Password managers
PaperVault privacy rating
Encrypts secrets into a printable paper vault and splits the decryption key into several paper key cards with Shamir secret sharing. It runs in the browser, as a standalone offline app or from the command line.
Summary
PaperVault scores 74 out of 100 (grade C) on the password managers criteria. It meets 7 of 12 criteria: open source, no trackers or telemetry, no ads or data sales, TLS configuration, end-to-end encrypted vault, local or self-hosted option and full export. It partly meets security headers and modern web standards. It does not meet independent audit, transparency report and tells users about requests. Automated tests: SSL Labs grade A+, Mozilla HTTP Observatory grade B+ and Internet.nl website score 86%.
Score 74 out of 100. How scoring works
Criteria
- Yes
-
Yes
No trackers or telemetry Weight 3 of 3
Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?
No telemetry or analytics in the source code, and the website loads no third-party scripts.
-
Yes
No ads or data sales Weight 2 of 3
Is the product funded without advertising, ad targeting or selling user data?
Free open source tool with no ads or paid tiers.
-
No
Independent audit Weight 2 of 3
Has an independent security or privacy audit been published within the last three years?
No independent audit is published.
-
No
Transparency report Weight 2 of 3
Does the provider regularly publish how many government and legal requests it receives and how it responds?
No transparency report or government request policy is published.
-
No
Tells users about requests Weight 1 of 3
Does the provider promise to tell users about requests for their data, unless a court forbids it?
No published policy on notifying users about data requests.
-
Yes
End-to-end encrypted vault Weight 3 of 3
Is the vault encrypted on the device before it is synced, with a key the provider does not hold?
Local-only: secrets are encrypted in the browser and the key is split into printed shards, with no sync service.
-
Yes
Local or self-hosted option Weight 2 of 3
Can the vault be kept locally or on your own server?
Vaults are kept on paper or local media, and the app can be self-hosted or run offline.
-
Yes
Full export Weight 1 of 3
Can every item be exported in an open format?
Vaults and keys are printed or saved to digital media, and any PaperVault instance can unlock them.
Automated tests
-
Yes
TLS configuration Weight 2 of 3
Does the website pass the Qualys SSL Labs test with a grade of A or better?
Grade A+
-
Partial
Security headers Weight 1 of 3
Does the website pass the Mozilla HTTP Observatory test with a grade of A or better?
Grade B+ (80/100+)
-
Partial
Modern web standards Weight 1 of 3
Does the website score 90% or higher on the Internet.nl website test?
Score 86%