How to Replace LastPass with Self-Hosted Alternatives
Why Replace LastPass?
- Security breaches. LastPass suffered a major breach in 2022 where encrypted password vaults were stolen. Attackers can try to brute-force weak master passwords indefinitely.
- Cost. LastPass Premium is $3/month ($36/year). Self-hosted Vaultwarden: free.
- Trust. After the breach, trusting LastPass with your most sensitive data is a hard sell. Self-hosting means your vault exists only on hardware you control.
- Features. Vaultwarden gives you every Bitwarden premium feature (TOTP, file attachments, emergency access) for free.
Annual savings: $36/year (LastPass Premium) → $0/year self-hosted.
Your Options
| App | Difficulty | Feature Match | Best For |
|---|---|---|---|
| Vaultwarden | Easy | 100%+ | Everyone (uses Bitwarden clients) |
| Passbolt | Medium | 70% | Teams/organizations needing sharing |
Our Recommendation
Use Vaultwarden. It’s fully compatible with the polished Bitwarden browser extensions, desktop apps, and mobile apps. You get every premium Bitwarden feature — TOTP authenticator, file attachments, emergency access, organizations — all free. It uses minimal resources (<128MB RAM) and stores everything in a single encrypted database.
Migration Guide
Step 1: Export from LastPass
- Log into LastPass in your browser
- Go to Account Options → Advanced → Export
- Enter your master password
- Save the exported CSV file securely
Important: The export file contains all your passwords in plain text. Delete it immediately after import.
Step 2: Set Up Vaultwarden
Follow our Vaultwarden setup guide. Key steps:
- Deploy with Docker Compose
- Set up HTTPS (required for browser extensions)
- Create your admin account
- Disable signups after creating your account(s)
Step 3: Import into Vaultwarden
- Log into your Vaultwarden web vault
- Go to Tools → Import Data
- Select “LastPass (csv)” as the format
- Upload your exported CSV
- Verify all entries imported correctly
Step 4: Install Bitwarden Clients
- Install the Bitwarden browser extension
- Click the gear icon on the login screen
- Set “Server URL” to
https://vault.yourdomain.com - Log in with your Vaultwarden credentials
- Repeat for desktop apps and mobile apps
Step 5: Delete LastPass
Once everything is working:
- Verify all passwords are in Vaultwarden
- Test auto-fill on a few sites
- Delete the exported CSV file (shred it)
- Delete your LastPass account
- Uninstall the LastPass extension
What You’ll Miss
- Nothing. Vaultwarden with Bitwarden clients is genuinely better than LastPass in every way. Better UI, better auto-fill, better security, and it’s free.
What You’ll Gain
- Better security — your vault is on your hardware, not someone else’s breached servers
- All premium features free — TOTP, file attachments, emergency access, organizations
- Full control — you decide the encryption, the backups, and the access
- Better clients — Bitwarden’s apps are more polished than LastPass’s
See also: Best Self-Hosted Password Managers | Replace 1Password