Password managers
Enpass privacy rating
Closed source password manager from Enpass Technologies that stores encrypted vaults on the device and syncs them through the user's own cloud storage, such as iCloud, Dropbox, Google Drive, OneDrive or WebDAV.
Summary
Enpass scores 50 out of 100 (grade D) on the password managers criteria. It meets 4 of 7 criteria: no ads or data sales, end-to-end encrypted vault, local or self-hosted option and full export. It does not meet open source, no trackers or telemetry and independent audit. It is based in the United States: Five Eyes member; subject to the US CLOUD Act.
Score 50 out of 100. How scoring works
Criteria
- No
-
No
No trackers or telemetry Weight 3 of 3
Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?
The privacy notice says the apps collect device and feature usage data, and the website uses Google Analytics and Clearbit.
-
Yes
No ads or data sales Weight 2 of 3
Is the product funded without advertising, ad targeting or selling user data?
Funded by paid plans, and the privacy notice says Enpass never sells personal data.
-
No
Independent audit Weight 2 of 3
Has an independent security or privacy audit been published within the last three years?
Holds ISO 27001 and SOC 2 Type II attestations, but no audit report is published.
-
Yes
End-to-end encrypted vault Weight 3 of 3
Is the vault encrypted on the device before it is synced, with a key the provider does not hold?
Vaults are encrypted on the device with AES-256, and synced cloud storage only holds encrypted copies.
-
Yes
Local or self-hosted option Weight 2 of 3
Can the vault be kept locally or on your own server?
Vaults are stored on the device and optionally synced through the user's own cloud storage or WebDAV server.
-
Yes
Full export Weight 1 of 3
Can every item be exported in an open format?
Exports vaults to JSON. Passkeys cannot be exported.