk credentials across a Bitwarden organization.
  • Passwordless.dev[9]For developers building FIDO2 WebAuthn-based passkey authentication.
  • LastPass Families[13]Password manager for up to 6 users, each with a private encrypted vault.
Categories
Headquarters
Santa Barbara, United States[2][9]Boston, United States[2][3]
Founded
2016[2][9]2008[2]
Ownership and funding
Not stated on its pagesOwned by Francisco Partners since 2024[3][5][13]
Named customers
Not stated on its pagesNot stated on its pages
Recent news
  • September 15, 2026Bitwarden announced its commitment to pursue FedRAMP Class D (High) certification for its cloud-hosted Password Manager and Secrets Manager.[6]
  • April 22, 2026Bitwarden said it identified and contained a malicious package briefly distributed through the npm path for its CLI on April 22, 2026, linked to a Checkmarx supply chain incident.[20]
  • December 3, 2025Bitwarden announced general availability of Access Intelligence for Enterprise plans, giving visibility into weak, reused, or exposed credentials with guided remediation workflows.[21]
  • December 10, 2025LastPass launched new SaaS Protect features aimed at giving businesses secure access controls over unapproved apps.[4]
G2 and Gartner Peer Insights
  • G2: listed, seen November 4, 2026[7]
  • Gartner Peer Insights: listed, seen November 4, 2026[8]
  • G2: listed, seen November 3, 2026[5]
  • Gartner Peer Insights: Not stated on its pages
Who it fits
Not written yetFrom its own pages, LastPass sells mainly to businesses that want a centralized password management tool. LastPass Business is also described as password management software readily deployable to enterprise-sized organizations. Business Max is designed for lean IT teams with distributed workforces. LastPass says its secure password sharing connects users, contractors, freelancers and vendors. LastPass also sells Premium as an individual plan and describes Families as keeping a household's logins secure.
Last verified
September 27, 2026September 27, 2026

Where they overlap

  • Password and secrets vaults for people is the primary category of both Bitwarden and LastPass.
  • Both are headquartered in the United States.

Where they differ, field by field

  • Bitwarden lists Enterprise, Access Intelligence and Passwordless.dev. LastPass lists LastPass Families.
  • Bitwarden is headquartered in Santa Barbara, United States. LastPass is headquartered in Boston, United States.
  • Bitwarden was founded in 2016. LastPass was founded in 2008.
  • LastPass is owned by Francisco Partners, since 2024.

How they differ

CISO Tribune files both Bitwarden and LastPass under Password and secrets vaults for people, as their primary category. Bitwarden sells an open source, end-to-end encrypted password manager for the credentials, passkeys and sensitive information used by people, AI agents and machines. Bitwarden also sells Secrets Manager for developers and DevOps teams, and Passwordless.dev for developers building FIDO2 WebAuthn-based passkey authentication. LastPass sells a password manager with an encrypted password vault, offered in Teams, Business and Business Max plans for organizations, plus Premium and Families plans for individuals and households. LastPass Business Max identifies AI tools a team is using, including unsanctioned ones, and lets admins set block, warn or allow rules for specific tools.

Bitwarden is headquartered in Santa Barbara and was founded in 2016, and Bitwarden, Inc is the parent company of 8bit Solutions LLC. LastPass is headquartered in Boston, was founded in 2008, and has been owned by Francisco Partners since 2024. Bitwarden publishes case studies naming customers such as NASA, Glovo and Bitdefender, and says it serves over 80,000 businesses. LastPass says 100,000+ businesses rely on it.

On September 15, 2026, Bitwarden announced its commitment to pursue FedRAMP Class D (High) certification for its cloud-hosted Password Manager and Secrets Manager. Bitwarden also said it contained a malicious package briefly distributed through the npm path for its CLI on April 22, 2026. On December 3, 2025, Bitwarden announced general availability of Access Intelligence for Enterprise plans. On December 10, 2025, LastPass launched new SaaS Protect features aimed at giving businesses secure access controls over unapproved apps.

What it sells: Bitwarden

What Access Intelligence does[3][12][21]
Access Intelligence reports on weak, reused and exposed passwords shared in the Bitwarden organization. It is available to all Bitwarden enterprise subscriptions.

What it sells: LastPass

What LastPass Families does[13]
LastPass Families provides 6 Premium licenses to share between yourself and family and friends. Each family member gets their own encrypted, private vault. Emergency access lets the account holder grant one-time access in a medical emergency.

Questions about Bitwarden and LastPass

What do Bitwarden and LastPass sell?
Bitwarden sells Enterprise, Access Intelligence and Passwordless.dev. LastPass sells LastPass Families.
Are Bitwarden and LastPass in the same category?
Yes. Password and secrets vaults for people is the primary category of both on CISO Tribune.
Where are Bitwarden and LastPass headquartered?
Bitwarden is headquartered in Santa Barbara, United States. LastPass is headquartered in Boston, United States.
When were Bitwarden and LastPass founded?
Bitwarden was founded in 2016. LastPass was founded in 2008.
Who owns Bitwarden and LastPass?
LastPass is owned by Francisco Partners, since 2024.
Who are Bitwarden and LastPass sold to?
From its own pages, LastPass sells mainly to businesses that want a centralized password management tool.
What have Bitwarden and LastPass announced recently?
September 15, 2026: Bitwarden announced its commitment to pursue FedRAMP Class D (High) certification for its cloud-hosted Password Manager and Secrets Manager. December 10, 2025: LastPass launched new SaaS Protect features aimed at giving businesses secure access controls over unapproved apps.

About Bitwarden

Bitwarden sells an open source, end-to-end encrypted password manager that stores, shares and manages the credentials, passkeys and sensitive information used by people, AI agents and machines.[1]

Bitwarden says it serves customers from individuals to large organizations. The company's pages describe business plans for teams and growing companies, and for businesses that need advanced protection and control. Bitwarden Password Manager is described as being for organizations and individuals requiring password security to reduce the risk of breaches, boost productivity, and achieve compliance.[4][10]

On the business side, the Teams plan includes audit activity with event logs, directory synchronization and provisioning with SCIM. Enterprise policies let an organization set minimum password strength, configure specific features and enforce SSO login. Event logs can be exported or ingested into SIEM software. Large organizations can talk to the company about a tailored plan.[10][11]

Bitwarden Access Intelligence reports on weak, reused and exposed passwords shared in a Bitwarden organization. It is available to all Bitwarden enterprise subscriptions.[12]

Bitwarden Secrets Manager is for developers and DevOps teams who need to centrally store, manage and deploy secrets. Secrets are organized by project and held in an end-to-end encrypted vault, and each machine or agent can be given its own access token. The Secrets Manager CLI is described as the primary method to deploy secrets into applications, agent workflows and infrastructure. The Secrets Manager page also names GitHub Actions, GitLab CI/CD and Jenkins integrations and a Kubernetes Operator. A free plan is for solo developers and small projects, with Teams and Enterprise plans above it.[4][13][14]

Bitwarden states that it is certified and compliant with SOC II, ISO 27001, GDPR, DPF and HIPAA, and that it undergoes annual third-party audits. Its source code is hosted on GitHub for anyone to review. Its financial services page says Bitwarden provides audit trails and access controls that meet GLBA and SOX requirements.[11][17]

Bitwarden publishes case studies naming customers such as NASA, AccuRanker, Glovo, University of Toronto Press and Bitdefender. Support is offered 24/7/365, and qualified enterprise customers are assigned a dedicated global accounts manager.[18][19]

Bitwarden was founded in 2016 and is headquartered in Santa Barbara, California. The company says it serves over 80,000 businesses and more than 15 million users in over 180 countries. Bitwarden, Inc is the parent company of 8bit Solutions LLC. Michael Sullivan is Chief Executive Officer and Kyle Spearrin is Founder and Chief Innovation Officer. The company also offers Passwordless.dev for developers building FIDO2 WebAuthn-based passkey authentication.[4][11][12][14][15][17]

Bitwarden on the record

Sources

Bitwarden full record

  1. [1]bitwarden.comBitwarden · bitwarden.com · undated page, accessed September 27, 2026 · Tier A
  2. [2]AboutBitwarden · bitwarden.com · undated page, accessed September 27, 2026 · Tier A
  3. [3]Best Password Manager for Business, Enterprise & Personal | Bitwarden | BitwardenBitwarden · undated page, accessed October 23, 2026 · Tier A
  4. [4]Top Business Password Manager | Bitwardenbitwarden.com · undated page, accessed October 23, 2026 · Tier A
  5. [5]HIPAA-Compliant Password Manager for Healthcare | Bitwarden | Bitwardenbitwarden.com · undated page, accessed October 23, 2026 · Tier A
  6. [6]Bitwarden Announces Commitment to Achieve FedRAMP Class D (High) CertificationBusiness Wire · published September 15, 2026 · Tier A
  7. [7]Bitwarden Reviews 2026: Details, Pricing, & Features - G2G2 · undated page, accessed October 23, 2026 · Tier C
  8. [8]Bitwarden Reviews, Ratings & Features 2026 | Gartner Peer InsightsGartner Peer Insights · undated page, accessed October 23, 2026 · Tier C
  9. [9]About Us | BitwardenBitwarden · undated page, accessed November 4, 2026 · Tier A
  10. [10]Bitwarden Password Manager Pricing & Plans | BitwardenBitwarden · undated page, accessed November 4, 2026 · Tier A
  11. [11]Best Enterprise Password Manager | BitwardenBitwarden · undated page, accessed November 4, 2026 · Tier A
  12. [12]Bitwarden Access Intelligence | BitwardenBitwarden · undated page, accessed November 4, 2026 · Tier A
  13. [13]Secrets ManagerBitwarden · undated page, accessed November 4, 2026 · Tier A
  14. [14]Secrets Manager - Store, Manage, & Deploy Infrastructure Secrets | BitwardenBitwarden · undated page, accessed November 4, 2026 · Tier A
  15. [15]PersonalBitwarden · undated page, accessed November 4, 2026 · Tier A
  16. [16]BitwardenBitwarden · undated page, accessed November 4, 2026 · Tier A
  17. [17]GLBA and Sox-compliant Password Manager for Financial Services | Bitwarden | BitwardenBitwarden · undated page, accessed November 4, 2026 · Tier A
  18. [18]Bitwarden Reviews and Success Stories | BitwardenBitwarden · undated page, accessed November 4, 2026 · Tier A
  19. [19]Bitwarden Business Support | BitwardenBitwarden · undated page, accessed November 4, 2026 · Tier A
  20. [20]Bitwarden Confirms Compromise—Here Are The FactsForbes · published April 22, 2026 · Tier B
  21. [21]Bitwarden Announces General Availability of Access Intelligence to Strengthen Enterprise Identity Security and Remediate Credential RisksBitwarden · published December 3, 2025 · Tier A

LastPass full record

  1. [1]lastpass.comLastPass · lastpass.com · undated page, accessed September 27, 2026 · Tier A
  2. [2]About usLastPass · lastpass.com · undated page, accessed September 27, 2026 · Tier A
  3. [3]B948ad48 3268 4c9e 8b45 0d6d02d0b4e7LastPass via Business Wire · lastpass.com · published May 1, 2024 · Tier A
  4. [4]LastPass Launches New SaaS Protect Features to Enhance Secure Access Controls Over Unapproved AppsLastPass · published December 10, 2025 · Tier A
  5. [5]LastPass Reviews 2026: Details, Pricing, & Features - G2G2 · undated page, accessed October 26, 2026 · Tier C
  6. [6]Explore LastPass Features - LastPassLastPass · undated page, accessed November 3, 2026 · Tier A
  7. [7]Enterprise Password Management Solutions - LastPassLastPass · undated page, accessed November 3, 2026 · Tier A
  8. [8]LastPass Business Max - Shadow AI, Web & SaaS MonitoringLastPass · undated page, accessed November 3, 2026 · Tier A
  9. [9]Password Manager Pricing: Cost Per User & Plans - LastPassLastPass · undated page, accessed November 3, 2026 · Tier A
  10. [10]Authentication Method & MFA Solution - LastPassLastPass · undated page, accessed November 3, 2026 · Tier A
  11. [11]Transparent Security & Customer Data Protection - LastPassLastPass · undated page, accessed November 3, 2026 · Tier A
  12. [12]LastPass Families for employeesLastPass · undated page, accessed November 3, 2026 · Tier A
  13. [13]Family Password Manager - LastPassLastPass · undated page, accessed November 3, 2026 · Tier A
  14. [14]Premium Password Manager - LastPassLastPass · undated page, accessed November 3, 2026 · Tier A

Spot a factual error? Request a correction.