Short answer: Yes, password manager companies have been breached — LastPass most notably, in 2022, when encrypted vault backups were stolen. But the vaults themselves are encrypted with your master password, which the provider does not hold. The realistic risk is not the company being hacked; it is a weak master password, malware on your own device, or you being phished. Using a reputable password manager remains dramatically safer than the alternative, which is password reuse.
How the encryption actually works
Understanding this makes the risk assessment straightforward.
Reputable password managers use zero-knowledge architecture. Your vault is encrypted on your device before anything is uploaded, using a key derived from your master password. The provider stores an encrypted blob it cannot read, and never receives your master password — only a proof that you know it.
So a breach of the provider’s servers yields ciphertext. To turn that into your passwords, an attacker must brute-force your master password, which is why its strength is the variable that matters most.
What actually happened at LastPass
Worth walking through, because it is the case everyone cites and the details matter.
In 2022, attackers accessed LastPass systems and eventually stole customer vault backups. Three findings made it worse than a routine breach:
- Some data was not encrypted. Website URLs stored in vaults were in plaintext, so attackers could see which sites each user had accounts on — useful for targeting.
- Older accounts had weak key derivation. LastPass had increased its iteration count over time, but not retroactively for existing users. Accounts created years earlier were far cheaper to attack.
- The initial entry was a home computer. A senior engineer’s personal machine, compromised through unrelated vulnerable software.
The lesson is not “password managers are unsafe”. It is that implementation details and internal security practices vary between providers, and that they are worth checking.
Other providers have had incidents too — Norton LifeLock saw credential stuffing against user accounts, and 1Password reported an intrusion attempt on an internal system with no customer data affected. What separates them is largely how they were handled and how much was learned.
The risks that should actually concern you
In descending order of likelihood:
1. A weak master password. This is the whole ballgame. If your master password appears in a leaked password list, or is short, encryption strength is irrelevant. Use a long random passphrase — see password vs passphrase.
2. Malware on your device. An infostealer can capture your master password as you type it, or lift the vault while it is unlocked. Malware defeats every password manager equally, and it is the single most common real-world failure — see session hijacking.
3. Phishing. A fake vault login page captures your master password and 2FA code in real time. Password manager browser extensions actually help here, because they refuse to autofill on the wrong domain — treat a failure to autofill as a warning rather than an annoyance.
4. No 2FA on the vault itself. Your master password alone should not be enough to sync your vault to a new device.
5. Losing the master password. Zero-knowledge means the provider genuinely cannot recover it. This locks out more people than attackers do.
How to use one safely
- A long, unique, random master password. Four to six random words. Never used anywhere else, never a variation of another password.
- 2FA on the vault — ideally a hardware security key or passkey. See hardware security keys.
- Keep your devices clean. No cracked software, no unvetted extensions, updates applied.
- Keep a recovery route. An emergency kit printed and stored physically, or an emergency-access contact where offered.
- Do not put every 2FA code in the same vault. For email, banking and crypto, keep the codes in a separate authenticator app so one compromise does not hand over both factors — the trade-off is in password managers with built-in TOTP.
- Run the health report occasionally to find reused and breached passwords: checking for leaks.
Is a password manager still worth it?
Yes, and the reasoning is comparative rather than absolute.
Without one, people reuse passwords. Reuse means one breach at any site compromises every account sharing that password — the attack running constantly at enormous scale, described in credential stuffing.
With one, every password is unique and long. A breach at one site stays at that site. That trade — concentrating risk in one well-defended, encrypted place rather than spreading it across fifty poorly defended ones — is a good trade for almost everyone.
The security profession overwhelmingly uses password managers. Not because they are perfect, but because the alternative is worse in every measurable way.
Choosing one
Reasonable criteria: zero-knowledge architecture, published independent audits, modern key derivation, support for hardware keys and passkeys, clear breach history and disclosure record, and an export path so you are not locked in.
Bitwarden (open source, generous free tier), 1Password, Proton Pass, and KeePassXC with self-managed sync for those who want no cloud provider at all — all reasonable choices. Browser built-in managers are better than nothing and weaker on cross-device and vault protection.
Frequently asked questions
Can the company read my passwords?
With a true zero-knowledge design, no. They hold encrypted data and never receive your master password. Verify this is what your provider claims and that it has been independently audited.
What happens if the company shuts down?
You export your vault and move. Every reputable manager supports export, which is exactly why export support is worth checking before you commit.
Is a paper notebook safer?
Against remote attackers, surprisingly yes. Against fire, loss, and the practical difficulty of using unique 20-character passwords, no. A notebook works for a handful of critical credentials, not for fifty accounts.
Should I trust my browser’s password manager?
It is better than reuse and fine for low-value accounts. Dedicated managers offer stronger vault encryption, better cross-platform support, secure sharing and health reporting.
What if I forget my master password?
Usually the vault is unrecoverable, by design. Set up whatever recovery option your provider offers — emergency kit, recovery code, or trusted contact — on the day you sign up.
Is self-hosting safer?
Only if you are genuinely competent at securing a server and keeping backups. For most people, a well-run provider is safer than a self-managed one, because the failure mode is neglect rather than attack.
The bottom line
Password managers get breached; vaults rarely get opened. The variable under your control is the master password, the device you unlock it on, and whether the vault has its own second factor. Get those three right and the provider’s server security becomes a secondary concern — which is exactly how the design intends it.
Adding 2FA on top? Start with what an authenticator app is, then work down your important accounts.