Password managers
Strongbox privacy rating
Open source password manager for iOS and macOS that works with KeePass (KDBX) and Password Safe databases stored locally, in iCloud or in other cloud storage. It supports AutoFill, TOTP, passkeys and YubiKey.
Summary
Strongbox scores 88 out of 100 (grade B) on the password managers criteria. It meets 6 of 7 criteria: open source, no trackers or telemetry, no ads or data sales, end-to-end encrypted vault, local or self-hosted option and full export. It does not meet independent audit. It is based in the United Kingdom: Five Eyes member; GDPR-style data protection law; CLOUD Act data access agreement with the US.
Score 88 out of 100. How scoring works
Criteria
- Yes
-
Yes
No trackers or telemetry Weight 3 of 3
Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?
No third-party trackers, and the app uses no analytics. The website's Plausible analytics are cookieless and aggregate-only.
-
Yes
No ads or data sales Weight 2 of 3
Is the product funded without advertising, ad targeting or selling user data?
Funded by paid Pro subscriptions and lifetime licenses, with no ads.
-
No
Independent audit Weight 2 of 3
Has an independent security or privacy audit been published within the last three years?
No independent audit is published.
-
Yes
End-to-end encrypted vault Weight 3 of 3
Is the vault encrypted on the device before it is synced, with a key the provider does not hold?
Local-only: databases are encrypted KeePass or Password Safe files, and the developer has no sync service.
-
Yes
Local or self-hosted option Weight 2 of 3
Can the vault be kept locally or on your own server?
Databases are local files or files in the user's own cloud storage.
-
Yes
Full export Weight 1 of 3
Can every item be exported in an open format?
Databases are KDBX or Password Safe files, open formats read by many apps.