Source
Encryption model & independent audits — found from sitemap — Password Depot
Checked for Password Depot on 13 Oct 2026
- Page
- https://www.password-depot.de/en/know-how/security-standard.htm
- Checked
- 13 Oct 2026, 13:46 UTC
- How we may use it
- Public page, crawling permitted
Technical details
- type
- page
- http status
- 200
- content hash
- sha256:929d6614df025358615be35b6c3a59ee99c4c19a1f0db32fa144633b3a5e4ddc
- permission
- robots_ok
- screenshot
- Screenshot on file (internal exhibit, not published)
Cited by
Facts read from this source
-
Encryption Report an error
“AES-256 (FIPS 197) for databases, TLS 1.3 with Perfect Forward Secrecy for client-server connections; server-side user passwords are hashed with Argon2id.”
-
Pen test syss Report an error
“In the 10-day penetration test by SySS GmbH (12/2025), no critical or high-severity vulnerabilities were identified – the report is documented in the Trust Center.”
-
2FA methods Report an error
“TOTP, FIDO2/WebAuthn, and Windows Hello additionally secure access.”
-
Storage options Report an error
“Databases reside locally, on your own Enterprise Server, or in your own Azure tenant – with no vendor cloud in the chain of trust.”
-
Support period Report an error
“Free security updates with a documented support period (version 19: at least December 2030).”
-
Leak checks Report an error
“Tools → Security check → Check in Pwned passwords checks existing passwords against known data breaches.”
-
Encryption modes Report an error
“New local databases use the authenticated AES-GCM mode (via Windows CNG), which makes tampering with the encrypted data detectable; the classic AES-CBC mode remains available.”
-
Enterprise server Report an error
“the Password Depot Enterprise Server defines password policies server-side, controls access via roles and groups from Active Directory or Entra ID, and logs every access in a tamper-evident audit trail”
-
Master password handling Report an error
“The master password is not stored in plain text; the key is derived from it cryptographically.”
-
Transport encryption Report an error
“When accessing central databases, the connection is protected with TLS 1.3.”
-
Entity Report an error
“AceBIT GmbH Schleiermacherstr. 10 64283 Darmstadt Deutschland”
1 fact read from this page is not shown because it could not be confirmed on the page as captured.
Scores citing this record
- The CISO Encryption model & independent audits
- The CISO SSO, directory sync & provisioning
- The CISO Audit logs, policies & reporting
- The CISO Hosting choice, offline access & export
- The CISO European sovereignty
- The CISO Encryption model & independent audits
- The CISO Audit logs, policies & reporting
- The CISO Hosting choice, offline access & export
- The CISO European sovereignty
- The Compliance Auditor Encryption model & independent audits
- The Compliance Auditor SSO, directory sync & provisioning
- The Compliance Auditor Audit logs, policies & reporting
- The Compliance Auditor European sovereignty
- The Compliance Auditor Encryption model & independent audits
- The Compliance Auditor Audit logs, policies & reporting
- The Compliance Auditor Hosting choice, offline access & export
- The Compliance Auditor European sovereignty
- The DevOps Engineer Encryption model & independent audits
- The DevOps Engineer SSO, directory sync & provisioning
- The DevOps Engineer Audit logs, policies & reporting
- The DevOps Engineer European sovereignty
- The DevOps Engineer Encryption model & independent audits
- The DevOps Engineer SSO, directory sync & provisioning
- The DevOps Engineer Audit logs, policies & reporting
- The DevOps Engineer Hosting choice, offline access & export
- The DevOps Engineer European sovereignty
- The Identity Engineer Encryption model & independent audits
- The Identity Engineer SSO, directory sync & provisioning
- The Identity Engineer Audit logs, policies & reporting
- The Identity Engineer European sovereignty
- The Identity Engineer Encryption model & independent audits
- The Identity Engineer SSO, directory sync & provisioning
- The Identity Engineer Audit logs, policies & reporting
- The Identity Engineer Hosting choice, offline access & export
- The Identity Engineer European sovereignty
- The Skeptic Encryption model & independent audits
- The Skeptic SSO, directory sync & provisioning
- The Skeptic Audit logs, policies & reporting
- The Skeptic Hosting choice, offline access & export
- The Skeptic European sovereignty
- The Skeptic Encryption model & independent audits
- The Skeptic Audit logs, policies & reporting
- The Skeptic Hosting choice, offline access & export
- The Skeptic European sovereignty
- The SME Owner Encryption model & independent audits
- The SME Owner Audit logs, policies & reporting
- The SME Owner Hosting choice, offline access & export
- The SME Owner European sovereignty
- The SME Owner Encryption model & independent audits
- The SME Owner SSO, directory sync & provisioning
- The SME Owner Audit logs, policies & reporting
- The SME Owner Hosting choice, offline access & export
- The SME Owner European sovereignty