Password managers · cost comparison
LastPass vs self-hosted Passbolt: what each actually costs
LastPass on the Teams / Business tier against Passbolt running on the smallest server that fits it. Every figure below is computed from the sizing model and the dated prices at the foot of this page, and includes the part most comparisons leave out: your own time.
At 10 people this one is close enough to go either way. The server costs $12.00 a month against $51.24 for LastPass, but add 1.5 hours a month of your attention and self-hosting lands at $124 and loses. It only wins if your time is genuinely free.
- LastPass
- $51.24per month, Teams / Business
- Self-hosted
- $124server, backups and your time
- Server and backups
- $12.00Starter 2 GB, 2 GB RAM
- 36-month difference
- $3,087 extra to self-host
- Break-even
- neverafter $450 of setup time
The same comparison at every team size
Self-hosting has a floor and almost no slope, while per-seat software has no floor and a steep slope. That is the whole story, and it is why the answer flips somewhere in this table rather than being the same for everyone.
| Team size | LastPass | Self-hosted | Without valuing your time | Server needed | 36-month difference |
|---|---|---|---|---|---|
| solo | $5.12 | $124 | $12.00 | Starter 2 GB (2 GB) | -$4,748 |
| 5 people | $25.62 | $124 | $12.00 | Starter 2 GB (2 GB) | -$4,010 |
| 10 people | $51.24 | $124 | $12.00 | Starter 2 GB (2 GB) | -$3,087 |
| 25 people | $128 | $124 | $12.00 | Starter 2 GB (2 GB) | -$321 |
| 50 people | $256 | $124 | $12.00 | Starter 2 GB (2 GB) | +$4,291 |
| 100 people | $753 | $124 | $12.00 | Starter 2 GB (2 GB) | +$22,193 |
| 250 people | $1,884 | $139 | $26.40 | Starter 4 GB (4 GB) | +$62,363 |
The balance tips in favour of self-hosting at around 50 people.
Where the self-hosted money actually goes at 10 people
| Line item | Per month | What it is |
|---|---|---|
| Server | $10.00 | Starter 2 GB at VPSServer: 1 vCPU, 2 GB RAM, 50 GB disk |
| Backups | $2.00 | Provider snapshots at 20% of the server price. Skipping this is not a saving, it is a bet. |
| Your time | $112 | 1.5 hours a month of updates, upgrades and the occasional broken thing, at $75 an hour |
| Total | $124 | Plus $450 once, for roughly 6 hours of first-time setup |
LastPass at this size costs $51.24 a month. 10 seats at $5.12 each. LastPass lowers the per-user price as teams grow; this is the rate its pricing page showed for a team of this size. This is the annually-billed rate, which is what the vendor's page displayed; paying monthly costs more. The vendor quoted EUR, converted at the dated rate on the methodology page.
What Passbolt needs to run at 10 people
PHP application with MariaDB. GPG key handling makes onboarding slower than Vaultwarden but the audit trail is stronger.
| Resource | Required | How it is derived |
|---|---|---|
| Memory | 1.3 GB | 1 GB for the stack at rest, plus 3 MB per active user, plus 25% headroom |
| Disk | 5.2 GB | 5 GB base, plus 0.02 GB per user |
| vCPU | 1 | The project's own baseline. For this workload memory runs out before the processor does. |
What you give up, stated plainly
- Uptime is now yours. LastPass has an operations team on call. Self-hosted, a failed upgrade at 18:00 on a Friday is your evening.
- Backups only exist if you test restoring them. The $2.00 line above buys snapshots, not a rehearsed recovery.
- Passbolt is a multi-container stack with a database you have to back up yourself. That is why the maintenance line is 1.5 hours a month rather than zero.
- Feature parity is never exact. Passbolt covers the core of what teams use LastPass for; the long tail of integrations and enterprise controls is where the gap shows.
We are not going to tell you to self-host this
At 10 people, LastPass wins on cost once your time is priced at $75 an hour. Self-hosting Passbolt here only makes sense for reasons that are not on the invoice: data residency, avoiding a vendor, or wanting to run the thing yourself. Those are real reasons. Saving money is not one of them at this size.
Where to put Passbolt
1.3 GB of memory and 5.2 GB of disk is what this needs at 10 people. The cheapest plan that fits, among the providers whose prices we have read ourselves, is the Starter 2 GB at VPSServer for $10.00 a month.
We are not claiming this is the cheapest server on the internet. It is the cheapest one we can honestly quote. Hetzner Cloud, Vultr and PikaPods publish prices we could not read programmatically, and Hetzner in particular is usually cheaper per gigabyte of memory than anything quoted above. Price them yourself before you commit.
The VPSServer link above is an affiliate link, run through the same programme as our Kamatera link; VPSServer and Kamatera belong to the same group. If you sign up through it we may earn a commission, but the programme does not state an amount for VPSServer. That never changes the computed costs, which server is chosen, or the conclusion of this page. The sizing model and every price source are published in full.
Passbolt at a glance
| Licence | GNU Affero General Public License v3.0 |
|---|---|
| Written in | PHP |
| GitHub stars | 6,115, checked 2026-09-12 |
| Latest release | v5.15.0 |
| Last commit | 2026-09-11 |
| Ships Docker images | Yes |
| Project | www.passbolt.com · passbolt/passbolt_api |
Get the migration checklist for this tool
A one-page pre-flight list: data export path, sizing, backup plan, and the rollback step most people skip.
Every figure on this page, and where it came from
| Input | Value used | Source | Read on |
|---|---|---|---|
| LastPass Teams / Business | EUR 4.42 per seat up to 50 users, EUR 6.50 per seat above that, per month | vendor pricing page | 2026-09-14 |
| VPSServer Starter 2 GB | $10.00 per month | provider pricing page | 2026-09-21 |
| Exchange rate | 1 EUR = 1.1592 USD | Frankfurter, European Central Bank reference rates | 2026-09-11 |
| Engineer time | $75 per hour | our published assumption | — |
| Passbolt sizing | 1 GB base, 3 MB per user | project documentation | — |
Prices move. If the vendor has changed theirs since 2026-09-14, the figures above are stale and the source links are the authority, not us. How we handle that.