Skip to content
Start here
HomeCategories › Password Managers

Password Managers for Business, Compared: Verified 2026 Pricing

Side-by-side pricing for 1Password, Bitwarden and LastPass: entry price, free plan, how each vendor bills for AI, and the date we last checked each figure against the vendor’s own pricing page.

Quick answer

  • Lowest published entry price: Bitwarden — Free for 1 user; Teams $4/user/mo (annual).
  • Free plans: Bitwarden (Yes — 1 user (share with one other person)); LastPass (Yes — 1 user, one device type).

Password Managers pricing at a glance

Every row links to the comparison where the figure was verified and to the vendor’s pricing page.

ToolEntry priceFree planAI billingG2 ratingVerifiedSource
1PasswordTeams Starter Pack $24.95/mo for up to 10 users (annual); Business $8.99/user/moNo — 14-day free trialSeptember 19, 2026in 1Password vs BitwardenVendor pricing ↗
BitwardenFree for 1 user; Teams $4/user/mo (annual)Yes — 1 user (share with one other person)September 19, 2026in 1Password vs BitwardenVendor pricing ↗
LastPassTeams $4.25/user/mo (annual, up to 50 users)Yes — 1 user, one device typeSeptember 19, 2026in 1Password vs LastPassVendor pricing ↗
Verified data

Password Managers: security, offline & remote work

The password manager tools we track, side by side on compliance, single sign-on, offline access and remote or office controls. Every value links to the vendor page it came from.

What we checked1PasswordBitwardenLastPass
Security & compliance
SOC 2 reportSOC 2 Type IIsourceSOC 2 Type IIsourceSOC 2 Type IIsource
ISO/IEC 27001CertifiedsourceCertifiedsourceCertifiedsource
Other certificationsISO/IEC 27017, ISO/IEC 27018, ISO/IEC 27701sourceSOC 3, HIPAAsourceSOC 3, ISO/IEC 27701, IRAP, BSI C5, TRUSTe, APEC CBPR, APEC PRP, EU-US DPFsource
HIPAA (BAA)Not publishedNot publishedNot published
GDPR data processing agreementNot publishedNot publishedNot published
Single sign-on (SAML/OIDC)YesBusinesssourceYesEnterprisesourceYesBusinesssource
SCIM user provisioningYesBusinesssourceYesTeamssourceYesBusinesssource
Two-factor authenticationYesEnforcement: BusinesssourceYesEnforcement: Teams (via Duo); Enterprise (two-step login policy)sourceYesEnforcement: Teamssource
Admin audit logYesBusinesssourceYesTeamssourceYesTeamssource
Data residency choicesUS, Canada, EUsourceUS, EUsourceUS, Canada, EU, UK, Australia, Singapore, IndiaBusinesssource
EncryptionEnd-to-end AES 256-bit encryption; Two-Key Derivation (account password + Secret Key); SRP protocol in transitsourceZero-knowledge, end-to-end encryption of all vault data, decryptable only with the master passwordsourceAES-256 local encryption with PBKDF2 SHA-256 hashing; zero-knowledge modelsource
Self-hosting optionNot publishedYessourceNot published
Offline access
Offline modePartialItems synced to a device stay available in the 1Password apps while offline; the vendor does not document offline editing.sourcePartialAny unlocked Bitwarden app works offline in read-only mode; items, attachments and Sends cannot be added or edited until reconnected.sourcePartialThe browser extension, desktop app and mobile apps open a locally cached, read-only copy of the vault offline; new entries cannot be created until back online.source
Desktop appsWindows, macOS, LinuxsourceWindows, macOS, LinuxsourceWindows, macOSsource
Mobile appsiOS, AndroidsourceiOS, AndroidsourceiOS, Androidsource
Offline limitsTeam members who unlock with SSO have no offline access unless an admin turns on biometric unlock; the admin sets the maximum offline period.BusinesssourceOn Teams, Business and Business Max, admins can limit offline access by policy; clearing the local cache requires an online login to rebuild it.Teamssource
Remote, hybrid & in-office
IP allowlistingYesBusinesssourceNot publishedYesBusiness Maxsource
Device & session controlsYesBusinessAuto-lock and unlock-method policies, sign-in attempt limits, Emergency Kit download control, firewall rules by country/IP/anonymous IP.sourceYesEnterpriseEnterprise policies including session timeout, require SSO, single organization and centralized item ownership.sourceYesBusiness MaxContextual (location/IP/device) authentication policies and workstation MFA on Business Max; travel mode and admin policies (e.g. prohibit export) on lower plans.source
Office & room hardwareTwo-step login supports up to 10 hardware security keys and Yubico OTP; no other office hardware documented.sourceHardware MFA options (standalone fingerprint scanners, card readers, hardware keys like YubiKey) on all business plans; Windows/Mac workstation MFA and a Universal Proxy for LDAP/RADIUS VPN apps on Business Max.source
Editorial assessment

What this means for your team

  • Audit reports: all publish a SOC 2 report, and 1Password, Bitwarden and LastPass also hold ISO/IEC 27001. Ask each vendor for the report under NDA before you sign; security reviews usually want the latest one.
  • Single sign-on: 1Password includes it on Business; Bitwarden includes it on Enterprise; LastPass includes it on Business. If your team signs in through Okta, Microsoft Entra ID or Google, price the plan that includes SSO, not the entry plan.
  • Working offline: 1Password, Bitwarden and LastPass work offline only in part. Details are in the Offline mode row above.
  • Office-only access: 1Password can restrict sign-ins to approved IP ranges on Business; LastPass can restrict sign-ins to approved IP ranges on Business Max. That suits an office network or a company VPN; fully remote teams need a VPN for it to work.
  • Where your data lives: 1Password lets you choose US, Canada, EU; Bitwarden lets you choose US, EU; LastPass lets you choose US, Canada, EU, UK, Australia, Singapore, India on Business. This matters for teams hiring across the EU, UK or Australia.
  • In the office: Bitwarden: Two-step login supports up to 10 hardware security keys and Yubico OTP; no other office hardware documented. LastPass: Hardware MFA options (standalone fingerprint scanners, card readers, hardware keys like YubiKey) on all business plans; Windows/Mac workstation MFA and a Universal Proxy for LDAP/RADIUS VPN apps on Business Max.

1Password: worth knowing

  • SecurityFirewall rules in 1Password Business can allow, report or deny sign-ins by country, IP address/CIDR range, or anonymous IP type (Tor, public VPNs, proxies). source
  • OfflineStaff who unlock 1Password with SSO lose offline access unless the admin enables biometric unlock and sets a maximum offline period. source
  • RemoteTeams can choose where data is hosted: United States (1Password.com), Canada (1Password.ca) or European Union (1Password.eu). source
  • RemoteBusiness includes a free Families membership for every employee, covering personal passwords at home. source

Bitwarden: worth knowing

  • OfflineBitwarden apps work offline only in read-only mode: you can view but not add or edit items without a connection. source
  • OfficeThe desktop app can be installed on air-gapped/offline machines from the GitHub release installer and asset bundle, though it will not auto-update. source
  • SecurityEnterprise customers can self-host Bitwarden on their own servers behind a proxy or firewall for data-residency control. source
  • RemoteCloud accounts live in either the US or EU region, chosen at sign-up; an account exists only in the region where it was created. source

LastPass: worth knowing

  • OfflineOffline, LastPass opens a cached read-only vault; you cannot create new entries until you reconnect. source
  • RemoteVault data is stored in the US by default; only Business accounts can request storage in Canada, Europe, UK, Australia, Singapore or India. source
  • OfficeBusiness Max adds MFA for legacy and VPN apps using LDAP or RADIUS through the LastPass Universal Proxy. source
  • SecurityLastPass's own incident notice says 2022 attackers accessed cloud backups including customer vault data; sensitive fields were encrypted but URLs were not. source

Checked September 19, 2026 against each vendor’s own trust center, help docs and app pages. Hover or tap “source” to see the exact wording we relied on. “Not published” means we could not find the vendor saying it on its own site — it doesn’t mean the feature is missing. Plan names are the lowest plan the vendor says includes the feature. Security · Offline · Remote vs office · Download the data

Frequently asked questions

Which password manager tool is cheapest?

Of the 3 password manager tools HelpCompare tracks, the lowest published entry price belongs to Bitwarden (Free for 1 user; Teams $4/user/mo (annual), verified September 19, 2026). Entry prices are the cheapest paid tier each vendor publishes; the right answer at your team size depends on seat minimums and add-ons, which each head-to-head comparison breaks down.

Which password manager tools have a free plan?

Free plans: Bitwarden (Yes — 1 user (share with one other person)); LastPass (Yes — 1 user, one device type).

Where does this pricing data come from?

Every figure was recorded from the vendor's own pricing page during research for a HelpCompare comparison, and is dated. The most recent check in this category was September 19, 2026. Nothing is estimated: where a vendor publishes no price, we say so. The full dataset is free to reuse under CC BY 4.0 at helpcompare.com/data/.

Sources

Figures come from each vendor’s pricing page, recorded on the date shown. Download the full dataset from Open Data (JSON and CSV, CC BY 4.0).

Start with the job

Guides for the jobs this software does

Plain-language guides: the steps, what to check before you buy, common mistakes, and every tool it takes with verified prices.

Need sign-off?

Turn this into a one-page decision brief

Verified prices costed for your team size, a check against your must-have requirements, the questions to settle before you sign, and a source for every figure. Print it, or paste it into an email to whoever approves the spend.

Build a decision brief

From shortlist to switched

Built for the leader who owns the selection, answers for the spend, drives the rollout, and lives with the results. HelpCompare covers the whole decision, not just the first step.

Bill Belcamino, founder of HelpCompare
About the author

Bill Belcamino

Founder and author, HelpCompare

Bill has worked in software and digital marketing for more than 20 years. He spent nine years as an engineer at HP, served as COO scaling a platform past 200,000 users, and ran Google’s $70M/year search syndication partnership at Alot.com. He has bought, trialled, integrated and cancelled more SaaS tools than he can count, and started HelpCompare because the real cost of switching tools is the part nobody covers.

“I’ve sat on both sides of the table: the agency recommending the tool and the client paying for it.”

Researched and fact-checked by the HelpCompare team. Pricing on this page was last verified on September 19, 2026. No paid sponsorships, no affiliate commissions.