Password managers
Password Safe privacy rating
Open source password manager originally designed by Bruce Schneier that keeps passwords in a Twofish-encrypted local database. Official builds exist for Windows and Linux, with YubiKey support and compatible third-party apps for macOS, Android and iOS.
Summary
Password Safe scores 88 out of 100 (grade B) on the password managers criteria. It meets 6 of 7 criteria: open source, no trackers or telemetry, no ads or data sales, end-to-end encrypted vault, local or self-hosted option and full export. It does not meet independent audit. Automated tests: Mozilla HTTP Observatory grade B.
Score 88 out of 100. How scoring works
Criteria
-
Yes
Open source Weight 3 of 3
Is all the source code needed to run the product public?
Artistic License 2.0.
-
Yes
No trackers or telemetry Weight 3 of 3
Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?
No telemetry or analytics in the source code.
-
Yes
No ads or data sales Weight 2 of 3
Is the product funded without advertising, ad targeting or selling user data?
Volunteer project funded by donations, with no ads.
-
No
Independent audit Weight 2 of 3
Has an independent security or privacy audit been published within the last three years?
No independent audit is published.
-
Yes
End-to-end encrypted vault Weight 3 of 3
Is the vault encrypted on the device before it is synced, with a key the provider does not hold?
Local-only: the database is encrypted with Twofish using a key derived from the master password.
-
Yes
Local or self-hosted option Weight 2 of 3
Can the vault be kept locally or on your own server?
The database is a local file.
-
Yes
Full export Weight 1 of 3
Can every item be exported in an open format?
Exports to XML and plain text.