Encryption model & independent audits — found from sitemap — Dashlane

Cited by

Facts read from this source

• Zero knowledge Report an error

  “Dashlane vaults are encrypted and decrypted locally on user devices. Only users hold the keys to their data—Dashlane can never view or access user credentials.”

• Confidential computing Report an error

  “AWS Nitro Enclaves extend our zero-knowledge protection to the cloud, providing hardware-level isolation that keeps sensitive cryptographic operations invisible to the host.”

• Zero knowledge scope Report an error

  “Our zero-knowledge approach applies across vaults, audit logs, integrations, and all data flows, ensuring data is protected at rest, in use, and in transit.”

• Device key Report an error

  “When a user logs in to Dashlane on a new device, their device generates a unique 40-byte key that requires explicit user verification—separate from the vault encryption key—to ensure only trusted endpoints can decrypt vault data.”

• Vault encryption Report an error

  “AES256-CBC-HMAC mode for confidentiality and integrity”

• Key derivation Report an error

  “Argon2d (3 iterations, 32 MB memory cost, 2 threads) for GPU-resistant password stretching”

• Key separation Report an error

  “Distinct secrets for vault encryption and device authentication”

• SSO SCIM Report an error

  “Connect Dashlane to your IdP to simplify provisioning, deprovisioning, and employee access to Dashlane. Protected by confidential computing.”

• SAML idp Report an error

  “Dashlane integrates with most SAML 2.0 identity providers.”

• Certifications Report an error

  “Dashlane is SOC 2 Type II certified and ISO 27001 certified.”

• Dark web monitoring Report an error

  “Dashlane also uses Dark Web Monitoring to alert you if any of your personal info shows up in a data breach, so that you can take action quickly.”

• Security operations Report an error

  “Dashlane maintains continuous vulnerability scanning and patching, a decade-long HackerOne bug bounty program, independent annual penetration testing across all apps and cloud infrastructure, and 24/7 incident monitoring backed by a tested response plan.”

• Vulnerability disclosure policy Report an error

  “Learn about our Vulnerability Disclosure Policy”

• Trademark entity Report an error

  “Dashlane and the Dashlane logo are trademarks of Dashlane SAS, registered in the U.S. and other countries.”

• Trust center Report an error

  “Results are shared publicly through the Dashlane Trust Center.”

• Vault encryption at rest Report an error

  “All vault data is encrypted locally on your device with AES-256 encryption before it reaches Dashlane's servers, and the keys needed to decrypt it never leave your possession.”

• Activity logs zero knowledge Report an error

  “Dashlane also ensures all activity logs for admins are encrypted end-to-end and zero-knowledge.”

• Dark web insights Report an error

  “Dark Web Insights”

• Passkeys passwordless Report an error

  “Passkeys Passwordless login”

• AI phishing alerts Report an error

  “AI phishing alerts”

• Credential risk detection Report an error

  “Credential Risk Detection”

4 facts read from this page are not shown because they could not be confirmed on the page as captured.

Scores citing this record

• The CISO Encryption model & independent audits
• The CISO SSO, directory sync & provisioning
• The CISO Audit logs, policies & reporting
• The CISO Hosting choice, offline access & export
• The CISO European sovereignty
• The CISO Encryption model & independent audits
• The CISO SSO, directory sync & provisioning
• The CISO Audit logs, policies & reporting
• The Compliance Auditor Encryption model & independent audits
• The Compliance Auditor SSO, directory sync & provisioning
• The Compliance Auditor Audit logs, policies & reporting
• The Compliance Auditor Hosting choice, offline access & export
• The Compliance Auditor European sovereignty
• The Compliance Auditor Encryption model & independent audits
• The Compliance Auditor SSO, directory sync & provisioning
• The Compliance Auditor Audit logs, policies & reporting
• The DevOps Engineer Encryption model & independent audits
• The DevOps Engineer SSO, directory sync & provisioning
• The DevOps Engineer Audit logs, policies & reporting
• The DevOps Engineer European sovereignty
• The DevOps Engineer Encryption model & independent audits
• The DevOps Engineer SSO, directory sync & provisioning
• The DevOps Engineer Audit logs, policies & reporting
• The Identity Engineer Encryption model & independent audits
• The Identity Engineer SSO, directory sync & provisioning
• The Identity Engineer Audit logs, policies & reporting
• The Identity Engineer Hosting choice, offline access & export
• The Identity Engineer European sovereignty
• The Identity Engineer Encryption model & independent audits
• The Identity Engineer SSO, directory sync & provisioning
• The Identity Engineer Audit logs, policies & reporting
• The Skeptic Encryption model & independent audits
• The Skeptic SSO, directory sync & provisioning
• The Skeptic Audit logs, policies & reporting
• The Skeptic Hosting choice, offline access & export
• The Skeptic European sovereignty
• The Skeptic Encryption model & independent audits
• The Skeptic SSO, directory sync & provisioning
• The Skeptic Audit logs, policies & reporting
• The SME Owner Encryption model & independent audits
• The SME Owner SSO, directory sync & provisioning
• The SME Owner Audit logs, policies & reporting
• The SME Owner Hosting choice, offline access & export
• The SME Owner European sovereignty
• The SME Owner Encryption model & independent audits
• The SME Owner SSO, directory sync & provisioning
• The SME Owner Audit logs, policies & reporting