US-incorporated password manager, owned by GoTo (US PE: Francisco Partners + Elliott Management).
ALTERNATIVES
11
CLOUD-ACT · NONE
7
WITH BSI C5
0
FREE TIER
9
DISCLOSURESome links on this site are affiliate links. We may earn a commission at no extra cost to you. Editorial signals and rankings are never influenced by affiliate relationships.
TOP PICKS
Which are the closest LastPass alternatives?
Ordered by feature parity and migration friction, which is weighted higher than feature breadth.
LC
LC-Pass
Germany
EU-SOVEREIGN
★ #1 PICK
German-hosted business password manager from LC by vBoxx GmbH; collections, group sharing, central management, unlimited devices; an EU-hosted 1Password / LastPass alternative.
German-hosted business password manager from LC by vBoxx GmbH; collections, group sharing, central management, unlimited devices; an EU-hosted 1Password / LastPass alternative.
FRANKFURT · DE
Germany
SOVEREIGNTY
A single roll-up of ownership and CLOUD Act exposure.
EU-SovereignThis listingEU/EEA/Switzerland-owned and -operated, with no identified CLOUD Act exposure.
EU-BasedEU-operated, with at most minor or transient US exposure.
EU-HostedEU hosting available, but a US parent or hyperscaler sub-processor creates material exposure.
US-LinkedOperated by a US-incorporated entity, directly subject to US jurisdiction.
AGPLv3 Rust Bitwarden-compatible server by Daniel García (Spain), self-host-only, no company, no telemetry; EU-maintained, no CLOUD Act exposure when run on EU infrastructure.
—
Spain
SOVEREIGNTY
A single roll-up of ownership and CLOUD Act exposure.
EU-SovereignThis listingEU/EEA/Switzerland-owned and -operated, with no identified CLOUD Act exposure.
EU-BasedEU-operated, with at most minor or transient US exposure.
EU-HostedEU hosting available, but a US parent or hyperscaler sub-processor creates material exposure.
US-LinkedOperated by a US-incorporated entity, directly subject to US jurisdiction.
GPLv3 fully-offline desktop password manager (KeePassXC Team, Weimar DE, est. 2016): no cloud, no servers, no telemetry; structurally zero CLOUD Act exposure.
—
Germany
SOVEREIGNTY
A single roll-up of ownership and CLOUD Act exposure.
EU-SovereignThis listingEU/EEA/Switzerland-owned and -operated, with no identified CLOUD Act exposure.
EU-BasedEU-operated, with at most minor or transient US exposure.
EU-HostedEU hosting available, but a US parent or hyperscaler sub-processor creates material exposure.
US-LinkedOperated by a US-incorporated entity, directly subject to US jurisdiction.
For every product we read the public DPA, sub-processors document, hosting region declaration, and corporate ownership records. Each is timestamped. Signals are editorial, re-verified quarterly. We never accept self-attestation.
Type to search products, categories, or alternative-to pages.
↩ openesc close
built locally · no analytics
Strictly necessary cookies (session, security) are always on. Analytics uses Pirsch (cookieless). With your consent, any advertising on the site can be personalised via cookies. Without consent, ads stay generic and untracked, but may still appear.
Read the privacy notice →