LogMeOnce

LogMeOnce is a password manager that is serious about security and offers more multi-factor authentication (MFA) options than the competition. Some of its key features include a local storage option, a well-designed emergency access portal, and password security reports. That said, its vault user interface isn't quite as slick as the competition's, and we couldn't auto-fill passwords using the Android or iOS apps in testing. Our Editors' Choice winner in the category is Bitwarden, which offers robust free password management.

How Much Does LogMeOnce Cost?

LogMeOnce offers a free service tier with unlimited password storage on all platforms and password syncing for all your devices. The free version of the service also includes limited MFA options (email and Google Authenticator), credit card credential storage, password inheritance, and limited password sharing. Free users can create three secure notes, share up to five credentials, store up to three credit cards, and designate a beneficiary for their app credentials, but they can't pass on their entire account to someone else in the event of their demise.

LogMeOnce offers three tiers of paid password management. The Professional tier is $30 annually, the Ultimate tier is $39 per year, and the Family plan is $59.88 per year. Paying for an annual subscription will usually net you a substantial discount.

Professional subscribers get everything included in the free plan, including the ability to create up to 50 secure notes, share 50 passwords, access password inheritance choices, and their choice of additional MFA options. Ultimate is the best value for personal use, as it includes all of the Professional tier perks and adds unlimited secure notes, unlimited password sharing, unlimited credit card credential storage, and account activity reports. The Family tier gives up to six users the benefits of the Ultimate plan.

Getting Started With LogMeOnce

LogMeOnce offers Chrome, Edge, Firefox, and Safari browser extensions. LogMeOnce also offers desktop clients for Linux, Mac, and Windows, as well as apps for Android and iOS. Getting started is easy: Sign up, create a strong and unique master password, download the apps or extensions, and begin storing your credentials.

LogMeOnce offers a helpful onboarding process to assist those new to password managers. After signing up, new users are greeted by a checklist module that walks them through the browser extension installation and credential creation process.

At this point, we were prompted to download and install additional software called LogMeOnce Tools. On the website, the company states the app is "required to import passwords from your browsers or other password managers, enable secure backups, desktop storage mode, and many other features."

If you do not want to download additional software on your desktop computer, we recommend using the import options in the web vault's Settings menu to import passwords from a file. If you're switching to LogMeOnce from your old password manager and it's not on the list, LogMeOnce accepts imported CSV files, too.

Users who are importing passwords stored in their browser will need to download the separate LogMeOnce Tools app, though. It's a clunky importing solution we haven't seen in competing password managers such as Dashlane or NordPass, which allow users to import browser-stored passwords without installing a desktop app.

We really like that LogMeOnce gives you the choice to store logins locally on your computer, or you can let LogMeOnce handle the storage on their servers. Enpass is the only other password manager that offers users a similar choice, but it doesn't let users store credentials on its servers.

Data Privacy With LogMeOnce

Before we review and test a password manager, we send a list of questions to the password management company inquiring about its privacy and security practices. We want you to have plenty of information about the companies handling your data. We've included LogMeOnce's responses to our questions below:

Have you ever had a security breach?

No, LogMeOnce has not experienced a security breach since our inception in 2011.

What information does the password manager store in unencrypted form?

LogMeOnce does not store any unencrypted information in user vaults. All data stored in user vaults is encrypted to ensure maximum security. Additionally, LogMeOnce employs Zero Knowledge and Zero Trust security principles in its development.

What is the company policy regarding master passwords?

Since 2011, LogMeOnce has been a pioneer in master passwordless authentication. LogMeOnce follows a strict policy of not storing or knowing users' master passwords. This ensures that only the user has access to their own master password, maintaining complete control over their account.

For users who prefer to have a password, LogMeOnce requires a minimum of twelve characters (with twenty characters recommended). Users should choose a strong and unique master password that only they can access; company administrators cannot access users' passwords. Administrators can reset a user password only in the event of a sudden departure. Administrators have full control to enforce password policies and detect, manage, and enforce leaked passwords across the organization.

What is the company policy regarding user data collection and data sales?

LogMeOnce is committed to user privacy and does not sell or share user data with third parties for advertising or other commercial purposes. The company's data collection practices are detailed in its privacy policy, which users can review for more information. Additionally, LogMeOnce further protects user data by complying with the European Union’s General Data Protection Regulation (GDPR).

How does your company protect user data?

LogMeOnce employs industry-standard encryption algorithms to secure user data and establish multiple security layers, ensuring that if one layer fails, others remain intact. The user vault is encrypted at the content level, both in transit and at rest. Additionally, LogMeOnce utilizes advanced security measures, such as multi-factor authentication and hashing algorithms, to further protect user data. By default, LogMeOnce secures user passwords with a 600,000-iteration PBKDF2 hash and a randomly generated salt.

How does your company respond to requests for user information from governments and law enforcement?

First, LogMeOnce does not have access to users' vaults. Second, LogMeOnce cannot access user data to provide it to anyone. Data in a user vault is encrypted with an encryption key that only the user possesses. Third, as a legal entity, LogMeOnce complies with applicable laws and regulations, including subpoenas from U.S. courts, the Department of Justice, and law enforcement agencies. The company will disclose user information only when legally required, which is limited because LogMeOnce does not have access to users' master passwords. LogMeOnce carefully evaluates each request to ensure it aligns with privacy laws and user rights.

LogMeOnce’s answers to our questions were thorough and match the product's privacy policy on the website. We encourage anyone in the market for a new password manager to browse privacy policies to learn more about how companies collect, sell, or store user data.

LogMeOnce's Authentication Options and Security Features

After signing into your vault, it's time to set up your multi-factor authentication (MFA) method. To do so, navigate to the Settings menu, accessible via the gear icon at the bottom of your LogMeOnce vault dashboard.

Activate the appropriate toggle in the MFA section, complete the provided instructions, and sign up. If you have a paid subscription, you get several authentication options, including a few we've never seen before, such as the Selfie authentication method. To log in using the Selfie feature, LogMeOnce users download the mobile app, log into the account, and then select Selfie-2FA from a list of authentication options in your vault's settings menu. LogMeOnce will then send you an image file (not an actual selfie) that you save to your device. LogMeOnce will ask you to pick your designated image from a lineup sent to your mobile device each time you log in.

Other authentication options include email, the Google Authenticator app, hardware security keys, QR codes, SMS, voice call, email, or you can generate X.509 certificates for LogMeOnce. We appreciate LogMeOnce's diverse MFA options, and we hope other password managers will follow their example.

Account Monitoring Tools

In the spirit of increased account protection, LogMeOnce offers a feature called Mugshot on mobile devices, accessible via the Settings menu. Mugshot records audio and video data using the cameras and microphones on your device whenever there's an unsuccessful login attempt using a desktop or mobile device.

You can choose to toggle this feature off, but it is on by default for unsuccessful login attempts. We think using this kind of surveillance is helpful if you suspect someone else is accessing your accounts or devices without your permission; otherwise, we recommend asking apps to collect as little data about you as possible.

Dark Web Monitoring

Dark web monitoring for multiple email addresses is included in the free subscriptions for both Bitwarden and . Other competitors such as 1Password, Dashlane, Keeper, and offer similar tools as part of a premium plan. Identity theft protection and dark web monitoring are paid add-ons with LogMeOnce. The company does allow users to scan one email address for free, so we entered a work-related email address to try out the feature, and it did not turn up any breach results.

Hands On With LogMeOnce

We tested LogMeOnce's functionality using the web vault, Android app, iOS app, and the LogMeOnce browser extension for Google Chrome. The web vault features a blue and orange color scheme against a white background, but you can change it using the dark mode setting. By default, LogMeOnce includes a vault animation every time you open the vault. You can turn these off in the settings menu. An additional web vault module called the Daily Journal summarizes activity within the credential vault each day.

The password strength scoring relies on LogMeOnce's rules for strong user passwords, which require the passwords in the vault to be unique and have a minimum of 15 characters, with at least one lowercase letter, uppercase letter, numeric character, and special character. Using our standard list of test passwords, our password strength score was 94%. Our overall score remained low since we didn't buy the dark web monitoring or identity protection add-ons.

The web vault's sidebar menu lets you access your passwords, secure notes, credit cards, personal info, and shared items. It also has an applications catalog, which allows you to easily add login links to your vault for various popular apps and websites, such as Amazon and Netflix.

Credential Capture and Replay

We could easily get to the passwords we imported and fill in the passwords with one click using the LogMeOnce Chrome browser extension. Generating new credentials and saving them was also easy. Simply click or tap on one of the orange shield icons in the username, email, or password fields, and all of the boxes will fill with your data.

Password Generator

Using the LogMeOnce password generator, users can set a password length of up to 50 characters and choose to require capital and lowercase letters, digits, or symbols. The default password generation length with LogMeOnce is 15 characters, but we recommend increasing that to 20 for extra security.

Password Sharing

To share a credential or other vault item, mouse over it, click the three-dot menu on the right, and select Share. Next, you enter a recipient's email and click the Share button. You can choose whether the recipient can view the password or any notes you've saved in your vault about the website or application related to the credential. You can also choose how long the recipient can access the shared credential.

Storage and Form Filling

In testing, we were able to fill in web forms using the information we provided in the Secure Wallet and Identity sections of the vault, as expected. However, we'd like more options for entering personal information in your LogMeOnce vault. Currently, the vault only stores your address, birth date, credit card information, name, and phone number. Other password managers, like NordPass, allow users to create custom information fields.

Encrypted file storage is available at all service levels with LogMeOnce, but it's not distributed equitably. Free users get a paltry megabyte of storage, while paid users get 1GB to 10GB, depending on their subscription level.

Emergency Access Options

Paid account subscribers can designate emergency contacts who get access to their credentials in the event of their death or other incapacitation. You can choose how long to wait to send the invitation to your designee if you don't want them to get access right away for some reason, up to a month after designation. This is useful in situations where you know you will be incapacitated in the near future and want to ensure that your loved ones will be able to access your accounts, but not too soon. You can also choose how long the invitation is effective.

You can also add a message to your emergency contact to let them know what's happening and why they are getting access to your credentials, how they can log in, and how long they will have access. This is the first time we've seen a password manager provide this kind of message for emergency contacts, and we like the idea and execution.

LogMeOnce Mobile App Experience

For mobile device testing, we used LogMeOnce's app on a Samsung A71 and an iPhone 12 mini. We were able to download, install, and log into the app without any issues, but the app failed to capture new passwords or fill passwords in web forms while using the Google Chrome app or even LogMeOnce's in-app browser on both devices. We had to copy and paste credentials from the app to log in, but that's a clunky solution. 1Password and Dashlane both feature easy-to-use mobile password management apps that can fill the credentials in your browser of choice with a single tap.

Like the other password managers we've reviewed, LogMeOnce's mobile apps support authentication using fingerprint scans. The Android app's user interface is a bit cluttered. The buttons for each vault entry are very large, though their corresponding icons are very small.

Is LogMeOnce Good for Business?

Small business owners managing teams of 25 people or fewer can sign up for LogMeOnce Teams and Small Businesses, which is $48 per year per user. The plan is similar to the LogMeOnce Ultimate personal plan but gives administrators tools for setting up password management policies with the IT department, generates credential audit and compliance reports, offers customizable corporate login pages with your company's branding, and allows administrators to use geofencing to keep track of company-owned devices.

Larger businesses may find a LogMeOnce Business and Enterprise account more useful. It costs $95.88 per user per year and is similar to the less expensive business offering. The plan's core features are similar to those of the less expensive business offering but add single sign-on capabilities and more remote device management capabilities for administrators.

We like that LogMeOnce requires administrators to set up a secondary authentication method on their accounts. The business authentication options are the same as in the personal password management apps.

LogMeOnce Customer Support Options

A frequently requested category for these reviews examines each password manager's level of customer support. We plan to test features in this section more rigorously in the future, but for now, we're noting the kinds of support available for free and premium personal and whether it's easy to cancel your LogMeOnce subscription.

Support Options for Business and Personal Accounts

LogMeOnce's free users can help themselves through technical difficulties by visiting the self-service help page, or they can submit a help request via this form. According to a company spokesperson, paid personal accounts can also get help via a chatbot, but while testing the product, we could not find a premium chat option. There is a bot on the LogMeOnce main website that can create customer support tickets, though.

In contrast, business users have a wide array of customer support options, including priority dedicated engineering support, email responses, phone support, and even Zoom meeting support. It'd be nice to see some of those options offered to paid personal account users, too.

Is Deleting Your LogMeOnce Account Easy?

Deleting your LogMeOnce account is very easy. On your desktop machine, click on the Account button in your vault, then click Erase Account. Choose whether to permanently delete your account or just your vault, and then enter a 6-digit code that comes to the email address associated with your account. Once you enter the code, your account is deleted across all platforms.

Verdict: LogMeOnce Is Serious About Security

LogMeOnce handles the core tasks of a password manager and shows an impressive commitment to security with its wealth of authentication options. We also like that it lets users store credentials locally. The browser extension is easy to use and well designed, and we like the password inheritance tool, too. That said, we couldn't autofill passwords using the mobile apps, making the experience less than smooth. Other apps, such as Editors' Choice winner Bitwarden, offer more in the way of dark web monitoring, too. We like LogMeOnce, but think the product could use a little more polish to become easier to use.