# Dashlane — Password Management

Dashlane by Dashlane SAS holds a panel rating of 2/5 from 6 AI judges (category median 2/5), as of 2026-10-15. Provenance: EU origin, foreign-owned; sovereignty: not determined.

- Vendor: Dashlane SAS (https://www.dashlane.com)
- Category: [Password Management](https://whats-best.ai/software/password-management.md)
- Provenance (editorial classification): EU origin, foreign-owned
- Canonical page: https://whats-best.ai/software/password-management/dashlane
- Alternatives: https://whats-best.ai/software/password-management/dashlane/alternatives ([markdown](https://whats-best.ai/software/password-management/dashlane/alternatives.md))
- Data as of: 2026-10-21 · evaluated 2026-10-15 · oldest source captured 2026-10-01

**AI-generated.** Every score, rationale and verdict here is written by a panel of AI judges from public evidence — an analysis, not a hands-on test. Every fact quotes the vendor page it was read from. No score can be bought. How scores are made: https://whats-best.ai/methodology

## At a glance

- Vendor: Dashlane SAS
- Headquarters: Not stated on the vendor’s pages as of 13 Oct 2026
- Data hosting: Not stated on the vendor’s pages as of 13 Oct 2026
- Free plan: Not stated on the vendor’s pages as of 13 Oct 2026

## The panel's verdict

Dashlane, a password manager from Dashlane SAS in Paris whose group is headquartered in New York, deploys through a browser extension. The scoring favors cryptography and identity: security architecture, identity integration and audit and policy are the strongest bands — 5 to 7, 5 to 7 and 6 to 7 — on named algorithms (AES256-CBC-HMAC, Argon2d with stated parameters, a separate 40-byte device key), annual independent penetration testing shared through a public Trust Center, SSO with Azure, Okta and Google Workspace over SAML 2.0 with SCIM-driven provisioning and deprovisioning, and telemetry into five named SIEM platforms with CLI and REST API access. The weak bands are structural: deployment and portability scores 1 to 2, sharing and access control sits at 3 with no spread, and sovereignty and pricing transparency spread 1 to 3, with judges crediting the published commercial terms at the top and those weighing absent price figures and unnamed subcontractors at the bottom. We found no per-user or tier price in the captured pages; the enterprise package is tailored with dedicated account management.

**Speaks for it:**
- Publishes concrete cryptography — AES256-CBC-HMAC, Argon2d with stated parameters, and a separate 40-byte device key
- Documents SSO with Azure, Okta and Google Workspace over SAML 2.0, SCIM-driven provisioning and deprovisioning, and a Confidential SSO vault unlock with no master password required
- Streams telemetry natively into five named SIEM platforms — CrowdStrike, Datadog, Microsoft Sentinel, Panther and Splunk — with CLI and REST API access for custom pipelines
- Reports annual independent penetration testing with results shared publicly through the Trust Center, and an Intigriti bug bounty under a CISA-aligned disclosure policy
- States that admin activity logs are encrypted end-to-end and zero-knowledge, and that Dashlane cannot access decrypted data under any circumstances

**Held against it:**
- We found no per-user or tier price in the captured pages; the enterprise package is described as tailored with dedicated account management
- Deployment is documented as a browser extension with a 99.9% monthly availability figure the terms call a performance target rather than a warranty, and we found no public information on self-hosting, offline access, or an export and import path
- We found no public information on sharing roles or permission levels, admin account recovery, emergency access, or what happens to a departing employee's shared items
- The terms confirm third-party providers are used without naming them, and the group is headquartered in New York while Dashlane SAS in Paris contracts with Eurozone business clients
- We found no public information on which fields remain unencrypted, on incident history, or on log retention, and the captured pages give different figures for the bug bounty platform (HackerOne and Intigriti)

**Best for:**
- You run Azure, Okta or Google Workspace and want employees unlocking the vault with their SSO credential, with SCIM-driven provisioning and deprovisioning
- Your security team works in Microsoft Sentinel, Splunk, Datadog, Panther or CrowdStrike and wants credential-risk telemetry with CLI and REST API pipelines inside them
- You select vendors primarily on documented cryptography and public security-testing disclosures before commercial detail

**Avoid if:**
- You need a self-hosted or on-premises vault, or documented offline access during a vendor outage — the captured delivery path is the browser extension on the vendor's cloud service
- You must compute your annual invoice from public per-user prices before a sales conversation — the pricing page shows plan columns and a 14-day trial but no price figures, and the top package is tailored on contact
- Your procurement requires a named subprocessor list or documented data residency — the terms confirm third-party providers are used without naming them
- You need written sharing roles, admin recovery and emergency-access mechanics before moving team credentials in — the captured pages show secure credential sharing as a feature line with no detail

## Scores by judge and criterion

Scores out of 5, each judge scoring independently against the published rubric (v1). "n/r" = not rated: the vendor publishes no price.

| Criterion | The CISO | The Identity Engineer | The Compliance Auditor | The SME Owner | The DevOps Engineer | The Skeptic |
| --- | --- | --- | --- | --- | --- | --- |
| Encryption model & independent audits | 2.5/5 | 3.5/5 | 3/5 | 3.5/5 | 3/5 | 3/5 |
| Sharing, roles & recovery | 1.5/5 | 1.5/5 | 1.5/5 | 1.5/5 | 1.5/5 | 1.5/5 |
| SSO, directory sync & provisioning | 3/5 | 3.5/5 | 3.5/5 | 3.5/5 | 3/5 | 2.5/5 |
| Audit logs, policies & reporting | 3/5 | 3/5 | 3/5 | 3.5/5 | 3/5 | 3/5 |
| Hosting choice, offline access & export | 0.5/5 | 0.5/5 | 0.5/5 | 0.5/5 | 1/5 | 1/5 |
| European sovereignty | 1/5 | 1/5 | 1.5/5 | 1/5 | 1/5 | 0.5/5 |
| Pricing transparency | 1/5 | 1/5 | 1.5/5 | 0.5/5 | 1/5 | 0.5/5 |
| **Weighted verdict** | **2/5** | **2.5/5** | **2/5** | **2/5** | **2/5** | **2/5** |

### The judges

- **The CISO** (v1.0): Answers to the board for the day the vault vendor is breached. Wants a whitepaper that says which fields are encrypted and which are not, audits by named firms with dates, a bug bounty, and an incident history written down rather than discovered in the press.
- **The Identity Engineer** (v1.0): Runs Entra ID for two thousand staff and owns the joiner-mover-leaver process. Wants SCIM that suspends a leaver's vault the moment the account is disabled, an SSO unlock whose key model is documented, and FIDO2 keys and passkeys supported for the vault itself.
- **The Compliance Auditor** (v1.0): Prepares the ISO 27001 and NIS2 evidence and has to show who could see the firewall admin password last March. Wants event logs that cover views and copies, export to the SIEM, enforceable policies, and the contracting entity, hosting and subprocessors named.
- **The SME Owner** (v1.0): Runs a forty-person company where the shared passwords currently live in an Excel file. Wants shared vaults the team actually uses, a way back in when someone forgets the master password, credentials handed over when someone leaves, and a per-user price with SSO not hidden two tiers up.
- **The DevOps Engineer** (v1.0): Would rather run the vault in the company's own data centre than trust another SaaS with root credentials. Wants a documented self-hosted deployment with backup and high availability, open-source code to read, a CLI and API for pipelines, and an export that loses nothing.
- **The Skeptic** (v1.0): Has read the breach post-mortems. Reads "zero knowledge" next to unencrypted URLs and item names, "independently audited" with no report, "SSO unlock" where the vendor holds half the key, and "admin recovery" that means the vendor can decrypt — and treats a missing incident history as an answer.

## European sovereignty — proven facts

Built only from facts on the vendor's own pages; a dimension we could not prove is left open, never scored as zero. Headline: not determined.

| Dimension | Finding | Points | Source |
|---|---|---|---|
| Legal entity | Not determined | — | — |
| Ownership | Not determined | — | — |
| Data residency | Not determined | — | — |
| Subprocessors | Not determined | — | — |

## Key facts

Each fact is the vendor's own statement, cited to the source page it was read from ([S*n*] → Sources).

**Compliance**
- Certifications: yes · yes [S6]
- Dnt honored: yes [S3]
- Do not sell: yes [S3]
- DPA available: yes [S3]
- Non essential cookies rejectable: yes [S3]
- Privacy resources: Privacy Policy · Cookie Policy · Cookie Preferences · Do Not Sell My Personal Information · Privacy Rights Request · Subprocessor List · Data Processing Addendum [S3]
- Privacy rights request: yes [S3]
- Subprocessor list: yes [S3]

**Data**
- Anonymized data ownership: Dashlane [S4]
- Behavioral data: anonymized and aggregated only [S4]
- Event data: yes · yes [S4]
- Zero knowledge: yes · yes [S4]

**Integrations**
- Custom cli: yes · yes [S10]
- Custom integrations offer: yes [S10]
- Password management integrations: yes · yes [S11]
- Product features footer: Zero-knowledge architecture · AI phishing alerts · Credential Risk Detection · Credential risk alerts · Passkeys · Passwordless login · Dark Web Insights · SSO integrations [S4]
- SAML idp: yes [S6]
- Siem supported platforms: CrowdStrike · Datadog · Microsoft Sentinel · Panther · Splunk [S10]
- SSO SCIM: yes · yes [S2]
- Yubico siem: KnowBe4 shown next to SIEM tools row · listed (dash in one plan column) [S2]

**Legal**
- Address: 21 rue Pierre Picard, 75018 Paris, France [S5]
- Amendment: next Renewal Term, or upon notice if required by law · yes [S4]
- Attribution: yes [S4]
- Capital: 950770 [S5]
- Copyright entity: 2026 · Dashlane Inc. · Dashlane SAS [S7]
- Entity and trademarks: Dashlane Inc. · Dashlane SAS [S3]
- Entity name: Dashlane SAS [S5]
- Export controls: yes [S4]
- Governing law france: Republic of France · Tribunal de Commerce in Paris, France [S4]
- Governing law usa: State of New York · New York County, New York [S4]
- Insurance: 1000000 · 4000000 · 10000000 [S4]
- Ip indemnification: third-party IP infringement claims · yes [S4]
- Legal form: Simplified joint-stock company/Société par actions simplifiée [S5]
- Registration number: Paris 513 752 014 [S5]
- Termination for breach: 30 [S4]
- Trademark: Dashlane Inc. · Dashlane SAS [S2]
- Trademark entities: Dashlane Inc. · Dashlane SAS [S8]
- Trademark entity: Dashlane SAS [S6]
- VAT number: FR65513752014 [S5]

**Pricing**
- Credential protection price: yes · 4 [S2]
- Enterprise bundle: Password Management · Credential Protection [S2]
- Enterprise custom: custom volume-optimized pricing [S2]
- Enterprise minimum users: organizations with more than 50 users [S2]
- Faq usd prices: 8 · 4 [S2]
- Free trial: 14 · yes [S2]
- Free trial: yes · yes · yes [S4]
- Omnix credential protection: EUR · yes · annually · 4 [S11]
- Omnix enterprise: Volume-optimized pricing [S11]
- Omnix password management: EUR · yes · annually · 8 [S11]
- Packages: 3 · Omnix Password Management · Omnix Credential Protection · Omnix Enterprise [S2]
- Password management price: 14 days free · yes · 8 [S2]
- Password management trial: 14 [S11]

**Product**
- Acknowledgement SLA: business days · 3 [S7]
- Activity logs zero knowledge: yes · yes [S6]
- Admin vault policies: password & passkey protection · AI-powered autofill · secure credential sharing · admin vault policies [S2]
- Affiliate access: yes · yes [S4]
- AI phishing alerts: yes [S6]
- AI usage: autofill · anti-phishing alerts · yes · no [S4]
- Beta services: yes · yes · yes [S4]
- Bug bounty platform: Intigriti · yes [S7]
- Bug bounty rewards: yes · yes [S7]
- Capture vault user or not: yes [S10]
- Company customers count: 25000 [S10]
- Confidential computing: yes [S6]
- Confidential computing: Information remains encrypted and confidential even during processing in cloud environments [S8]
- Confidential SSO: Confidential SSO & Provisioning for enterprise deployment and single-credential vault access [S8]
- Credential protection features: prevent credential breaches · protect domains outside SSO · proactive password risk response · browser phishing detection · security stack integration [S2]
- Credential protection features: prevent credential breaches · protect domains outside SSO · respond to password risks proactively · detect phishing risks in browser · integrate with security stack for remediation [S11]
- Credential risk detection: monitors logins on all web domains including outside SSO [S2]
- Credential risk detection: yes [S6]
- Custom detection rules: yes · yes [S11]
- Dark web insights: yes [S6]
- Dark web monitoring: yes [S6]
- Deployment: browser extension [S2]
- Detection latency: Real-time browser telemetry reduces detection window to seconds [S11]
- Detection speed claim: detection windows shrink from weeks to seconds [S10]
- Device key: 40 · yes · yes [S6]
- Enterprise account management: yes [S2]
- Enterprise packaging: Tailored credential security package [S11]
- Excluded test methods: yes · yes · yes [S7]
- Free trial setup: extension deployment · admin console setup [S2]
- Gpg key available: yes [S7]
- Idp integrations: Azure · Okta · Google Workspace · IdP integration to automate management and user access [S8]
- Insights dashboard: Risk and Remediation Insights dashboards for admins [S2]
- Key derivation: 2 · Argon2d · 3 · 32 [S6]
- Key separation: yes [S6]
- New features implicitly in scope: yes [S7]
- No credential sharing: yes · no [S4]
- No master password: no [S8]
- Non vault coverage: yes [S11]
- Omnix streaming: browser-native credential risk telemetry streamed to SIEM · Dashlane Omnix [S10]
- Open source components: yes [S4]
- Passkeys passwordless: yes · yes [S6]
- Password management features: passwords & passkeys protection · secure sharing · password policies · SSO & SCIM integration [S2]
- Password management features: protect passwords & passkeys · securely share workforce passwords · manage password policies · SSO and SCIM integration [S11]
- Phishing detection: browser-native AI phishing detection with real-time alerts [S2]
- Phishing detection: AI model in browser extension · yes [S10]
- Phishing detection: Proprietary AI phishing model evaluates suspicious sites in the browser pre-credential-entry [S11]
- Provisioning automation: provisioning · deprovisioning · management [S8]
- Research authorization no legal action: yes · yes [S7]
- Reward exclusive disclosure: yes [S7]
- Scale claim: 2.5+ billion [S8]
- Scope on intigriti: Intigriti bug bounty public page [S7]
- Security architecture: patented zero-knowledge architecture with cloud-based confidential computing across all packages [S2]
- Security operations: yes · yes · yes · yes [S6]
- Sentinel integration: Dashlane Omnix connects directly with Microsoft Sentinel SIEM for credential threat detection and remediation [S11]
- Shadow it statistic: 37 [S10]
- Slack notifications: Slack [S2]
- Soar remediation: yes · yes · yes [S10]
- Soar remediation: Sentinel triggers automated remediation via SOAR or identity provider (e.g., password reset through IdP) [S11]
- SSO flow: SSO login authenticates to IdP; proof of identity forwarded to Confidential SSO to unlock vault [S8]
- SSO SCIM: yes [S6]
- Subcontractors: yes · yes [S4]
- Telemetry scope: Sends browser-native telemetry: weak/compromised credentials, suspected phishing domains, real-time alerts, credential behavior, admin response actions [S11]
- Term renewal: yes · 1 · 30 [S4]
- Traditional filters miss rate: 47 [S10]
- Trust center: yes [S6]
- Uptime target: performance target, not a warranty · 99.9 [S4]
- User license reallocation: yes [S4]
- Vault data privacy in telemetry: no [S10]
- Vault encryption: AES256-CBC-HMAC [S6]
- Vault encryption at rest: yes [S6]
- Vulnerability disclosure policy: yes [S6]
- Vulnerability disclosure policy: yes · CISA best practices [S7]
- Vulnerability reporting channel: no · security@dashlane.com [S7]
- Working language: English [S7]
- Zero knowledge: Zero-knowledge architecture [S3]
- Zero knowledge: Local encryption/decryption on user devices; Dashlane cannot access credentials [S6]
- Zero knowledge scope: vaults · audit logs · integrations · all data flows [S6]
- Zero knowledge telemetry: Zero-knowledge architecture keeps vault contents private while risk telemetry flows to Sentinel [S11]

**Support**
- Bug bounty: yes [S2]
- Channels: Dashlane Support Center, always available · yes [S4]
- Channels enterprise: live chat · phone · onboarding support · customer success manager [S2]
- Docs: Admin Help Center · Customer Help Center [S2]
- Enterprise support contact: enterprise support and solutions via contact [S8]
- Help center: yes [S3]

## Questions

### Is Dashlane European?

Partly. whats-best.ai classifies Dashlane as EU origin, foreign-owned.

### Where does Dashlane store data?

Not stated on the vendor’s pages as of 13 Oct 2026.

### Does Dashlane have a free plan?

Not stated on the vendor’s pages as of 13 Oct 2026.

### What are the best alternatives to Dashlane?

As of 21 Oct 2026, the panel rates [Password Depot (3.5/5)](https://whats-best.ai/software/password-management/password-depot), [Keeper (3/5)](https://whats-best.ai/software/password-management/keeper) and [Passbolt (3/5)](https://whats-best.ai/software/password-management/passbolt) highest among the other 18 Password Management products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is [Password Depot](https://whats-best.ai/software/password-management/password-depot) (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: [how scores are made](https://whats-best.ai/methodology#ordering). The full list, with European products first: [Dashlane alternatives](https://whats-best.ai/software/password-management/dashlane/alternatives).

## What this page leaves out

- 39 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 8 pricing facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 7 legal facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 6 compliance facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 4 integrations facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 2 support facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 1 data fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material.
- 1 hosting fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material.
- 2 sovereignty dimensions could not be confirmed on the vendor’s own pages and are shown as unknown.
- 6 of the readings below were written against an earlier fact sheet — a fact has been corrected, added or pulled since. Until the panel next runs on this product you are reading the older judgement.

## Sources

- [S1] Vendor homepage: https://www.dashlane.com/de (checked 2026-10-13)
- [S2] Pricing page: https://www.dashlane.com/pricing (checked 2026-10-13)
- [S3] Privacy policy: https://www.dashlane.com/privacy/overview (checked 2026-10-13)
- [S4] Terms of service: https://www.dashlane.com/terms/business (checked 2026-10-13)
- [S5] Legal notice: https://www.dashlane.com/legal (checked 2026-10-13)
- [S6] Encryption model & independent audits — found from sitemap: https://www.dashlane.com/security (checked 2026-10-13)
- [S7] Encryption model & independent audits — found from sitemap: https://www.dashlane.com/security/researchers (checked 2026-10-13)
- [S8] SSO, directory sync & provisioning — found from sitemap: https://www.dashlane.com/sso (checked 2026-10-13)
- [S9] SSO, directory sync & provisioning — found from sitemap: https://www.dashlane.com/passkeys (checked 2026-10-13)
- [S10] Audit logs, policies & reporting — found from sitemap: https://www.dashlane.com/integrations/siem (checked 2026-10-13)
- [S11] Audit logs, policies & reporting — found from sitemap: https://www.dashlane.com/integrations/microsoft-sentinel (checked 2026-10-13)
- [S12] Hosting choice, offline access & export — found from sitemap: https://www.dashlane.com/download/saex (checked 2026-10-13)

---

Cite as: whats-best.ai, "Dashlane — Password Management", AI panel analysis, as of 2026-10-21. https://whats-best.ai/software/password-management/dashlane

Corrections: https://whats-best.ai/correct/668?target=page