Privacy Ratings
Search

Best password managers

A password manager stores the logins to your other accounts, so its code, encryption and audits matter more than its features. Every password manager below is rated on the same public criteria.

  1. 1. Browserpass Grade B Our pick

    Browser extension for pass, the standard Unix password manager. Passwords stay in GPG-encrypted files on your own computer.

    Why it is our pick: For people who want no password company at all. Every password is a GPG-encrypted file in a folder you control, synced with Git if you like, and Browserpass fills it into the browser.

    Score 88/100.

  2. 2. Bitwarden Grade C Our pick

    Open-source, end-to-end encrypted password manager with apps for Windows, macOS, Linux, Android, iOS, the web and browsers, and an option to self-host.

    Why it is our pick: Syncs across desktop, mobile and browser apps and supports sharing with family or a team. End-to-end encrypted, audited every year, and it can be self-hosted.

    Based in the United States (Five Eyes). Score 73/100.

  3. 3. KeePassium Grade A

    Open source KeePass-compatible password manager for iOS and macOS from KeePassium Labs. It opens KDBX databases stored locally or in any Files app provider, with AutoFill, TOTP and YubiKey support.

    Based in Luxembourg. Score 100/100.

  4. 4. KeePassXC Grade A

    Open source, offline password manager for Windows, macOS and Linux that stores passwords in an encrypted KeePass (KDBX) database file. It includes browser integration, TOTP, SSH agent and YubiKey support, with no built-in cloud sync.

    Score 91/100.

  5. 5. KeePassDX Grade B

    Open source password and passkey manager for Android that stores data in encrypted KeePass (KDB and KDBX) database files. It supports autofill, TOTP and biometric unlock, with no built-in cloud service.

    Score 88/100.

  6. 6. Password Safe Grade B

    Open source password manager originally designed by Bruce Schneier that keeps passwords in a Twofish-encrypted local database. Official builds exist for Windows and Linux, with YubiKey support and compatible third-party apps for macOS, Android and iOS.

    Score 88/100.

  7. 7. Strongbox Grade B

    Open source password manager for iOS and macOS that works with KeePass (KDBX) and Password Safe databases stored locally, in iCloud or in other cloud storage. It supports AutoFill, TOTP, passkeys and YubiKey.

    Based in the United Kingdom (Five Eyes). Score 88/100.

  8. 8. Vaultwarden Grade B

    Open source, lightweight server written in Rust that implements the Bitwarden client API for self-hosting. It works with the official Bitwarden apps and extensions and is not affiliated with Bitwarden.

    Score 88/100.

  9. 9. Proton Pass Grade B

    End-to-end encrypted password manager from Proton with apps for desktop, mobile and browsers, built-in email aliases and a TOTP authenticator. The apps are open source.

    Based in Switzerland. Score 80/100.

  10. 10. AliasVault Grade B

    Open source, end-to-end encrypted password manager that also generates email aliases and identities and receives mail through its own email server. It can be used in the hosted cloud or self-hosted.

    Based in the Netherlands (Nine Eyes). Score 75/100.

  11. 11. PaperVault Grade B

    Encrypts secrets into a printable paper vault and splits the decryption key into several paper key cards with Shamir secret sharing. It runs in the browser, as a standalone offline app or from the command line.

    Score 75/100.

  12. 12. 2of3 by Ente Grade C

    Splits a recovery key, password or other secret into three cards with Shamir secret sharing, so that any two cards recover it. It runs entirely in the browser and includes an offline recovery page.

    Based in the United States (Five Eyes). Score 73/100.

  13. 13. LessPass Grade C

    Stateless password manager that derives each site's password from the site name, login and a master password, so no vault is stored or synced. The hosted profile server is closed to new users, who can self-host one.

    Score 71/100.

  14. 14. Pass Grade C

    Command-line password manager that stores each password as a GPG-encrypted file in a folder, with optional git for history and syncing. Many third-party clients and extensions exist.

    Score 69/100.

  15. 15. Padloc Grade C

    Open source, end-to-end encrypted password manager from MaKleSoft with desktop, mobile, browser and web apps, a hosted service and a self-hostable server. The code has had no updates in several years.

    Based in Germany (Fourteen Eyes). Score 68/100.

  16. 16. Passbolt Grade C

    Open source password manager for teams built on OpenPGP end-to-end encryption, with browser extensions, mobile and desktop apps. It can be self-hosted or used as a hosted cloud service.

    Based in Luxembourg. Score 66/100.

  17. 17. Apple Passwords Grade C

    Apple's password manager, built into iOS, iPadOS and macOS as the Passwords app and synced through iCloud Keychain. It stores passwords, passkeys and verification codes, with an iCloud app for Windows.

    Based in the United States (Five Eyes). Score 64/100.

  18. 18. KeePass Grade C

    Offline, open source password manager for Windows that stores passwords in an encrypted local database file. It has no built-in cloud sync, and community ports exist for other platforms.

    Score 63/100.

  19. 19. Psono Grade D

    Open source password manager for teams and companies from esaqa GmbH, with a web client, browser extensions and mobile apps. Vaults are encrypted on the client, and the server can be self-hosted or used as the psono.pw hosted service.

    Based in Germany (Fourteen Eyes). Score 55/100.

  20. 20. Enpass Grade D

    Closed source password manager from Enpass Technologies that stores encrypted vaults on the device and syncs them through the user's own cloud storage, such as iCloud, Dropbox, Google Drive, OneDrive or WebDAV.

    Based in the United States (Five Eyes). Score 50/100.

  21. 21. 1Password Grade D

    Closed source password manager from AgileBits with end-to-end encrypted sync across desktop, mobile, browser and command-line apps.

    Based in Canada (Five Eyes). Score 45/100.

  22. 22. Dashlane Grade D

    Password manager from Dashlane with browser extensions and mobile apps, end-to-end encrypted sync, passkey support and dark web monitoring. The mobile app source code is published under a non-commercial license.

    Based in the United States (Five Eyes). Score 45/100.

  23. 23. Keeper Grade D

    Closed source password manager from Keeper Security with apps for desktop, mobile and browsers. Records are encrypted on the device with per-record keys, and the company also sells secrets and privileged access management for businesses.

    Based in the United States (Five Eyes). Score 45/100.

  24. 24. LastPass Grade D

    Closed source password manager from LastPass US LP with browser extensions, desktop and mobile apps. Vaults are encrypted on the device, and a past breach exposed copies of customer vault backups that also held unencrypted website URLs.

    Based in the United States (Five Eyes). Score 45/100.

  25. 25. NordPass Grade D

    Closed source password manager from Nord Security, the company behind NordVPN, with desktop, mobile and browser apps. Vaults are encrypted on the device with XChaCha20 and synced through NordPass servers.

    Score 45/100.

How this list is made

Entries are ranked with our picks first, then by score against public criteria. Every answer links to evidence, and hosted services are tested automatically. The list updates when ratings change.

Compare all: password managers. Criteria and scoring.

Questions

Are open-source password managers safer?

Open source lets anyone check how vaults are encrypted. Combined with independent audits and end-to-end encryption, it is the strongest evidence of security.