9 Best European Alternatives to LastPass (2026), Compared

The best European alternative to LastPass is Proton Pass (Switzerland): open-source, independently audited apps for every device, a free plan with unlimited passwords and devices, a family plan for 6 people and a built-in LastPass import. If you run a business and never want to rely on a master password again, pick heylogin from Germany – free for private use and €3.99 per user a month for teams, hosted at Hetzner.

I wrote this ranking for people who are leaving LastPass because of its security incidents and would rather trust a European company with their passwords. LastPass is run by LastPass US LP, which its privacy notice describes as “based in the United States of America”, with its legal office in Boston; customers in the EU are served by LastPass Ireland Limited in Dublin, but data is transferred to and processed in the United States. In 2022 LastPass disclosed that an attacker had copied a backup of customer vault data, and in December 2025 the UK Information Commissioner’s Office fined LastPass UK Ltd £1.2 million over the breach. I compared twelve password managers that are marketed as European and kept nine. For each one you get who is behind it, how open it is about security, what it costs and what you lose compared with LastPass.

What are the best European alternatives to LastPass?

If you only have a minute: these are the European password managers I would switch to from LastPass, in order.

1. Proton Pass (Switzerland) – open-source, audited, free plan, family and business plans. Best for most people leaving LastPass.
2. heylogin (Germany) – no master password, you confirm logins on your phone. Best for small businesses.
3. pCloud Pass (Switzerland) – a simple encrypted vault for €29 a year. Best for a cheap personal plan.
4. Passbolt (Luxembourg) – open source, self-hosted or in a European cloud, with public audit reports. Best for LastPass Teams and Business users.
5. Sticky Password (Czech Republic) – sync over your own Wi-Fi and a lifetime licence. Best if you want your vault off the cloud.
6. Hypervault (Belgium) – passwords plus a document vault, €49 a year for five family members. Best for families on a budget.
7. Psono (Germany) – self-hosted and free for up to 10 users. Best for small teams with their own server.
8. Password Depot (Germany) – on-premises password manager, free for up to 3 users. Best for company networks without a vendor cloud.
9. Uniqkey (Denmark) – password and access management for EU companies. Best for compliance-driven businesses.

LastPass alternatives compared

Prices from public pricing pages. Affiliate links and sponsored placements are labelled.

“Data hosted in” shows where each provider’s web app or vault servers run, based on a DNS lookup of its domain and an ASN lookup (25 Oct 2026), or on the provider’s own statement where the vault is not reachable that way. For self-hosted tools, your vault is wherever you install it.

What happened at LastPass

In August 2022 an attacker got into LastPass’s development environment through a compromised developer account and took source code and technical information. In its update of 22 December 2022, LastPass wrote that this information was used to target another employee and reach a separate cloud storage service holding backups. The attacker copied account data – names, billing addresses, email addresses, phone numbers and IP addresses – and a backup of customer vaults. According to LastPass, that backup contained “both unencrypted data, such as website URLs” and encrypted fields such as usernames, passwords and secure notes, protected with 256-bit AES and a key derived from each user’s master password. LastPass advised customers whose master password did not meet its defaults to change the passwords stored in their vault.

On 11 December 2025 the ICO fined LastPass UK Ltd £1.2 million, finding that it “failed to implement sufficiently robust technical and security measures”. Personal information of up to 1.6 million UK users was compromised; the ICO found no evidence that passwords were decrypted. LastPass says it has since rebuilt its development environment and lists ISO 27001, SOC 2 Type II and BSI C5 certifications. Whether that is enough is your call.

How I compared the LastPass alternatives

I looked at twelve password managers that are marketed as European and kept nine. The order is driven by how much of LastPass you keep after switching, then by privacy, security transparency and sovereignty, then by price. Concretely, I weighed five things:

• Jurisdiction and ownership – where the company is registered, who owns it and where the vault is stored.
• Feature match with LastPass – apps, autofill, sharing, free, family and business plans, and a LastPass import.
• Security transparency – end-to-end encryption, whether metadata such as website URLs is encrypted too, open-source code and published independent audits.
• Price – free plan, cheapest paid plan, family and team prices.
• What users say – ratings on Trustpilot, read together with the number of reviews.

I left out three products. Bitwarden offers an EU data region, but Bitwarden Inc. is incorporated in Delaware, USA. NordPass belongs to the Nord Security group, but its Trustpilot profile lists an address in Panama City. MindYourPass could not be verified: its domain no longer resolves. All data comes from the providers’ own pricing, about, security and legal pages, LastPass’s incident notice, the ICO and Trustpilot, checked on 25 October 2026 (partly for my 1Password alternatives ranking the same day).

The best European alternatives to LastPass, reviewed

Each password manager below gets the same treatment: who is behind it, what users say, what it replaces from LastPass, pros and cons, and my opinion.

1. Proton Pass

The closest European match for LastPass – every platform, a real free plan, encrypted metadata and a one-click LastPass import

Proton Pass is made by Proton AG in Geneva, Switzerland, the company behind Proton Mail and Proton VPN, founded in 2014 by scientists who met at CERN. Its main shareholder is the non-profit Proton Foundation, and Proton says it has no venture capital investors. The Proton Pass web app runs on Proton’s own network in Switzerland (AS62371).

What users say. On Trustpilot Proton Pass has its own profile with 3.4/5 from only 18 reviews, so treat it with care. Users praise reliability and the many options; the complaints are mostly about autofill on some websites. LastPass itself scores 1.3/5 from 940 reviews, with many complaints about support and login problems.

What it replaces from LastPass – and what it doesn’t. Proton Pass has browser extensions for Chrome, Firefox, Safari, Edge and Brave, apps for Windows, macOS, Linux, iPhone and Android, and a web app. The difference starts with the free plan: LastPass Free works on either your computer or your phone, not both, while Proton Pass Free gives you unlimited logins, notes and cards on unlimited devices, passkeys and alerts for weak or reused passwords. Pass Plus adds a built-in 2FA authenticator, vault and link sharing, dark web monitoring, file attachments and emergency access. Relevant after the LastPass breach: Proton says your vault is end-to-end encrypted including its metadata, and its apps are open source and independently audited. What you lose: autofill is not perfect on every site, according to reviewers, and business plans need at least 3 users.

Facts: HQ Switzerland (Geneva) · free plan: yes, unlimited passwords and devices · Pass Plus €2.99/month billed yearly (€35.88), €4.99 billed monthly · Pass Family €4.99/month billed yearly for 6 users · Pass Essentials for teams €1.99 per user a month billed yearly, min. 3 users · open source · independently audited · 30-day money-back guarantee.

Switching from LastPass: easy – export a CSV from LastPass, then pick LastPass as the provider in the Proton Pass import settings.

My take: If the breach is why you are moving, Proton Pass answers the obvious worries: open-source code, published audits, encrypted metadata and no venture capital behind it. Its free plan also beats LastPass Free, because it works on all your devices at once. It is my first choice for almost everyone. Best for: individuals, families and small teams who want LastPass convenience from a Swiss company. Not for: people who rely on flawless autofill on unusual websites.

Read my full Proton Pass review →

Visit proton.me →

2. heylogin

A German password manager without a master password – you confirm logins on your phone or a security key

heylogin is made by heylogin GmbH in Braunschweig, Germany. It was founded by Dr. Dominik Schürmann, a former IT-security researcher at TU Braunschweig, together with a co-founder. In 2022 Mozilla Ventures invested in its pre-seed round alongside German business angels. Its web app runs on Hetzner servers in Nuremberg, Germany (AS24940).

What users say. heylogin has 3.8/5 on Trustpilot, but from only 2 reviews – too few to mean much.

What it replaces from LastPass – and what it doesn’t. heylogin has no master password for an attacker to guess. You confirm access with your smartphone, a FIDO2 security key, Touch ID or Windows Hello. You get password generation and saving, automatic 2FA codes (TOTP), passkeys, edit history and a trash bin, with apps for Android and iOS, browser extensions and a web app. The Business plan adds user and team management, roles and integrations with Entra ID and Google Workspace – the core of LastPass Teams and Business. heylogin publishes its security reports: secuvera audited its source code in September 2026 (three medium-severity issues, all fixed), and it was tested against the BSI’s password-manager criteria in July 2026. What you lose: there is no family plan, the code is not open source, and business prices are shown without VAT.

Facts: HQ Germany (Braunschweig) · free plan for private users · Business €3.99 per user a month billed yearly, plus VAT · Enterprise on request (over 50 employees) · data breach monitoring and audit log in Enterprise · hosted in Germany (Hetzner) · independent code audit (secuvera, 2026).

Switching from LastPass: moderate – CSV import is offered for business accounts, and your team has to get used to confirming logins on the phone instead of typing a master password.

My take: heylogin is the most interesting answer to the LastPass breach for companies: no master password means no weak master password for an attacker to brute-force. It is hosted in Germany, audited, and cheaper per user than LastPass Business. It sits second only because it does not cover families the way LastPass Families and Proton Pass do. Best for: small and mid-sized businesses replacing LastPass Teams or Business. Not for: families who want one shared plan.

Visit heylogin.com →

3. pCloud Pass

A simple encrypted vault from the Swiss cloud-storage company, €29 a year

pCloud Pass is made by pCloud International AG, registered in Baar, Switzerland, the company behind the pCloud cloud storage. pCloud was founded in 2013. The pCloud Pass web app and API run on pCloud’s own network (AS51154).

What users say. pCloud has 3.1/5 from 1,695 reviews on Trustpilot, but that profile covers the whole company, mostly the cloud storage – there is no separate profile for pCloud Pass.

What it replaces from LastPass – and what it doesn’t. pCloud Pass covers the LastPass basics: autofill for passwords, cards and secure notes, a password generator, secure sharing and import from other password managers or a CSV file, on all devices and browsers, according to pCloud. What you lose: the free plan works on only 1 active device – similar to LastPass Free’s one-device-type limit – there is no business plan yet, and there is no built-in 2FA authenticator, dark web monitoring or published audit report that I could find.

Facts: HQ Switzerland (Baar) · pCloud founded 2013 · free plan: yes, 1 active device · Premium €29/year (shown as 19% off €35.88) · Family €49/year for up to 5 members (shown as 18% off €59.88) · unlimited devices and sharing on paid plans.

Switching from LastPass: easy – export a CSV from LastPass and import it into pCloud Pass.

My take: pCloud Pass does less than LastPass, but it does the core job for €29 a year and your vault stays with a Swiss company on its own servers. It sits below Proton Pass and heylogin because its free plan is limited and it is less open about its security. Best for: individuals and families who want a cheap, simple vault from a Swiss company. Not for: teams and people who want published audits.

Visit pass.pcloud.com →

4. Passbolt

The open-source team password manager from Luxembourg – self-hosted or in a European cloud, with every audit published

Passbolt is made by Passbolt SA in Belvaux, Luxembourg. The project started in 2011 in a digital agency, the open-source Community Edition launched in 2016 and the company was incorporated in 2017. You can run Passbolt on your own server or use Passbolt Cloud, hosted in Belgium and Germany in Google Cloud data centres; the Sovereign Cloud plan is hosted in a private data centre in Luxembourg.

What users say. Passbolt has no reviews on Trustpilot yet. Its main open-source repository on GitHub has 6.2k stars and 347 contributors.

What it replaces from LastPass – and what it doesn’t. Passbolt replaces LastPass Teams and Business: shared folders, groups, role-based access, password expiry, browser extensions and mobile apps; Pro adds LDAP, SSO with Microsoft, Google and OpenID, and an activity log. It is unusually transparent about security: every component is open source under AGPLv3, even the paid edition, and Passbolt publishes its audit reports – Cure53 audits since 2021 and a Quarkslab audit in November 2025 to prepare for French ANSSI certification. Passbolt v5 added encrypted, zero-knowledge metadata, so more than the password itself is encrypted. What you lose: there are no personal or family plans, paid plans need at least 10 users, and the standard Cloud plan runs on Google Cloud, a US provider.

Facts: HQ Luxembourg (Belvaux) · incorporated 2017 · Community Edition free, self-hosted, unlimited users · Pro (self-hosted) €4.50 per user a month billed yearly · Cloud €5 per user a month billed monthly · Sovereign Cloud €7 per user a month billed yearly, hosted in Luxembourg · minimum 10 users on paid plans · Cloud SOC 2 Type II audited.

Switching from LastPass: moderate – Passbolt imports the LastPass CSV format directly, but someone has to set up the server or the cloud workspace and invite users.

My take: For a company that lost trust in LastPass, Passbolt is the most convincing answer: you can read the code, read the audits and keep the server in your own building. It ranks fourth only because it does nothing for private users and families, who make up a big part of LastPass’s customers. Best for: IT teams moving off LastPass Business who want to control where the vault lives. Not for: individuals and families.

Read my full Passbolt review →

Visit passbolt.com →

5. Sticky Password

A Czech password manager from former AVG executives – with local Wi-Fi sync and a lifetime licence

Sticky Password is made by Lamantine Software a.s., whose address on Trustpilot is in Brno, Czech Republic. The company says it was founded by former AVG executives, has protected passwords since 2001 and has more than 2 million users. Its website runs on Amazon Web Services in Ireland; Sticky Password does not say where its cloud sync servers are.

What users say. Sticky Password has 3.1/5 from 66 reviews on Trustpilot.

What it replaces from LastPass – and what it doesn’t. Sticky Password covers most of LastPass Premium: autofill, passkeys, dark web monitoring, secure notes, sharing and emergency access. Its unusual strength matters after a cloud breach: you can sync your devices over your own local Wi-Fi, so your vault never has to sit on a provider’s server at all. Data is encrypted with AES-256, and the master password is never sent to its servers. What you lose: no family plan in the LastPass sense (a separate Teams product exists), the code is not open source, and dark web monitoring on the lifetime licence is only included for the first year.

Facts: HQ Czech Republic (Brno) · since 2001 · free version and a 30-day Premium trial without a credit card · Premium 1 year €29.95 (shown as 25% off €39.95) · Lifetime €79.95 (shown as 60% off €199.95) · local Wi-Fi sync · portable USB version for Windows.

Switching from LastPass: moderate – decide whether you want cloud or local Wi-Fi sync before you set up your devices and move your passwords.

My take: If the lesson you took from LastPass is that a cloud backup of your vault can be stolen, Sticky Password lets you skip the cloud entirely and pay once. I rank it fifth because the company says little about where its cloud servers are and publishes no audits, and family sharing is not as complete as LastPass Families. Best for: people who never want their vault in anyone's cloud again. Not for: families and businesses that want LastPass-style shared plans.

Visit stickypassword.com →

6. Hypervault

A Belgian password manager with a document vault – €49 a year for five family members

Hypervault is run by GTS DATA B.V. in Pulle-Zandhoven, Belgium; its CEO is Glenn Van Croonenborch. Hypervault says all data is stored in the EU. Its website runs at Hetzner in Germany, while the web app (app.hypervault.com) runs at DigitalOcean in Amsterdam – DigitalOcean is a US company.

What users say. Hypervault has no reviews on Trustpilot yet.

What it replaces from LastPass – and what it doesn’t. Hypervault covers individual, family and business use, like LastPass. Data is encrypted on your device with AES-256 on a zero-knowledge model, and paid plans add a vault for files – 250 MB on Individual+, 500 MB shared on Families – and emergency kits. What you lose: the company is small and young, there are no public user reviews, and the web app runs on a US-owned cloud provider, even if the servers are in the EU.

Facts: HQ Belgium (Pulle-Zandhoven) · free plan for individuals · Individual+ €12/year · Families €49/year or €5.99/month for up to 5 members · Business €39 per user a year or €4 per user a month · 14-day free trial · EU data storage.

Switching from LastPass: easy – Hypervault offers a CSV import template.

My take: Hypervault is good value and covers the same three audiences as LastPass. After a breach, though, track record and transparency count, and Hypervault is young, unreviewed and runs its app on a US-owned cloud. That keeps it in the middle of this ranking. Best for: families and small businesses that want a cheap EU password manager with file storage. Not for: people who want a long track record and published audits.

Visit hypervault.com →

7. Psono

A German open-source password manager – free for teams of up to 10 users

Psono is made by esaqa GmbH in Vorra near Nuremberg, Germany. It is built for companies that want to run their password manager themselves, either self-hosted or as a SaaS from Psono.

What users say. Psono has no reviews on Trustpilot yet.

What it replaces from LastPass – and what it doesn’t. The free Community Edition is open source with a password generator, sharing and multi-factor authentication. The free business version for up to 10 users adds LDAP, SAML and OIDC single sign-on, audit logging, policies and a gateway for SSH, RDP and VNC – features LastPass reserves for its Business plans. What you lose: there is no personal or family plan, and someone has to install and maintain the server if you self-host.

Facts: HQ Germany (Vorra) · Community Edition free and open source · free business version for up to 10 users · Enterprise €2.50 per user a month billed yearly · self-hosted or SaaS.

Switching from LastPass: moderate – someone has to set up the server before anyone can move their passwords.

My take: Psono is the cheapest way to replace LastPass Teams in Europe – free for up to 10 users, with SSO and audit logs, on your own server. It is built for admins, not families. Best for: small companies with an IT person and their own server. Not for: anyone who wants an app that just works out of the box.

Visit psono.com →

8. Password Depot

A German on-premises password manager for company networks, developed since 1998

Password Depot is made by AceBIT GmbH in Darmstadt, Germany, which has developed it since 1998. AceBIT says more than 100,000 customers use it, its information security management is ISO/IEC 27001-certified (TÜV NORD), and SySS ran a penetration test of the software in December 2025.

What users say. Password Depot has 4.1/5 from 48 reviews on Trustpilot – the best rating in this list with a meaningful number of reviews.

What it replaces from LastPass – and what it doesn’t. Password Depot is the opposite of LastPass’s model: the Enterprise Server runs on your own hardware or in your own Azure tenant, with no vendor cloud holding your vault or its backups. What you lose: it is built for Windows-based company networks, not for private users who want cloud sync, the code is not open source, and pricing is a licence plus optional yearly maintenance.

Facts: HQ Germany (Darmstadt) · since 1998 · Enterprise Server free for up to 3 users · licence for 5 users €461.26 (net), maintenance optional (30% in the first year) · on-premises or your own Azure tenant · ISO/IEC 27001 ISMS · SySS penetration test 2025.

Switching from LastPass: hard – your IT has to install and run the server before anyone can move their passwords.

My take: Password Depot is a mature German option for an IT department that wants nothing in a vendor’s cloud after the LastPass incidents. For anyone without their own servers, the tools above are simpler. Best for: companies with their own Windows server infrastructure. Not for: individuals and families.

Visit password-depot.de →

9. Uniqkey

Danish password and access management for companies, hosted in Europe

Uniqkey is made by Uniqkey A/S in Herlev, Denmark, founded in 2018. Uniqkey says it is hosted and operated in Europe, in an ISO 27001-certified data centre; its website runs behind Cloudflare.

What users say. Uniqkey has no reviews on Trustpilot yet.

What it replaces from LastPass – and what it doesn’t. Uniqkey is a business password and access management tool with zero-knowledge, end-to-end encryption, employee management, SCIM, tags and security scores per employee, aimed at companies under strict EU rules such as NIS2. What you lose: there is no personal or family plan, and prices are quote-only.

Facts: HQ Denmark (Herlev) · founded 2018 · price on request · free business trial · hosted in Europe (ISO 27001 data centre) · zero-knowledge encryption.

Switching from LastPass: moderate – a company rollout managed by IT, with onboarding from Uniqkey.

My take: Uniqkey suits a regulated EU company that wants a European vendor after LastPass. Quote-only pricing and no personal plans put it last for a typical LastPass user. Best for: EU companies that need a managed, compliance-focused password tool. Not for: individuals, families or anyone who wants to see a price first.

Visit uniqkey.eu →

What European password managers cost compared with LastPass

LastPass Premium costs €2.90 a month and Families €3.90 a month for 6 users, both billed yearly. The European alternatives cost about the same, most have a less restricted free plan, and several are cheaper per user than LastPass Business.

Prices as shown on each provider’s pricing page on 25 October 2026, in euros. LastPass shows its prices with a note that promotional pricing may not apply to current customers; taxes are added at checkout. LastPass also sells a Plus plan with VPN for €6.50 a month and Business Max for €10 per user a month. pCloud Pass, Sticky Password and Hypervault show some prices as discounts on a higher list price.

How to switch from LastPass to a European password manager

1. Create your new account first. Pick a long, unique master password you have never used anywhere – or, with heylogin, connect your phone or security key.
2. Export your LastPass vault. In the LastPass web vault go to Advanced Options → Export. LastPass emails you to confirm, then asks for your master password and saves a CSV file.
3. Import and check. Proton Pass and Passbolt have a LastPass option in their import screens; most others accept the CSV. Spot-check a few logins, 2FA secrets and shared folders.
4. Delete the export file. It contains all your passwords unencrypted – delete it and empty the trash as soon as the import works.
5. Change your most important passwords. Start with email, banking and anything that was in LastPass in 2022. Then delete your LastPass account, so no copy of your vault stays there.

LastPass alternatives: FAQ

My verdict: which European password manager to switch to

Most people leaving LastPass should go to Proton Pass: it is open source, independently audited, encrypts your metadata, has a free plan that works on all your devices and a family plan for 6 people, and it imports your LastPass vault in one step. If you run a business and want to remove the master password as a weak point, choose heylogin. If you want a cheap, simple vault from a Swiss company, pCloud Pass costs €29 a year.

If the breach taught you that you want to control where the vault and its backups live, Passbolt and Psono run on your own server, and Sticky Password can sync over your own Wi-Fi. Whatever you choose, delete the LastPass export right after the import, change your most important passwords, and then close the LastPass account.