{
  "slug": "enpass",
  "category": "password-managers",
  "name": "Enpass",
  "description": "Closed source password manager from Enpass Technologies that stores encrypted vaults on the device and syncs them through the user's own cloud storage, such as iCloud, Dropbox, Google Drive, OneDrive or WebDAV.",
  "website": "https://www.enpass.io",
  "license": null,
  "platforms": [
    "windows",
    "macos",
    "linux",
    "android",
    "ios"
  ],
  "jurisdiction": {
    "code": "US",
    "name": "United States",
    "eyes": "Five Eyes",
    "eu": false,
    "gdpr": false,
    "cloud_act": "provider"
  },
  "pick": false,
  "pick_reason": null,
  "disclosure": null,
  "grade": "D",
  "score": 50,
  "coverage": 100,
  "summary": "Enpass scores 50 out of 100 (grade D) on the password managers criteria. It meets 4 of 7 criteria: no ads or data sales, end-to-end encrypted vault, local or self-hosted option and full export. It does not meet open source, no trackers or telemetry and independent audit. It is based in the United States: Five Eyes member; subject to the US CLOUD Act.",
  "url": "https://privacyratings.com/password-managers/enpass/",
  "markdown": "https://privacyratings.com/password-managers/enpass/index.md",
  "answers": {
    "open_source": {
      "title": "Open source",
      "weight": 3,
      "answer": "no",
      "evidence": null,
      "note": "Closed source."
    },
    "no_trackers": {
      "title": "No trackers or telemetry",
      "weight": 3,
      "answer": "no",
      "evidence": "https://www.enpass.io/privacy-notice/",
      "note": "The privacy notice says the apps collect device and feature usage data, and the website uses Google Analytics and Clearbit."
    },
    "no_ads": {
      "title": "No ads or data sales",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://www.enpass.io/pricing/",
      "note": "Funded by paid plans, and the privacy notice says Enpass never sells personal data."
    },
    "independent_audit": {
      "title": "Independent audit",
      "weight": 2,
      "answer": "no",
      "evidence": null,
      "note": "Holds ISO 27001 and SOC 2 Type II attestations, but no audit report is published."
    },
    "transparency_report": {
      "title": "Transparency report",
      "weight": 2,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    },
    "user_notice": {
      "title": "Tells users about requests",
      "weight": 1,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    },
    "tls": {
      "title": "TLS configuration",
      "weight": 2,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    },
    "security_headers": {
      "title": "Security headers",
      "weight": 1,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    },
    "web_standards": {
      "title": "Modern web standards",
      "weight": 1,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    },
    "e2ee_vault": {
      "title": "End-to-end encrypted vault",
      "weight": 3,
      "answer": "yes",
      "evidence": "https://www.enpass.io/security/",
      "note": "Vaults are encrypted on the device with AES-256, and synced cloud storage only holds encrypted copies."
    },
    "self_host_or_local": {
      "title": "Local or self-hosted option",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://www.enpass.io/security/",
      "note": "Vaults are stored on the device and optionally synced through the user's own cloud storage or WebDAV server."
    },
    "export": {
      "title": "Full export",
      "weight": 1,
      "answer": "yes",
      "evidence": "https://help.enpass.io/personal/latest/all/importing-from-enpass",
      "note": "Exports vaults to JSON. Passkeys cannot be exported."
    }
  },
  "tests": {
    "ssllabs": null,
    "observatory": null,
    "internetnl_web": null,
    "internetnl_mail": null,
    "trackers": [
      {
        "name": "Google Tag Manager",
        "host": "www.googletagmanager.com",
        "effect": "no"
      },
      {
        "name": "HubSpot",
        "host": "js-eu1.hsforms.net",
        "effect": "no"
      },
      {
        "name": "YouTube embed",
        "host": "www.youtube.com",
        "effect": "none"
      }
    ],
    "tested_at": "2026-10-01T06:38:19.112Z"
  },
  "last_modified": "2026-10-01T06:56:31Z"
}