1Password ranks #4 of 9 in our password managers testing. the best key architecture in the category, from the vendor that just made its audit reports harder to read..
84/100
the secret key design genuinely raises the floor on a weak master password — but a closed stack whose reports moved behind a request form in late 2025 is asking for more trust than it used to.
why people look for an alternative
−neither client nor server is open source
−recent audit reports gated behind trust center requests since nov 2025
−no free tier, only a 14-day trial
−losing both secret key and master password is unrecoverable
stay with 1Password if secret key design defeats offline brute force on a stolen vault is the thing you care about most — nothing below beats it on that.
#2 in password managers · free, fully open, and the only one with no server at all — there is no vendor vault for anyone to steal.
89/100
verdictstructurally immune to the incident that defines this category, at the cost of doing your own syncing — a trade that is obviously right for some people and obviously wrong for others.
KeePassXC vs 1Password
1Password
KeePassXC
price
$35.88/yr
free
free tier
no
yes
source
closed: client + server
open: client, no server
latest audit
2025, gated behind request
anssi cspn, 2.7.9-era
breach history
none to vault data
n/a — no server
free tier
none — 14-day trial
entirely free
individual/yr
$35.88
$0
switch forpeople who would rather own the risk themselves than trust anyone's cloud with it.
pros
+no vendor server and no cloud vault to breach
+fully open source under gplv3
+completely free with no tiers
+anssi cspn certification on 2.7.9
cons
−you supply and secure your own sync
−audit history found is a single dated certification
#9 in password managers · the only confirmed large-scale vault breach in this category, disclosed in unusual detail by the company that suffered it.
48/100
verdictranked last on the record rather than the technology: customer vault backups and unencrypted urls left the building in 2022, and no amount of subsequent hardening undoes that.
LastPass vs 1Password
1Password
LastPass
price
$35.88/yr
unverified
free tier
no
yes
source
closed: client + server
closed: client + server
latest audit
2025, gated behind request
asserted, none named
breach history
none to vault data
2022 vaults, 2015 hashes
free tier
none — 14-day trial
one device type
individual/yr
$35.88
not readable
switch forexisting users planning an export — and worth reading before choosing anything else, because the disclosure is genuinely instructive.
pros
+the most detailed, dated first-party breach disclosure here
+passkey creation and storage on paid tiers
+iso 27001, soc 2 type ii, soc 3 and bsi c5 certifications
cons
−2022 breach exfiltrated customer vault backups and metadata
−website urls in those vaults were never encrypted
−separate 2015 incident exposed hashes and reminders
−no auditor named and no report linked on its security page
every tool on this page went through the same test as 1Password — same tasks, same order, scored the same way. the comparison tables are the figures from that testing, not vendor spec sheets.