Enpass

From Wikipedia, the free encyclopedia

Template:Short description

Page Module:Infobox/styles.css has no content.

Enpass
[[Programmer|DeveloperTemplate:Pluralize from text]]Enpass Technologies Inc.
Template:Infobox software/simple
Operating systemWindows, Windows Phone, macOS, Linux, ChromeOS, iOS, Android, Wear OS, WatchOS
PlatformChrome, Safari, Edge, Firefox and Brave
TypePassword manager
LicenseFreemium
Websiteenpass.io

Script error: No such module "Check for conflicting parameters".

Enpass is a freemium password manager and passkey manager from Enpass Technologies, available for MacOS, Windows, iOS, Android and Linux,[1] with browser extensions for all major browsers,[2][3] and pricing plans for both personal use and business.[4][5][6]

Enpass stores and syncs encrypted password vaults on users’ personal cloud accounts, or within a business's internal cloud infrastructure, [2][7][8] as opposed to keeping vault data on company servers.[9][10] The app is designed to comply with data sovereignty and data security regulations such as GDPR.[11]

Functionality

Features include[12][13][14]:

Enpass vaults are usually stored on Google Drive, Box, Dropbox, OneDrive, iCloud, or on business's Microsoft 365 or Google Workspace storage. Enpass also supports self-hosted WebDAV solutions such as ownCloud and Nextcloud, as well as storing data on device and syncing via via Wi-Fi or folder sync.[18][19][20]

Availability

Enpass is available in four editions: Personal, Family, Business, and Enterprise.[21][22] The Business and Enterprise plans include administrative controls, identity provider integration, security audit tools, security event logging, access recovery, and password-less vault sharing between invited co-workers.[23]

Encryption and Whitepaper

The entire database is protected using AES-256 encryption. SQLCipher is used to technically implement the AES-256 encryption.[24]

In addition, the encryption key is derived from the master password using PBKDF2-HMAC-SHA512 with 320,000 iterations, which makes brute-force attacks extremely difficult.[24]

Enpass provides official security whitepapers[25] that explain the security architecture and encryption methods in more detail. These whitepapers are available for download on the Enpass website and are part of the official documentation on security and encryption.

Security Criticism

2024 Evaluation of Password Checkup Tools

A 2024 study by Hutchinson et al. examined the “password checkup” features of 14 password managers, including Enpass, using weak, breached, and randomly generated passwords. The authors found that the evaluated products reported weak and compromised passwords inconsistently and sometimes incompletely. No manager successfully flagged all known breached passwords. The study concludes that such inconsistencies may give users a false sense of security.[16]

2025 DOM-based Extension Clickjacking

Security researcher Marek Tóth presented a vulnerability in browser extensions of several password managers, including Enpass, at DEF CON 33 on August 9, 2025. In their default configurations, these extensions were shown to be exposed to a DOM-based extension clickjacking technique, allowing attackers to exfiltrate user data with just a single click.[26] The affected password manager vendors were notified in April 2025. According to Tóth, Enpass version 6.11.6 (released August 13, 2025) addressed this issue.[27]

See also

References

Page Template:Reflist/styles.css has no content.

  1. ^ Page Module:Citation/CS1/styles.css has no content."Download Password Manager". Enpass. Retrieved 2025-11-21.
  2. ^ a b Page Module:Citation/CS1/styles.css has no content.Graw, Mike Jennings; Hale, Craig (2021-03-23). "Enpass Review: Pros & Cons, Features, Ratings, Pricing and more". TechRadar. Retrieved 2024-09-30.
  3. ^ Page Module:Citation/CS1/styles.css has no content."Enpass - Download Password Manager". Enpass. Archived from the original on 2024-10-02. Retrieved 2024-09-30.
  4. ^ Page Module:Citation/CS1/styles.css has no content.Millares, Luis (2024-02-05). "Enpass Review 2024: Pricing, Security, Pros & Cons". TechRepublic. Retrieved 2024-09-30.
  5. ^ Page Module:Citation/CS1/styles.css has no content."Pricing & Free Trial". Enpass. Archived from the original on 2022-04-08. Retrieved 2024-09-30.
  6. ^ Page Module:Citation/CS1/styles.css has no content."Pricing for Businesses". Enpass. Retrieved 2024-09-30.
  7. ^ Page Module:Citation/CS1/styles.css has no content."Syncing and accessing Enpass data across devices". support.enpass.io. Retrieved 2024-09-30.
  8. ^ Page Module:Citation/CS1/styles.css has no content."Enpass Business integration with Microsoft 365 and Google Workspace". support.enpass.io. Retrieved 2026-02-02.
  9. ^ Page Module:Citation/CS1/styles.css has no content.Singh, Karandeep (2023-01-03). "Why Enpass is my perfect LastPass replacement password manager". Android Police. Retrieved 2024-09-30.
  10. ^ Page Module:Citation/CS1/styles.css has no content."About". Enpass. Retrieved 2026-05-29.
  11. ^ Page Module:Citation/CS1/styles.css has no content."Enpass Compliance & Assurance | Enpass Help". help.enpass.io. Retrieved 2026-05-29.
  12. ^ Page Module:Citation/CS1/styles.css has no content."Why Enpass? | Enpass Help". help.enpass.io. Retrieved 2026-05-29.
  13. ^ Page Module:Citation/CS1/styles.css has no content."Enpass Key Features". Enpass. Retrieved 2026-05-29.
  14. ^ Page Module:Citation/CS1/styles.css has no content.Gilbertson, Scott. "The Password Managers You Should Use Instead of Your Browser". Wired. ISSN 1059-1028. Retrieved 2026-05-29.
  15. ^ Page Module:Citation/CS1/styles.css has no content.Thorp-Lancaster, Dan (28 December 2018). "Enpass 6 rolls out to all with multiple vaults, new design, and much more". Windows Central. Mobile Nations. Retrieved 23 January 2019.
  16. ^ a b Page Module:Citation/CS1/styles.css has no content.Hutchinson, Adryana; Munyendo, Collins W.; Aviv, Adam J; Mayer, Peter (2024-05-11). "An Analysis of Password Managers' Password Checkup Tools". Extended Abstracts of the CHI Conference on Human Factors in Computing Systems. CHI EA '24. New York, NY, USA: Association for Computing Machinery. pp. 1–7. doi:10.1145/3613905.3650741. ISBN 979-8-4007-0331-7.
  17. ^ Page Module:Citation/CS1/styles.css has no content."SQLCipher". GitHub. Archived from the original on 2017-07-01. Retrieved 2019-02-22.
  18. ^ Page Module:Citation/CS1/styles.css has no content."A Full Enpass Review for 2024 — Features, Pricing, Pros and Cons". The Tech Report. 2024-09-13. Retrieved 2024-09-30.[dead link]
  19. ^ Page Module:Citation/CS1/styles.css has no content."Using folder sync in Enpass". support.enpass.io. Retrieved 2024-09-30.
  20. ^ Page Module:Citation/CS1/styles.css has no content."Offline syncing via Wi-Fi | Enpass Help". help.enpass.io. Retrieved 2026-05-29.
  21. ^ Page Module:Citation/CS1/styles.css has no content."Pricing & Free Trial". Enpass. Archived from the original on 2022-04-08. Retrieved 2024-10-28.
  22. ^ Page Module:Citation/CS1/styles.css has no content."Pricing for Businesses". Enpass. Retrieved 2024-10-28.
  23. ^ Page Module:Citation/CS1/styles.css has no content."Enpass Key Features". Enpass. Retrieved 2026-05-29.
  24. ^ a b Page Module:Citation/CS1/styles.css has no content."Security and Data Encryption".
  25. ^ Page Module:Citation/CS1/styles.css has no content."Enpass Security Whitepaper" (PDF).
  26. ^ Page Module:Citation/CS1/styles.css has no content.Benedict Collins (2025-08-22). "Multiple top password managers vulnerable to password stealing clickjacking attacks - here's what we know". TechRadar. Retrieved 2025-11-09.
  27. ^ Page Module:Citation/CS1/styles.css has no content.Tóth, Marek (2025-08-09). "DOM-based Extension Clickjacking: Your Password Manager Data at Risk". marektoth.com. Retrieved 2025-11-09.

Template:Password managers

Retrieved from "https://cosmopedia.co/index.php?title=Enpass&oldid=14870780"