Encryption model & independent audits — found from sitemap — NordPass

Cited by

Facts read from this source

• Zero knowledge Report an error

  “Built with the zero-knowledge principle in mind, NordPass ensures that no one – not even our company – can see what you and your team store in your vaults.”

• End to end encryption Report an error

  “NordPass encrypts all your data locally on your device before it’s uploaded to the cloud.”

• Xchacha20 Report an error

  “NordPass is currently the only major password manager using XChaCha20 – widely considered the most advanced encryption algorithm available today.”

• Bug bounty Report an error

  “That’s why we employ white hat hackers to help us find any bugs or weak spots – so we can make NordPass’ security even stronger.”

• Regular audits Report an error

  “Our product undergoes regular internal reviews and independent third-party security audits.”

• Oauth2 Report an error

  “NordPass uses the OAuth 2.0 protocol as its centralized identity provider and authorization server for business authentication”

• Encryption model Report an error

  “It combines symmetric encryption for vault contents with asymmetric encryption to secure the encryption keys and their exchange.”

• Provider Report an error

  “NordPass is hosted on Amazon Web Services (AWS).”

• Regions Report an error

  “NordPass stores customer vault items in separate AWS data centers across the US and EU to ensure they’re instantly available and kept secure at all times.”

• Surveill Report an error

  “At Nord Security, we follow the secure software development life cycle (SSDLC) for every product we build – including NordPass.”

• Logs Report an error

  “App logs are saved on the user’s device and are primarily used for troubleshooting. They do not contain any data that could identify the user or their device.”

• Account recovery Report an error

  “Plus, the organization can recover employees’ accounts without any risk of losing data.”

• Item reassignment Report an error

  “If that employee leaves, their items don’t disappear – they stay with the organization and can easily be reassigned to someone else.”

• Certifications Report an error

  “industry certifications, such as ISO 27001 and SOC 2 Type 2”

• Free trial Report an error

  “Start Free Trial No credit card required”

Scores citing this record

• The CISO Encryption model & independent audits
• The CISO Sharing, roles & recovery
• The CISO SSO, directory sync & provisioning
• The CISO Hosting choice, offline access & export
• The CISO European sovereignty
• The Compliance Auditor Encryption model & independent audits
• The Compliance Auditor Sharing, roles & recovery
• The Compliance Auditor SSO, directory sync & provisioning
• The Compliance Auditor Hosting choice, offline access & export
• The Compliance Auditor European sovereignty
• The Compliance Auditor Pricing transparency
• The DevOps Engineer Encryption model & independent audits
• The DevOps Engineer Sharing, roles & recovery
• The DevOps Engineer SSO, directory sync & provisioning
• The DevOps Engineer Hosting choice, offline access & export
• The DevOps Engineer European sovereignty
• The Identity Engineer Encryption model & independent audits
• The Identity Engineer Sharing, roles & recovery
• The Identity Engineer SSO, directory sync & provisioning
• The Identity Engineer Hosting choice, offline access & export
• The Identity Engineer European sovereignty
• The Skeptic Encryption model & independent audits
• The Skeptic Sharing, roles & recovery
• The Skeptic SSO, directory sync & provisioning
• The Skeptic Hosting choice, offline access & export
• The Skeptic European sovereignty
• The SME Owner Encryption model & independent audits
• The SME Owner Sharing, roles & recovery
• The SME Owner SSO, directory sync & provisioning
• The SME Owner Audit logs, policies & reporting
• The SME Owner Hosting choice, offline access & export
• The SME Owner European sovereignty
• The SME Owner Pricing transparency