Encryption model & independent audits — found from sitemap — Passwork

Cited by

Facts read from this source

• Encryption model Report an error

  “Passwork uses a two-level protection model. Not all data is encrypted on the client — some fields are protected only by server-side encryption to enable functionality (search, sorting, display).”

• Client algorithm Report an error

  “Client-side encryption In browser When CSE is enabled User, vault, record keys AES-256-CBC”

• Server algorithm Report an error

  “Server-side encryption On server Always Server key AES-256-CFB”

• Password dual encrypted Report an error

  “Password ✓ ✓ Critical data”

• Totp dual encrypted Report an error

  “TOTP secret ✓ ✓ Critical 2FA data”

• Private rsa key protection Report an error

  “Private RSA key Yes (with master key) ✓ Critical data”

• Vault key protection Report an error

  “Vault key User RSA key (RSA-OAEP) Server key”

• Record key protection Report an error

  “Record key Vault key (AES-256-CBC) Server key”

• Cse reason search Report an error

  “Search — to search by name, login, URL, description, and tags, the server must be able to index these fields”

• Metadata protection Report an error

  “Server-side encryption (AES-256-CFB) before database write TLS/HTTPS during transmission between client and server Access control at the application level”

• Zero knowledge Report an error

  “Administrator access Zero-Knowledge for passwords and secrets”

• Cse server visibility Report an error

  “With client-side encryption, critical data (passwords, secrets, files) is protected by the Zero-Knowledge principle. The server cannot decrypt them.”

• Threat model Report an error

  “Database leak Server-side encryption protects all data Server compromise Client-side encryption protects critical data Traffic interception TLS protects data in transit”

• External link encryption Report an error

  “Record data copy Yes (with link key) ✓ Secret data”

• Feature search Report an error

  “Autofill — browser extension matches URLs without decryption”

• Company Report an error

  “© 2017–2026 Passwork Europe SL, Barcelona, Spain”

• Browsers Report an error

  “Browser extension Google Chrome Mozilla Firefox Microsoft Edge Apple Safari”

• Mobile apps Report an error

  “Mobile application App Store Google Play”

• ISO 27001 Report an error

  “ISO 27001 certificate”

6 facts read from this page are not shown because they could not be confirmed on the page as captured.

Scores citing this record

• The CISO Encryption model & independent audits
• The CISO Encryption model & independent audits
• The Compliance Auditor Encryption model & independent audits
• The Compliance Auditor Sharing, roles & recovery
• The Compliance Auditor Encryption model & independent audits
• The Compliance Auditor Sharing, roles & recovery
• The Compliance Auditor Hosting choice, offline access & export
• The DevOps Engineer Encryption model & independent audits
• The DevOps Engineer Encryption model & independent audits
• The DevOps Engineer Hosting choice, offline access & export
• The Identity Engineer Encryption model & independent audits
• The Identity Engineer Encryption model & independent audits
• The Identity Engineer Hosting choice, offline access & export
• The Skeptic Encryption model & independent audits
• The Skeptic European sovereignty
• The Skeptic Encryption model & independent audits
• The Skeptic Sharing, roles & recovery
• The SME Owner Encryption model & independent audits
• The SME Owner Hosting choice, offline access & export
• The SME Owner Encryption model & independent audits