After reviewing a number of single sign-on (SSO) solutions, we recommend LastPass as the best free SSO solution. We chose LastPass from dozens of SSO companies. To understand how we chose LastPass, you can find our methodology on our best picks page.
LastPass's free version is surprisingly complete and useful given that it costs nothing to use. While you won't have access to the most advanced functionality of the paid SSO's, LastPass still delivers some quality services, including auto-generated passwords, multi-factor authentication and help securing existing passwords. Available for mobile download and as a browser extension, LastPass makes a great solution for a very small business mindful of its security or looking to improve productivity.
While you often get what you pay for, LastPass is a great free alternative to a paid SSO solution if your organization's needs are simple. For a small team, this SSO is more than powerful enough to do the job and do it well.
Already prepared to choose a single sign on solution? Here’s a breakdown of the rest of our coverage:
- Best Single Sign-On Solutions for Business
- OneLogin Review: Best Single Sign-On Solution for Small Business
Editor's Note: Looking for an SSO solution for your business? Use the questionnaire below to be contacted by vendors with additional information:
Ease of Use
LastPass does most of the heavy lifting for you. After you decide on a strong master password, you can begin adding websites and applications as well as auto-generating new passwords. In addition to shiny new passwords, LastPass helps you nail down all of the unsecured credentials your browser may have stored.
Once a website or application is configured and the credentials are confirmed, LastPass can be set to auto fill the proper login information on every subsequent visit. The user portal is well organized and easy to navigate, including tabs for saved sites, secure notes and documents, and auto fill for forms. To make sure you're up to date on security, LastPass also includes a "security challenge," making it easier to spot and resolve potential vulnerabilities.
Encryption: LastPass uses AES-256 bit encryption to protect data. It's all encrypted locally, meaning only you have access to it; not even LastPass knows your passwords, so don't lose your master password.
Multi-factor authentication: Even though it is a free service, LastPass still offers multi-factor authentication (MFA), which is essential for truly secure solutions. Require a second login step for members of your team to add an additional layer of security. MFA is an important feature for businesses, but it's often not included in free software. This helped set LastPass apart from other free solutions.
Auto-generating secure passwords: LastPass's auto-generate feature is useful for updating and securing old login credentials. These randomized passwords are key to avoiding potential vulnerabilities, and running them through the LastPass vault is an easy way to manage passwords across all of your applications.
LastPass is free, but there are also enterprise SSO solutions on offer from the company. Paid plans start with the Teams package, which is $2.50 per user per month. The Enterprise package is the next paid plan at $4 per user per month, and includes directory integration, security policies and SaaS provisioning.
Because it is a free version, LastPass does not offer directory integration unless you subscribe to the Enterprise plan. This means you will have to manually configure LastPass to include the websites and applications you want to access. While this can be a bit of a pain or time-consuming, LastPass still offers a secure and useful solution for a small team wanting to streamline the authentication process or improve security.