Side-by-side pricing for 1Password, Bitwarden and LastPass: entry price, free plan, how each vendor bills for AI, and the date we last checked each figure against the vendor’s own pricing page.
Every row links to the comparison where the figure was verified and to the vendor’s pricing page.
| Tool | Entry price | Free plan | AI billing | G2 rating | Verified | Source |
|---|---|---|---|---|---|---|
| 1Password | Teams Starter Pack $24.95/mo for up to 10 users (annual); Business $8.99/user/mo | No — 14-day free trial | — | — | September 19, 2026in 1Password vs Bitwarden | Vendor pricing ↗ |
| Bitwarden | Free for 1 user; Teams $4/user/mo (annual) | Yes — 1 user (share with one other person) | — | — | September 19, 2026in 1Password vs Bitwarden | Vendor pricing ↗ |
| LastPass | Teams $4.25/user/mo (annual, up to 50 users) | Yes — 1 user, one device type | — | — | September 19, 2026in 1Password vs LastPass | Vendor pricing ↗ |
The password manager tools we track, side by side on compliance, single sign-on, offline access and remote or office controls. Every value links to the vendor page it came from.
| What we checked | 1Password | Bitwarden | LastPass |
|---|---|---|---|
| Security & compliance | |||
| SOC 2 report | SOC 2 Type IIsource | SOC 2 Type IIsource | SOC 2 Type IIsource |
| ISO/IEC 27001 | Certifiedsource | Certifiedsource | Certifiedsource |
| Other certifications | ISO/IEC 27017, ISO/IEC 27018, ISO/IEC 27701source | SOC 3, HIPAAsource | SOC 3, ISO/IEC 27701, IRAP, BSI C5, TRUSTe, APEC CBPR, APEC PRP, EU-US DPFsource |
| HIPAA (BAA) | Not published | Not published | Not published |
| GDPR data processing agreement | Not published | Not published | Not published |
| Single sign-on (SAML/OIDC) | YesBusinesssource | YesEnterprisesource | YesBusinesssource |
| SCIM user provisioning | YesBusinesssource | YesTeamssource | YesBusinesssource |
| Two-factor authentication | YesEnforcement: Businesssource | YesEnforcement: Teams (via Duo); Enterprise (two-step login policy)source | YesEnforcement: Teamssource |
| Admin audit log | YesBusinesssource | YesTeamssource | YesTeamssource |
| Data residency choices | US, Canada, EUsource | US, EUsource | US, Canada, EU, UK, Australia, Singapore, IndiaBusinesssource |
| Encryption | End-to-end AES 256-bit encryption; Two-Key Derivation (account password + Secret Key); SRP protocol in transitsource | Zero-knowledge, end-to-end encryption of all vault data, decryptable only with the master passwordsource | AES-256 local encryption with PBKDF2 SHA-256 hashing; zero-knowledge modelsource |
| Self-hosting option | Not published | Yessource | Not published |
| Offline access | |||
| Offline mode | PartialItems synced to a device stay available in the 1Password apps while offline; the vendor does not document offline editing.source | PartialAny unlocked Bitwarden app works offline in read-only mode; items, attachments and Sends cannot be added or edited until reconnected.source | PartialThe browser extension, desktop app and mobile apps open a locally cached, read-only copy of the vault offline; new entries cannot be created until back online.source |
| Desktop apps | Windows, macOS, Linuxsource | Windows, macOS, Linuxsource | Windows, macOSsource |
| Mobile apps | iOS, Androidsource | iOS, Androidsource | iOS, Androidsource |
| Offline limits | Team members who unlock with SSO have no offline access unless an admin turns on biometric unlock; the admin sets the maximum offline period.Businesssource | — | On Teams, Business and Business Max, admins can limit offline access by policy; clearing the local cache requires an online login to rebuild it.Teamssource |
| Remote, hybrid & in-office | |||
| IP allowlisting | YesBusinesssource | Not published | YesBusiness Maxsource |
| Device & session controls | YesBusinessAuto-lock and unlock-method policies, sign-in attempt limits, Emergency Kit download control, firewall rules by country/IP/anonymous IP.source | YesEnterpriseEnterprise policies including session timeout, require SSO, single organization and centralized item ownership.source | YesBusiness MaxContextual (location/IP/device) authentication policies and workstation MFA on Business Max; travel mode and admin policies (e.g. prohibit export) on lower plans.source |
| Office & room hardware | — | Two-step login supports up to 10 hardware security keys and Yubico OTP; no other office hardware documented.source | Hardware MFA options (standalone fingerprint scanners, card readers, hardware keys like YubiKey) on all business plans; Windows/Mac workstation MFA and a Universal Proxy for LDAP/RADIUS VPN apps on Business Max.source |
Of the 3 password manager tools HelpCompare tracks, the lowest published entry price belongs to Bitwarden (Free for 1 user; Teams $4/user/mo (annual), verified September 19, 2026). Entry prices are the cheapest paid tier each vendor publishes; the right answer at your team size depends on seat minimums and add-ons, which each head-to-head comparison breaks down.
Free plans: Bitwarden (Yes — 1 user (share with one other person)); LastPass (Yes — 1 user, one device type).
Every figure was recorded from the vendor's own pricing page during research for a HelpCompare comparison, and is dated. The most recent check in this category was September 19, 2026. Nothing is estimated: where a vendor publishes no price, we say so. The full dataset is free to reuse under CC BY 4.0 at helpcompare.com/data/.
Figures come from each vendor’s pricing page, recorded on the date shown. Download the full dataset from Open Data (JSON and CSV, CC BY 4.0).
Plain-language guides: the steps, what to check before you buy, common mistakes, and every tool it takes with verified prices.
Verified prices costed for your team size, a check against your must-have requirements, the questions to settle before you sign, and a source for every figure. Print it, or paste it into an email to whoever approves the spend.
Built for the leader who owns the selection, answers for the spend, drives the rollout, and lives with the results. HelpCompare covers the whole decision, not just the first step.