LastPass alternatives for business compared on SSO, seat prices and migration: Bitwarden, 1Password, Keeper and Passbolt, with figures from official pages.
•4 min read•Passwords, Privacy & Identity
Verdict:Bitwarden is the lowest-cost business option with a documented LastPass import ($4 per user a month for Teams); 1Password Business and Keeper suit admins who want SSO and polish; Passbolt fits teams that want to self-host.
| Tool | Price | Platforms | Best for | Tested |
|---|---|---|---|---|
| Bitwarden | Teams $4 per user a month; Enterprise $6 per user a month (billed annually) | Web, Desktop, Browser extension, Self-hosted | Small teams that want the lowest published per-seat price and a documented LastPass import | Docs only |
| 1Password | Teams Starter Pack $24.95 a month for 10 members; Business $8.99 per user a month (billed annually) | macOS, Windows, iOS, Android, Linux, Browser | Admins who want SSO with Okta or Entra ID and role-based vault sharing | Docs only |
| Keeper | Business Starter, Business and Enterprise tiers; amounts not listed on its pricing page | Web, Desktop, Browser extension | Companies that expect to grow into SSO, SCIM and AD provisioning on the Enterprise tier | Docs only |
| Passbolt | Community free; Pro $4.90 per user a month (billed annually, 10 users minimum) | Self-hosted, Browser extension | Technical teams that want to host the password manager themselves | Docs only |
Independent comparison. Paid placements are labelled separately; editorial links earn no affiliate commissions. Learn more.
Images from the linked documentation. Versions and features may differ from current plans.
Short answer: for a small business, Bitwarden is the cheapest route with a documented LastPass import: Teams is $4 per user a month. 1Password Business ($8.99) and Keeper fit admins who want SSO integrations and polish. Passbolt fits teams that would rather host it themselves.
LastPass's pricing page lists Teams for up to 50 users without SSO, Business with SSO for 3 apps, and Business Max with SSO for unlimited apps, all billed annually. It lists per-user monthly pricing without dollar amounts, so compare your current invoice against the seat prices below.
Bitwarden is a password manager with business plans and public source code. According to Bitwarden's business pricing, Teams is $4 per user a month billed annually, with credential sharing, event logs, directory sync and SCIM provisioning. Enterprise is $6 per user a month billed annually and adds passwordless SSO, enterprise policies and self-hosting, with a 14-day trial advertised.
Its open-source page says the code is on GitHub, the stack can run on your own platform with Docker, and the company lists SOC 2, GDPR, CCPA and HIPAA compliance.
Migration is documented. Per Bitwarden's LastPass import help, browser extension and desktop users can import directly with their LastPass credentials, or upload an export in the web vault. Attachments are not imported, duplicates are not checked, and SSO teams need callback URLs added first. Pick it if price and a clear migration path matter most. See our Bitwarden alternatives page for the reverse view.
1Password is a proprietary password manager with a business tier. According to its business pricing page, the Teams Starter Pack is $24.95 a month billed annually for 10 members, with additional seats at $4.99 each up to 20 users. Business is $8.99 per user a month billed annually, with a 14-day trial.
Business adds identity provider sign-in with Okta, Entra ID, OneLogin and Duo, plus user and group provisioning through Azure AD, Google Workspace, Okta, OneLogin, Rippling and JumpCloud. The same page lists SOC 2 Type II certification.
Pick it if you already run one of those identity providers and want provisioning handled there. Skip the Starter Pack if you have more than 20 people, since it caps at 20 users.
Keeper is a proprietary password manager sold in three business tiers. Keeper's pricing page lists Business Starter for 5 to 10 users, Business with shared team folders and delegated administration, and Enterprise, which is quote-only and adds SSO and SAML, SCIM and AD or LDAP provisioning.
The page lists no dollar amounts, so request a quote. The practical point is that SSO and SCIM sit on the Enterprise tier, so a company that needs them from day one should price that tier, not Business.
Pick it if you want a vendor with a tier ladder you can grow into. Skip it if you need a published price before talking to anyone. See our Keeper alternatives page for other options, and Dashlane alternatives if you are weighing that vendor.
Passbolt is an open-source, self-hosted password manager built for teams. Passbolt's pricing page lists a free Community edition with unlimited users, and a Pro edition at $4.90 per user a month billed annually with a minimum of 10 users. Pro adds LDAP and SSO.
Pro needs a subscription key, per the page. You also run the server yourself, so you take on hosting, backups and updates.
Pick it if you have someone who can host and maintain it. Skip it if you want a hosted service and no server to look after. Our open-source password manager page lists more self-hosted choices.
| Option | SSO | Published price | Migration help | Hosting |
|---|---|---|---|---|
| Bitwarden | Enterprise plan | Teams $4, Enterprise $6 per user a month | LastPass import documented | Cloud or self-host |
| 1Password | Business plan | Business $8.99 per user a month | Not covered here | Cloud |
| Keeper | Enterprise tier | Amounts not listed | Not covered here | Cloud |
| Passbolt | Pro edition | Pro $4.90 per user a month | Not covered here | Self-hosted |
Nothing was installed or tested. Prices for LastPass and Keeper were not listed on their pricing pages, so none are stated. Dashlane and Zoho Vault were not covered. Reddit discussions were not read. Security audits and breach histories were not compared.
It depends on what you need. Bitwarden has the lowest published price: Teams is $4 per user a month and Enterprise is $6, both billed annually. 1Password Business is $8.99 per user a month with SSO integrations. Keeper and Passbolt suit companies planning for enterprise provisioning or self-hosting.
Passbolt's Community edition is free for unlimited users, but SSO and LDAP are Pro features, per its pricing page. You also have to host it yourself. Bitwarden's business pricing page lists only paid Teams and Enterprise plans, though its import help mentions free organizations capped at two collections.
Bitwarden publishes its source code on GitHub and can be self-hosted with Docker, with self-hosting listed in the Enterprise plan. Passbolt Community is free and open source and is self-hosted only. Check each project's license page before using either for commercial purposes.
Passbolt is a self-hosted password manager, with a free Community edition and a Pro edition at $4.90 per user a month, billed annually, for at least 10 users. Bitwarden's Enterprise plan lists self-hosting, and its open-source page describes running the stack with Docker.
Bitwarden's help says browser extension and desktop users can import directly with their LastPass email and master password, or upload a CSV export in the web vault. It does not import file attachments, and duplicates are not checked. Delete the export file afterwards, since it contains your passwords.
If your team uses SSO with LastPass, an admin first adds Bitwarden's callback URLs to the identity provider's LastPass app, according to Bitwarden's import help. The same help page recommends using a LastPass admin account for the import, and says duplicates are not checked, so run the import once on a test account before moving the whole team.
Kevin Fan is a SaaS founder. He runs Free Instead Of, which tracks free and open-source alternatives to paid software and checks each price and free-plan limit against the vendor's own pages.
Read on 2026-10-26: the pricing or product pages of Bitwarden, 1Password, Keeper, Passbolt and LastPass, Bitwarden's LastPass import help and open-source page, and two comparison articles from other sites. No Reddit threads were read. No product was installed or trialled and no vault was migrated for this page.