NordPass

From Wikipedia, the free encyclopedia

NordPass is a proprietary password manager launched in 2019. It is meant to help its users to organise their passwords and secure notes,[1] keeping them in a single place — an encrypted password vault.[2] This service comes in both free and premium versions, though the free version lacks much of the paid functionality like multi-device login.[3]

NordPass
Nordpass.png
TypePassword management service
Launch date2019; 2 years ago (2019)
Platform(s)
Operating system(s)
StatusActive
Websitenordpass.com

NordPass is a cross-platform application available on Windows, macOS, Linux, Android, and iOS. It also offers browser extensions on Google Chrome, Mozilla Firefox, Microsoft Edge, Brave, Opera, and Safari.[4]

History[]

NordPass was developed by the same cybersecurity team [5] that created NordVPN, a VPN service[6] provider.[7]

Security features[]

  • NordPass is built with the ChaCha20 encryption algorithm specifically the XChaCha variant.[8]
  • NordPass has zero-knowledge architecture,[9] meaning that passwords are encrypted on the user's device and only then stored in the cloud. This way, NordPass cannot view, edit, or in any other way manage users’ passwords.[10]
  • An encrypted vault acts as a digital safe where users can store login credentials, secure notes, and credit card details.[11]
  • The Master Password serves as the key that unlocks the encrypted vault.[12] Master Password protects the user's passwords,[13] but it's up to the user to make it strong.[14]
  • NordPass provides two-factor authentication (2FA).[15] It supports multiple authentication apps, including Google Authenticator, Duo, and Authy.
  • In its latest release it includes FIDO U2F support. This means that it will now work with YubiKey and other third party security keys.[16] Though this protection is embedded at the service login instead of the app which is a weakness.
  • NordPass provides a Secure Password Sharing Feature which allows for the secure sharing of passwords between NordPass users.[17]
  • NordPass can scan data breaches for password leaks.[18]
  • NordPass can identify weak, reused, or old passwords which it divides into Weak, Reused, and Old.[19]

An independent cybersecurity firm, Cure53, in February 2020 conducted an audit and confirmed the security of NordPass password manager.[20]

NordPass is based in Panama, which has no mandatory data retention laws and does not participate in the Five Eyes or Fourteen Eyes alliances.[21][22] This means that the company [23] isn't required by law to keep logs or share them with governments.[24]

Reception[]

NordPass is a relatively new player in the password manager market[25] and was named “new kid on the block”.[26] Some tech review sites have noticed that it still lacks some features.[27] According to PC Mag, “it offers very few advanced features such as form-filling, folders, security monitoring, or 2FA key support”.[28]

NordPass has conducted a number of research studies.[29][30][31] NordPass has also been mentioned on many influential tech websites, such as Wired, Forbes, Business Insider, and TechRadar.

References[]

  1. ^ "You Need a Password Manager. Here Are the Best Ones". Wired. ISSN 1059-1028. Retrieved 2020-10-12.
  2. ^ "What Is a Password Vault? - Definition from Techopedia". Techopedia.com. Retrieved 2020-10-12.
  3. ^ "NordPass Review | NordVPN's fully featured entry into the password manager world". ProPrivacy.com. Retrieved 2020-10-12.
  4. ^ "Browsers, which support NordPass". NordPass. Retrieved 2020-10-12.
  5. ^ NordVPN. "NordVPN Officially Releases Its New Password Manager NordPass". www.prnewswire.com. Retrieved 2020-10-12.
  6. ^ Zhang, Zhensheng; Zhang, Ya-Qin; Chu, Xiaowen; Li, Bo (2004-05-01). "An Overview of Virtual Private Network (VPN): IP VPN and Optical VPN". Photonic Network Communications. 7 (3): 213–225. doi:10.1023/B:PNET.0000026887.35638.ce. ISSN 1572-8188. S2CID 24162788.
  7. ^ October 2020, Adam Marshall 05. "The best VPN service 2020". TechRadar. Retrieved 2020-10-12.
  8. ^ "XChaCha20 Encryption". NordPass. Retrieved August 27, 2021.
  9. ^ "Zero-Knowledge Encryption: Extra Password Safety". nordpass.com. Retrieved 2020-10-12.
  10. ^ "NordPass Review | NordVPN's fully featured entry into the password manager world". ProPrivacy.com. Retrieved 2020-10-12.
  11. ^ "NordPass Review 2020: Is NordVPN's Password Manager OK?". SafetyDetectives. Retrieved 2020-10-12.
  12. ^ "Master Password". nordpass.com. Retrieved 2020-10-12.
  13. ^ "Master Password - an overview | ScienceDirect Topics". www.sciencedirect.com. Retrieved 2020-10-12.
  14. ^ "Master Password". nordpass.com. Retrieved 2020-10-12.
  15. ^ "What you need to know about 2FA". nordpass.com. Retrieved 2020-10-12.
  16. ^ "Security Key". NordPass. Retrieved August 27, 2021.
  17. ^ "Secure Password Sharing". NordPass. Retrieved August 27, 2021.
  18. ^ "Password Breach Report". NordPass. Retrieved August 27, 2021.
  19. ^ "Password Health Report". NordPass. Retrieved August 27, 2021.
  20. ^ ""Cure53" Audited NordPass and Verified Is Robust Security | TechNadu". www.technadu.com. Retrieved 2020-10-12.
  21. ^ Gewirtz, David. "Inside a VPN service: How NordVPN conducts the business of Internet privacy". ZDNet. Retrieved 2020-10-12.
  22. ^ "Five Eyes, Nine Eyes, and 14 Eyes (In-Depth Explanation)". Restore Privacy. Retrieved 2020-10-12.
  23. ^ Gewirtz, David. "Inside a VPN service: How NordVPN conducts the business of Internet privacy". ZDNet. Retrieved 2020-10-12.
  24. ^ "How can I protect myself from government snoopers?". the Guardian. 2016-11-24. Retrieved 2020-10-12.
  25. ^ "Password Management Market Size, Share | Industry Report 2018-2025". www.grandviewresearch.com. Retrieved 2020-10-12.
  26. ^ "NordPass Review - New Kid on the Block - Updated 2020". Cloudwards. Retrieved 2020-10-12.
  27. ^ "NordPass Premium". PCMag UK. 2020-03-17. Retrieved 2020-10-12.
  28. ^ "NordPass Premium Review". PCMAG. Retrieved 2020-10-12.
  29. ^ July 2020, Nicholas Fearn 29. "10 billion records, including personal details, exposed by unsecured databases". Tom's Guide. Retrieved 2020-10-12.
  30. ^ September 22, Lance Whitney in Security on; 2020; Pst, 10:54 Am. "How to create a secure username". TechRepublic. Retrieved 2020-10-12.CS1 maint: numeric names: authors list (link)
  31. ^ Williams, Shannon. "The most popular usernames of all time revealed". securitybrief.co.nz. Retrieved 2020-10-12.
Retrieved from ""