NordPass is a proprietary password manager launched in 2019. It is meant to help its users to organise their passwords and secure notes,[1] keeping them in a single place — an encrypted password vault.[2] This service comes in both free and premium versions, though the free version lacks much of the paid functionality like multi-device login.[3]
Type | Password management service |
---|---|
Launch date | 2019 |
Platform(s) | |
Operating system(s) | |
Status | Active |
Website | nordpass |
NordPass is a cross-platform application available on Windows, macOS, Linux, Android, and iOS. It also offers browser extensions on Google Chrome, Mozilla Firefox, Microsoft Edge, Brave, Opera, and Safari.[4]
History
NordPass was developed by the same cybersecurity team [5] that created NordVPN, a VPN service[6] provider.[7]
Security features
- NordPass is built with the ChaCha20 encryption algorithm specifically the XChaCha variant.[8]
- NordPass has zero-knowledge architecture,[9] meaning that passwords are encrypted on the user's device and only then stored in the cloud. This way, NordPass cannot view, edit, or in any other way manage users’ passwords.[10]
- An encrypted vault acts as a digital safe where users can store login credentials, secure notes, and credit card details.[11]
- The Master Password serves as the key that unlocks the encrypted vault.[12] Master Password protects the user's passwords,[13] but it's up to the user to make it strong.[14]
- NordPass provides two-factor authentication (2FA).[15] It supports multiple authentication apps, including Google Authenticator, Duo, and Authy.
- In its latest release it includes FIDO U2F support. This means that it will now work with YubiKey and other third party security keys.[16] Though this protection is embedded at the service login instead of the app which is a weakness.
- NordPass provides a Secure Password Sharing Feature which allows for the secure sharing of passwords between NordPass users.[17]
- NordPass can scan data breaches for password leaks.[18]
- NordPass can identify weak, reused, or old passwords which it divides into Weak, Reused, and Old.[19]
An independent cybersecurity firm, Cure53, in February 2020 conducted an audit and confirmed the security of NordPass password manager.[20]
NordPass is based in Panama, which has no mandatory data retention laws and does not participate in the Five Eyes or Fourteen Eyes alliances.[21][22] This means that the company[23] isn't required by law to keep logs or share them with governments.[24]
Reception
NordPass is a relatively new player in the password manager market[25] and was named “new kid on the block”.[26] Some tech review sites have noticed that it still lacks some features.[27] According to PC Mag, “it offers very few advanced features such as form-filling, folders, security monitoring, or 2FA key support”.[28]
NordPass has conducted a number of research studies.[29][30][31] NordPass has also been mentioned on many influential tech websites, such as Wired, Forbes, Business Insider, and TechRadar.
References
- ↑ "You Need a Password Manager. Here Are the Best Ones". Wired. ISSN 1059-1028. Retrieved 2020-10-12.
- ↑ "What Is a Password Vault? - Definition from Techopedia". Techopedia.com. Retrieved 2020-10-12.
- ↑ "NordPass Review | NordVPN's fully featured entry into the password manager world". ProPrivacy.com. Retrieved 2020-10-12.
- ↑ "Browsers, which support NordPass". NordPass. Retrieved 2020-10-12.
- ↑ "NordVPN Officially Releases Its New Password Manager NordPass". www.prnewswire.com. Retrieved 2020-10-12.
- ↑ Zhang, Zhensheng; Zhang, Ya-Qin; Chu, Xiaowen; Li, Bo (2004-05-01). "An Overview of Virtual Private Network (VPN): IP VPN and Optical VPN". Photonic Network Communications. 7 (3): 213–225. doi:10.1023/B:PNET.0000026887.35638.ce. ISSN 1572-8188. S2CID 24162788.
- ↑ Marshall, Adam (October 5, 2020). "The best VPN service 2020". TechRadar. Retrieved 2020-10-12.
- ↑ "XChaCha20 Encryption". NordPass. Retrieved August 27, 2021.
- ↑ "Zero-Knowledge Encryption: Extra Password Safety". nordpass.com. Retrieved 2020-10-12.
- ↑ "NordPass Review | NordVPN's fully featured entry into the password manager world". ProPrivacy.com. Retrieved 2020-10-12.
- ↑ "NordPass Review 2020: Is NordVPN's Password Manager OK?". SafetyDetectives. Retrieved 2020-10-12.
- ↑ "Master Password". nordpass.com. Retrieved 2020-10-12.
- ↑ "Master Password - an overview | ScienceDirect Topics". www.sciencedirect.com. Retrieved 2020-10-12.
- ↑ "Master Password". nordpass.com. Retrieved 2020-10-12.
- ↑ "What you need to know about 2FA". nordpass.com. Retrieved 2020-10-12.
- ↑ "Security Key". NordPass. Retrieved August 27, 2021.
- ↑ "Secure Password Sharing". NordPass. Retrieved August 27, 2021.
- ↑ "Password Breach Report". NordPass. Retrieved August 27, 2021.
- ↑ "Password Health Report". NordPass. Retrieved August 27, 2021.
- ↑ ""Cure53" Audited NordPass and Verified Is Robust Security | TechNadu". www.technadu.com. Retrieved 2020-10-12.
- ↑ Gewirtz, David. "Inside a VPN service: How NordVPN conducts the business of Internet privacy". ZDNet. Retrieved 2020-10-12.
- ↑ "Five Eyes, Nine Eyes, and 14 Eyes (In-Depth Explanation)". Restore Privacy. Retrieved 2020-10-12.
- ↑ Gewirtz, David. "Inside a VPN service: How NordVPN conducts the business of Internet privacy". ZDNet. Retrieved 2020-10-12.
- ↑ "How can I protect myself from government snoopers?". the Guardian. 2016-11-24. Retrieved 2020-10-12.
- ↑ "Password Management Market Size, Share | Industry Report 2018-2025". www.grandviewresearch.com. Retrieved 2020-10-12.
- ↑ "NordPass Review - New Kid on the Block - Updated 2020". Cloudwards. Retrieved 2020-10-12.
- ↑ "NordPass Premium". PCMag UK. 2020-03-17. Retrieved 2020-10-12.
- ↑ "NordPass Premium Review". PCMAG. Retrieved 2020-10-12.
- ↑ Fearn, Nicholas (July 29, 2020). "10 billion records, including personal details, exposed by unsecured databases". Tom's Guide. Retrieved 2020-10-12.
- ↑ Whitney, Lance (September 22, 2020). "How to create a secure username". TechRepublic. Retrieved 2020-10-12.
- ↑ Williams, Shannon. "The most popular usernames of all time revealed". securitybrief.co.nz. Retrieved 2020-10-12.