NordPass

NordPass was developed by the same cybersecurity team [5] that created NordVPN, a VPN service[6] provider.[7]

• NordPass is built with the xChaCha20 encryption algorithm.[8]
• NordPass has zero-knowledge architecture,[9] meaning that passwords are encrypted on the user's device and only then stored in the cloud. This way, NordPass cannot view, edit, or in any other way manage users’ passwords.[10]
• An encrypted vault acts as a digital safe where users can store login credentials, secure notes, and credit card details.[11]
• The Master Password serves as the key that unlocks the encrypted vault.[12] Master Password protects the user's passwords,[13] but it's up to the user to make it strong.[14]
• NordPass provides two-factor authentication (2FA).[15] It supports multiple authentication apps, including Google Authenticator, Duo, and Authy. However, it lacks 2FA key support.[16]

An independent researcher, Cure53, in February 2020 conducted an audit and confirmed the security of NordPass password manager.[17]

NordPass is based in Panama, which has no mandatory data retention laws and does not participate in the Five Eyes or Fourteen Eyes alliances.[18][19] This means that the company [20] isn't required by law to keep logs or share them with governments.[21]

NordPass is a relatively new player in the password manager market[22] and was named “new kid on the block”.[23] Some tech review sites have noticed that it still lacks some features.[24] According to PC Mag, “it offers very few advanced features such as form-filling, folders, security monitoring, or 2FA key support”.[25]

NordPass has conducted a number of research studies.[26][27][28] NordPass has also been mentioned on many influential tech websites, such as Wired, Forbes, Business Insider, and TechRadar.