LastPass’s contract framework consists of two Terms of Service documents. The legal centre page explains which applies: “Any purchases directly from LastPass for business use are subject to the Terms of Service for Business Customers”, the Terms of Service for Personal Use apply where Free, Premium or Families versions are used, and purchases through an authorised partner are directed to separate terms.[1] The Business Terms, together with exhibits, order forms, policies and addenda, form the “Agreement” between the customer and “the applicable LastPass contracting entity”, and the accepting individual represents that they have authority to bind the customer.[1] The contracting entities page states that the entity, the location for resolving disputes and the governing law depend on the customer’s location and the services ordered.[3]
Editions
For this article the “editions” are the two agreements.
| Document | Applies to | Version shown |
|---|---|---|
| Terms of Service for Business Customers | Direct purchases for business use (Teams, Business, Business Max) | September 2026 (2026.v1.0) |
| Terms of Service for Personal Use | Free, Premium and Families | July 2025 (2025.v1.0) |
Neither page gives a day of the month for its last update, so the catalog records the effective date as null for these two contracts.[1] [2]
Metrics
The agreements do not define a licence metric. Quantities come from the Order and from the plan: the Business Terms refer to “the number of users” against “your purchased quantity”, and the Personal Terms to “the number of users accessing your account”.[1] [2] Metric definitions are found on the pricing page and in the Help Center, as described in the other LastPass articles.
Counting and floors
Use rights
- Business use. The customer may access and use the Services “for business and professional purposes”, is responsible for all users that access the Services through its account, and must ensure individual user accounts are not shared among multiple individuals. Affiliates that use the Services bind the customer to warrant its authority over them.[1]
- Personal use. The Services are for the user’s “own personal and individual use”, and individual accounts may not be shared.[2]
- Limitations. Users must not reverse engineer the Services, abuse networks or accounts, upload unlawful material, market or resell the Services to a third party, harvest user data without lawful basis or infringe third-party rights. The Business Terms add that LastPass may immediately suspend access for breach of the limitations on use, the proprietary rights section, the content and accounts sections or the compliance with laws section.[1]
- Confidential Services Information. LastPass may disclose non-public information such as pricing, sales data, product roadmap and security and audit reports; the customer must keep it confidential and share it only with employees, subcontractors and consultants who need to know.[1] Pricing documents received under an Order are therefore not freely shareable with third parties such as consultants beyond that group.
Orders, fees and counting
Orders are placed through LastPass’s ordering processes and take effect on the earlier of the online submission date or the signature date; each Order is treated as separate and independent. A Purchase Order is required for non-credit-card transactions over USD 25,000 or equivalent unless the customer does not use Purchase Orders.[1] Fees are payable within 30 days of the invoice date or at purchase online; LastPass may periodically review the account and charge additional fees if the number of users exceeds the purchased quantity; and payments are final and non-refundable except where otherwise specified. LastPass does not submit invoices through customer procure-to-pay portals or EDI.[1] The Personal Terms contain the same additional-fee review clause and state that payments are final and non-refundable.[2]
Virtualization and partitioning
Not applicable.
Cloud and BYOL
Not applicable.
Programs
Term, renewal and termination (business)
The right to access the Services runs from the Effective Date to the end of the Initial Term on the Order, then renews for twelve-month Renewal Terms unless the Order says otherwise or either party gives at least 30 days’ notice of non-renewal. Either party may terminate for uncured material breach after 30 days’ notice or for insolvency where law permits; LastPass may suspend immediately for breach of specified sections.[1] On termination the account may be converted to a free or basic version at LastPass’s discretion, and on request the customer receives up to 30 days of limited access to retrieve or delete data; if reinstatement is allowed, the customer is bound by the then-current Agreement and the renewal date that applied at termination.[1] See Auto-renewing Renewal Term (Business). The Help Center confirms that all purchased licences renew, including unused ones, and that a refund is not provided on cancelling a prepaid subscription.[4] [5]
Price changes and promotions
Sales, promotions and discounted prices are temporary and in LastPass’s discretion, and may expire at renewal. LastPass may update prices at any time, with changes effective at the end of the then-current subscription term, notified by website publication, email, quote or invoice.[1] Personal price changes take effect at the next renewal.[2]
Free services and trials
A right to use free Services is not guaranteed for any period, and LastPass may limit or terminate free versions at its sole discretion. Trial or promotional access ends at the earlier of the Order term, 30 days after initial access if no date is given, or conversion to paid; during a trial the Services are provided as is without warranty or indemnity.[1] The pricing FAQ gives 30 days for personal and 14 days for business trials.[6] See Free trial and LastPass Free.
Assignment and change of control
Neither party may assign without the other’s consent, which must not be unreasonably withheld, but either party may on notice assign the Agreement to an affiliated entity or as part of a corporate reorganisation, merger, acquisition, divestiture or sale of all or substantially all of the relevant business or assets. The Agreement binds successors and assigns.[1]
AI features
Certain features may incorporate AI or machine learning and are identified in the Services. The customer is solely responsible for determining whether its use of AI features is subject to laws governing artificial intelligence. LastPass states that Content is not accessible to it or its third-party AI providers and so is not used to train AI models, that it will not configure AI features to take autonomous account-level actions without prior consent, and that outputs may contain inaccuracies the customer must validate.[1]
Changes to the terms
LastPass may update the Terms, identified by the last updated date, and will make a reasonable effort to give at least 30 days’ notice of material changes; continued use is acceptance. It will give at least 30 days’ prior notice of any material change to data handling practices. If it discontinues a Service, access ends with a pro rata refund of unapplied prepaid fees.[1]
Order of precedence
A conflict between an executed Order, any Data Processing Addendum and the Terms is resolved in that order, only for the Services in the Order; documents submitted by the customer do not modify the Agreement.[1]
No software-audit clause
The Business and Personal Terms reviewed do not contain a licence audit or software verification clause of the kind found in installed-software agreements. The only compliance mechanism relating to quantity is the periodic account review and additional-fee clause. The word “audit” appears only in the context of security and audit reports and the vendor’s independent third-party audits.[1] [2] The Business Terms also include a clause under which the customer agrees not to bring or take part in class actions against LastPass and to bring claims on an individual basis.[1]
Out of scope
This article does not summarise the warranty, indemnification and limitation of liability sections, the Data Processing Addendum or the Trust and Compliance Center material, the contracting entities table, or partner and marketplace terms. It does not address litigation or regulatory matters concerning security incidents, which are outside licensing coverage.