LastPass
title: LastPass radar_quadrant: Platforms radar_ring: Adopt radar_position: inner source_url: https://www.lastpass.com
LastPass is a cloud-based password manager and credential vault available as a browser extension, mobile app, and CLI. It stores passwords, secure notes, and form-fill data in an encrypted vault synced across devices. The command-line client, lastpass-cli (lpass), exposes vault contents to shell scripts and automation.
LastPass serves as the credential backend for the lpass toolchain on this radar. lpassrc uses the lpass CLI to store shell environment variables as Secure Notes under a <repo-name>/env naming convention, and loads a global/env note at shell startup via ~/.bash_profile. This makes LastPass the single source of truth for both cross-project credentials and per-project secrets.
lpass-env, now on Hold, was an earlier read-only wrapper around the same CLI. Varlock served the equivalent role for 1Password and is the intended predecessor being superseded by the lpassrc stack.
The lastpass-cli spawns a background agent on first login. All subsequent vault operations use the agent for decryption without re-prompting for the master password. The agent does not survive a reboot; one manual lpass login is required after each restart. Setting LPASS_AGENT_TIMEOUT=0 keeps the agent alive for the full uptime of the machine.
LastPass is placed in Adopt at inner position. It is the active credential vault underpinning the entire lpass toolchain: lpassrc (Trial/inner) depends on it for all secret storage and retrieval, and the auto-load pattern runs at every shell startup. Adopt reflects that this is the vault in active daily use with no intent to replace it in the near term.
The long-term migration path leads toward Infisical (Assess/inner) as a self-hosted secrets platform once a more structured multi-user or audit-log requirement emerges. Until that gate is reached, LastPass remains the practical choice: cross-platform sync, strong CLI support, and an established vault of credentials.
