This article needs additional citations for verification .(October 2022) |
The list below includes the names of password managers with dedicated Wikipedia articles.
Provider | Cost | Import from browsers | Import from competitors | Multi-factor authentication | Export data | Automatic password capture | Automatic password replay | Forms | Multiple form-filling identities | Actionable password strength report | Secure sharing | Digital legacy | Portable edition | Application passwords | Browser menu of logins | Application-level encryption | Secure password sharing |
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
1Password | $3–5 (monthly) | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
Bitwarden | No cost or $10 (yearly) | Yes | Yes | Yes, 2FA protection on account is free. 2FA generation is a premium feature. [2] | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
Dashlane | No cost or $4–6 (monthly) | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
Enpass | No cost or $12 (yearly) | No | Yes | Yes | Yes | Yes | No | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
GNOME Keyring | No cost | ? | ? | ? | ? | ? | ? | ? | ? | ? | ? | ? | ? | ? | ? | ? | ? |
Intuitive Password | No cost or $2 (monthly) | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Depends | Yes | Yes | Yes | Yes | Yes |
KeePass | No cost | Yes | Yes | Yes (plugin) | Yes | Yes | Yes | Yes | Yes | Yes | Optional (requires add-on server) | Depends | Yes | Yes | Yes | Yes | ? |
KeePassXC, KeePassDX | No cost | Yes | Yes | Yes (built-in) | Yes | Yes | Yes | Yes | Yes | Yes | No | Depends (external key share) | Yes | Yes | Yes | Yes | No |
Keeper | No cost or $30 (yearly) | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
KeeWeb | No cost | No | Yes | No | Yes | Yes | Yes | Yes | Yes | No | Yes | Depends | Yes | Yes | Yes | Yes | ? |
KWallet | No cost | ? | ? | ? | ? | ? | ? | ? | ? | ? | ? | ? | ? | ? | ? | ? | ? |
LastPass | No cost or $36 (yearly) | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
Microsoft Autofill | No cost | ? | Yes | Yes | Yes | ? | ? | ? | ? | ? | ? | ? | ? | ? | ? | ? | ? |
Myki (discontinued by April 10, 2022 [1] ) | No cost | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Depends | Yes | Yes | No | Yes | Yes | Yes | Yes | Yes [3] |
NordPass | No cost or $5 (monthly) or $36 (yearly) | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No | No | No | Yes | Yes | Yes |
Norton Password Manager | No cost | Yes | Yes | No | Yes | Yes | Yes | Yes | Yes | No | No | No | Yes (iOS – US only) | Yes | Yes | Yes | ? |
pass | No cost | Yes (third-party) | Yes (third-party) | Yes | Yes | Yes (third-party) | Yes (third-party) | Yes (third-party) | Yes | Yes (third-party) | Yes | Depends | Yes | Yes | Yes (third-party) | Yes | ? |
Passwords (Apple) | No cost | No | No | Yes | Yes | ? | ? | Yes | ? | Yes | Yes | Yes | Yes | ? | ? | ? | ? |
Pleasant Password Server | No cost or $10 (monthly) | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | ? |
Proton Pass | No cost or $4.99 (monthly) or $23.88 (yearly) | Yes | Yes | Yes, 2FA protection on account is free. 2FA generation is a premium feature. [4] | Yes | Yes | Yes | Yes | Yes | Yes | Yes | No | No | Yes | Yes | Yes | Yes |
RoboForm | No cost or $23.88 (yearly) | ? | ? | ? | ? | ? | ? | ? | ? | ? | ? | ? | ? | ? | ? | ? | ? |
SafeInCloud | No cost or $4.99 (mobile, individual) or $9.99 (mobile, family sharing) | ? | ? | ? | ? | ? | ? | ? | ? | ? | ? | ? | ? | ? | ? | ? | ? |
SecureSafe | No cost or $1.5 - 12 (monthly) [5] | ? | ? | Yes | ? | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | Yes | ? |
Computer security is the protection of computer systems and networks from threats that may result in unauthorized information disclosure, theft of hardware, software, or data, as well as from the disruption or misdirection of the services they provide.
CISSP is an independent information security certification granted by the International Information System Security Certification Consortium, also known as ISC2.
The following tables compare general and technical information for a number of notable webmail providers who offer a web interface in English.
In cryptography, key stretching techniques are used to make a possibly weak key, typically a password or passphrase, more secure against a brute-force attack by increasing the resources it takes to test each possible key. Passwords or passphrases created by humans are often short or predictable enough to allow password cracking, and key stretching is intended to make such attacks more difficult by complicating a basic step of trying a single password candidate. Key stretching also improves security in some real-world applications where the key length has been constrained, by mimicking a longer key length from the perspective of a brute-force attacker.
Password strength is a measure of the effectiveness of a password against guessing or brute-force attacks. In its usual form, it estimates how many trials an attacker who does not have direct access to the password would need, on average, to guess it correctly. The strength of a password is a function of length, complexity, and unpredictability.
A password manager is a computer program that allows users to store and manage their passwords for local applications or online services such as web applications, online shops or social media. A web browser generally has a built in version of a password manager. These have been criticized frequently as many have stored the passwords in plaintext, allowing hacking attempts.
Myki, stylised as myki, is a reloadable credit card-sized contactless smart card ticketing system used for electronic payment of fares on most public transport services in Melbourne and regional Victoria, Australia. Myki replaced the Metcard ticketing system and became fully operational at the end of 2012.
LastPass is a password manager application. The standard version of LastPass comes with a web interface, but also includes plugins for various web browsers and apps for many smartphones. It also includes support for bookmarklets.
KeePass Password Safe is a free and open-source password manager primarily for Windows. It officially supports macOS and Linux operating systems through the use of Mono. Additionally, there are several unofficial ports for Windows Phone, Android, iOS, and BlackBerry devices, which normally work with the same copied or shared (remote) password database. KeePass stores usernames, passwords, and other fields, including free-form notes and file attachments, in an encrypted file. This file can be protected by any combination of a master password, a key file, and the current Windows account details. By default, the KeePass database is stored on a local file system.
1Password is a password manager developed by the Canadian software company AgileBits Inc. It supports multiple platforms such as iOS, Android, Windows, Linux, and macOS. It provides a place for users to store various passwords, software licenses, and other sensitive information in a virtual vault that is locked with a PBKDF2-guarded master password. By default, the user’s encrypted vault is hosted on AgileBits’ servers for a monthly fee.
SecureSafe is a cloud based software-as-a-service with a password safe, a document storage and digital spaces for online collaboration. The service is developed based on the principles of security by design and privacy by design.
Proton Mail is a Swiss end-to-end encrypted email service founded in 2013 headquartered in Plan-les-Ouates, Switzerland. It uses client-side encryption to protect email content and user data before they are sent to Proton Mail servers, unlike other common email providers such as Gmail and Outlook.com. The service can be accessed through a webmail client, the Tor network, Windows, macOS and Linux (beta) desktop apps and iOS and Android apps.
Keeper Security, Inc. (Keeper) is a global cybersecurity company founded in 2009 and headquartered in Chicago, Illinois. Keeper provides zero-knowledge security and encryption software covering functions such as password and passkey management, secrets management, privileged access management, secure remote access and encrypted messaging.
The Cyber Security Agency (CSA) is a government agency under the Prime Minister's Office, but is managed by the Ministry of Digital Development and Information of the Government of Singapore. It provides centralised oversight of national cyber security functions and works with sector leads to protect Singapore's Critical Information Infrastructure (CII), such as the energy and banking sectors. Formed on 1 April 2015, the agency also engages with various industries and stakeholders to heighten cyber security awareness as well as to ensure the development of Singapore's cyber security. It is headed by the Commissioner of Cybersecurity, David Koh.
Myki was a password manager and authenticator developed by Myki Security. Myki was available on iOS and Android, as browser extensions on Chrome, Firefox, Safari, Opera and Microsoft Edge, and as a standalone desktop app for Windows, macOS, Linux, Arch Linux, and Debian. It was available in English, Arabic, French, German, Italian, Portuguese and Spanish. On 24 March 2022, MYKI announced Jump Cloud's acquisition of Myki and on 10 April 2022, Myki ceased to operate.
Bitwarden is a freemium open-source password management service that stores sensitive information, such as website credentials, in an encrypted vault. The platform offers a variety of client applications, including a web interface, desktop applications, browser extensions, mobile apps, and a command-line interface. Bitwarden offers a free US or European cloud-hosted service as well as the ability to self-host.
Internet security awareness or Cyber security awareness refers to how much end-users know about the cyber security threats their networks face, the risks they introduce and mitigating security best practices to guide their behavior. End users are considered the weakest link and the primary vulnerability within a network. Since end-users are a major vulnerability, technical means to improve security are not enough. Organizations could also seek to reduce the risk of the human element. This could be accomplished by providing security best practice guidance for end users' awareness of cyber security. Employees could be taught about common threats and how to avoid or mitigate them.
NordPass is a proprietary password manager launched in 2019. It allows its users to organize their passwords and secure notes by keeping them in a single encrypted vault. NordPass, which operates on a freemium business model, was developed by the VPN service NordVPN.
The following is a general comparison of OTP applications that are used to generate one-time passwords for two-factor authentication (2FA) systems using the time-based one-time password (TOTP) or the HMAC-based one-time password (HOTP) algorithms.
Proton Pass is a password manager developed by the Swiss software company Proton AG. It stores login credentials, email aliases, credit card data, passkeys, 2FA secret keys, and notes in virtual vaults that are encrypted using 256-bit AES-GCM.