NordPass
nordpass.comClosed-source password manager from Nord Security, the owner of NordVPN, that encrypts vaults with XChaCha20-Poly1305 and Argon2id.
- Owner
- Nord Security
- Based in
- Lithuania
- Founded
- 2019
- Type
- Standalone app
- Free plan
- Yes
- One user; unlimited passwords with sync; limited simultaneous active sessions
- Personal plan
- Not verified
- Latest audit
- Cure53, 2020
- security review
- On record
- No incidents found
- in our research
- Audited by Cure53 in 2020
- Has a free plan
How NordPass encrypts your vault
From NordPass's security documentation, next to the other 22. NordPass is outlined.
End-to-end encrypted
Encrypted on your device before it's stored (like 20 others)
Cipher: XChaCha20-Poly1305
Yes 21
Optional 1
No 1
Website addresses encrypted
Encrypted with the rest of the item (like 18 others)
Encrypted 19
Readable 1
Not documented 3
Item names encrypted
Titles and folder names are encrypted (like 16 others)
Encrypted 17
Readable 1
Not documented 5
Memory-hard password hashing
Each password guess costs memory as well as time (like 2 others)
Argon2id with a 16-byte salt; memory, iteration and parallelism parameters are not published
Memory-hard 3
Not memory-hard 11
Not documented 7
Doesn't apply 2
Extra secret key
Your master password is the only secret (like 13 others)
Yes 1
No 14
Not documented 4
Doesn't apply 4
What you'll pay
In USD, from NordPass's own pricing page, checked 2026-10-16.
Free plan
Yes
One user; unlimited passwords with sync; limited simultaneous active sessions
Personal plan
Unknown
After the first year
—
Family plan
Unknown
- Business:
- Unknown
- Free trial:
- Unknown
- Money-back:
- 30 days
- About the renewal:
- Vendor notes renewal prices may differ from or be higher than introductory rates; amount not stated.
Audits
Independent security reviews, newest first.
2020 Cure53
Scope: security review. Report access not stated.
Research: 'multiple Cure53 reviews (2020 and later; public summaries)'. Only 2020 is dated.
- Research summary (no single link)
- Open-source appsNoNo
- Open-source serverNoNo
- Run it yourselfNoNo
- Bug bountyYesYes
Certifications: ISO 27001, SOC 2 Type 2
Incidents
Breaches, stolen data and serious flaws on record.
None found in our research. Apps, browsers and passkeys
- WindowsYesYes
- macOSYesYes
- LinuxYesYes
- iPhoneYesYes
- AndroidYesYes
- Web vaultYesYes
- ChromeYesYes
- FirefoxYesYes
- SafariYesYes
- EdgeYesYes
- Saves and fills passkeysYesYes
- Unlock the vault with a passkeyNot verifiedNot verified
- Passkey import and export (CXP)YesYes
Sharing, recovery and extras
- Shared vaultsYesYes
- Share with non-usersNot verifiedNot verified
- Emergency accessNot verifiedNot verified
- 2FA codes built inYesYes
- Breach monitoringYesYes
- Email aliasesNoNo
- File attachmentsYesYes
- SSH keys and agentNot foundNot found
- Command lineNot foundNot found
- Encrypted exportNot verifiedNot verified
- Works offlineYesYes
- Authenticator-app 2FAYesYes
- Security key for 2FAYesYes
- Password health reportYesYes
- CSV exportNot verifiedNot verified
Compare NordPass with
All sources for NordPass (14)
- Research summary of the vendor's pages (no single link)AI-assisted research, spot-checked, checked 2026-10-16
- NordPass securityVendor, checked 2026-10-16
- NordPass support: encryption algorithmVendor, checked 2026-10-16
- Research summary of the vendor's pages (no single link)AI-assisted research, spot-checked, checked 2026-10-16
- NordPass zero-knowledge architectureVendor, checked 2026-10-16
- NordPass Business white paperVendor, checked 2026-10-16
- NordPass pricingVendor, checked 2026-10-16
- NordPass plansVendor, checked 2026-10-16
- NordPass support: Premium vs FreeVendor, checked 2026-10-16
- NordPass support: passkeys FAQVendor, checked 2026-10-16
- NordPass passkeysVendor, checked 2026-10-16
- NordPass featuresVendor, checked 2026-10-16
- NordPass product update, September 2026Vendor, checked 2026-10-16
- NordPass for LinuxVendor, checked 2026-10-16