Like all password managers, Enpass lets you create a unique, strong password for every site. Security-wise, you don't have to worry about Enpass suffering from a data breach because the company doesn't keep your private information on its servers. Instead, the app stores your passwords locally or via customer-controlled cloud storage. Enpass is a very good password management app, but I encountered a few auto-filling failures during my latest round of testing, so I'm lowering its score by half a point from my last review a year ago. If you're looking for a free, open-source password manager that allows you to create masked emails to prevent spam, Proton Pass is our Editors' Choice. NordPass is our pick for paid password management because it includes top-notch business and security features at a reasonable price.
If you use Enpass on a linux, macOS, or Windows desktop, you can store unlimited logins for free. There’s also a portable version you can run from a USB drive.
If you want to use Enpass exclusively on a mobile device, there's a totally free version that doesn't sync with a desktop account and is limited to 10 logins. You can upgrade within the app to a free Lite subscription, which includes syncing between your device and a desktop vault and room for up to 25 logins. Other free password managers, including Bitwarden, LogMeOnce, and Proton Pass, do not restrict the number of logins you can store in your vault.
The Individual Enpass plan costs $23.99 annually and includes unlimited password storage and syncing. You also get security alerts for website breaches, and Enpass will identify accounts in your vault that support multi-factor authentication or passkey creation.
Similar Products
Proton Pass
A family plan offers the same features for up to six people at $47.99 annually. Alternatively, you can pay a one-time fee of $99.99 to unlock all premium features for a single account forever.
Enpass' prices are extremely reasonable when compared with the competition. For example, the Premium tier for 1Password is $35.88, Keeper is $34.99, and LogMeOnce is $30 annually.
Enpass offers Android, iOS, linux, macOS, and Windows apps and browser extensions for Brave, Chrome, Edge, Firefox, Opera, Safari, and Vivaldi.
To start using Enpass, download and install the app, then provide and confirm your email address. Next, create a master password, which encrypts all your data. This password should be memorable but not guessable by anyone else. Enpass rates your master password and offers specific advice for improving a bad one—noting, for example, that what you've typed contains a name or a common password. Your master password is irrecoverable, so make sure to write it down in a safe place.
Local vs. Cloud Storage
Enpass handles credential storage differently than many password managers. After you log in to the app, Enpass lets you choose where to keep your vault data. You have two options: Store your passwords locally on your device or keep them in a third-party cloud storage account. This means that if you want to use the password manager app on multiple devices, you will need to sync your credentials using a third-party cloud provider, like Google Drive, or a shared Wi-Fi connection.
To store your credentials using your own cloud storage, go to Settings > Vaults in the desktop app, select the vault you want to sync and choose Set Up Sync. Then, you need to give Enpass permission to set up a folder in your Box, Dropbox, Google Drive, iCloud, or OneDrive account. You can also use a shared network folder.
During the latest round of testing, I didn't have trouble setting up storage and syncing credentials among devices using a third-party cloud account. However, I encountered some setbacks when attempting to sync credentials stored locally from one device to another. The server and your target devices must be connected to the same Wi-Fi network for the feature to work. The benefit of this setup is that your data never leaves your home network. I could not fully test this feature because the desktop computer we use for testing does not connect via Wi-Fi.
Syncing is more straightforward with most other password managers because the data is stored on the company's cloud-based servers. However, these servers are juicy targets for hackers, so storing your data locally whenever possible is a safer option.
Importing Existing Passwords
Enpass imports credential lists from many competitors, including 1Password, Apple Password Manager, Bitwarden, Dashlane, and RoboForm. If your old password manager isn't on the list, never fear. Export your list from your old app to a CSV file and import it to your Enpass vault.
Enpass doesn’t offer the typical multi-factor authentication (MFA) options for its apps, such as codes generated by authenticator apps or authentication via hardware security keys. According to an Enpass spokesperson, the reason is as follows: "Enpass users store their vaults in spaces they control, [and] there are already multiple extra layers of authentication between those vaults and anyone trying to access them."
Enpass doesn't store customer data on its servers, so I don't think requiring MFA for its apps is necessary. Enpass's lack of MFA does not affect the product's score.
I recommend ensuring that your phone and computer unlock with biometrics like a face or fingerprint scan or a passcode, though. That way, if you lose your device or someone steals it, your private data is a little harder to extract.
Before I review and test a password manager, I send questions to the company about its privacy and security practices. I do this to hold companies accountable for safeguarding your private data. The answers below will provide information about Enpass' privacy and security policies so you can make a safe decision before downloading a new app or browser extension.
Has your company ever had a security breach?
No.
What unencrypted information does the password manager store in user vaults?
None. All data stored in Enpass vaults is encrypted — every field and all attachments.
What is the company's policy regarding master passwords?
Enpass users have complete control over their master passwords. They are not known to Enpass or stored on Enpass servers. But Enpass does provide feedback on password strength when creating a master password.
What is the company's policy regarding user data collection and data sales?
Enpass has no access to any customer data, except for the email address used to register, which is never shared.
How does your company protect user data?
Users create encrypted Enpass vaults on their own cloud or local storage. This data decentralization keeps Enpass users far safer than password managers that pool user data onto centralized company servers. Even if hackers did attack Enpass, it would be impossible to access any user data.
How does your company respond to requests for user information from governments and law enforcement?
Stay Safe With the Latest Security News and Updates
By clicking Sign Me Up, you confirm you are 16+ and agree to our Terms of Use and Privacy Policy.
Thanks for signing up!
Your subscription has been confirmed. Keep an eye on your inbox!
If required by subpoena, law, or other legal process, in some circumstances Enpass may provide a user's name and email. This is the only personal information Enpass has about any user.
Enpass' answers are in line with the company's privacy policy. I encourage anyone in the market for a new password manager to browse each app's privacy policies to learn more about how companies collect, sell, or store user data.
You can open Enpass mobile apps using biometrics, such as a fingerprint or face scan. In the app's Settings menu, you can set up app timeouts and unlocking methods. While you're there, check out some of the security tweaks I recommend below.
Menu Settings
First, I suggest enabling the Hide Sensitive option in the Settings menu. It will obscure your password fields to protect you from over-the-shoulder snoops.
Next, go to the Advanced section of the Settings menu. There, you'll find the option to scan your vault for passwords exposed in a data breach. In a post on the support site, Enpass explains that the scans happen locally on your device, and Enpass doesn't send your passwords to a third party, which is ideal.
Below that setting is the Erase Everything option. It nukes your vault, leaving your passwords safe and secure in the cloud or on a different device. Vault data stored via third-party cloud storage on a USB drive or other device will not be affected. It's helpful if you think your device has been compromised and want to keep your data out of the wrong hands.
Enpass Audit
I like Enpass' vault audit functions, which identify breached, compromised, identical, MFA and passkey supported, or weak logins in your vault. Other password managers, like RoboForm, offer similar password hygiene tools.
For this review, I tested Enpass on Android, the Chrome and Edge browser extensions, and the Windows app.
Password Capture and Replay
The desktop app is easy to navigate, though it's not very helpful for people who don't use many desktop apps because it can't fill passwords in web browsers. That's why I recommend skipping the desktop app download and installing one of the browser extensions on your desktop computer instead. I didn't have trouble capturing and storing existing logins in my vault, and it was easy to create new ones using the browser extensions, too.
If you use the browser extension, check the box requiring Enpass to authenticate all of your new sessions. This is one way to prevent someone using your browser's old authenticated session tokens to steal your credentials.
Passkey Storage
I successfully created and stored passkeys using Enpass. You can manage your passkeys by clicking or tapping on the section labeled Passkeys in your vault. From there, you can edit the entry to include other info, such as an associated phone number, a security question, or a secret key for a one-time code.
Password Generator
I always tell people to create long, strong, and unique passwords for their accounts, and Enpass makes that task easy. The password generator creates a 32-character password by default, which is excellent. The maximum is 100 characters. Your passwords can include capital and lowercase letters, digits, and symbols.
Storage and Form Filling
In addition to passkeys and passwords, you can store many different types of information in your Enpass vault, such as addresses, phone numbers, or even your social security number. That said, I don't recommend saving all of your private information in one app, even if you store it locally. If someone accesses to your device, they'll have all of that info. Instead, consider keeping your private data and files on a storage device that isn't connected to the internet, like a thumb drive or a portable hard drive.
Typically, a password manager can auto-fill details such as your name, address, or phone number on the web. This makes quick work of shopping checkout forms or information requests on government websites. Unfortunately, I was unable to test the identity form-filling capabilities of the Enpass browser extensions. While testing the app and browser extensions, the fields on my test websites did not auto-populate.
You can attach files and images to your vault entries. For example, you could add a photo of your driver's license to the corresponding item. Your storage space is limited to the amount left on your local device or in the cloud storage account you set up.
Sharing and Emergency Access
I don't normally advise sharing passwords, but there are relatively low-risk situations where sharing makes sense. To share a vault credential with another person who uses Enpass, first create a preshared key (PSK) for the credential you want to share. The PSK is a password you create and send to the recipient or group before sending the password itself. The shared passwords are only accessible via the Enpass app.
Other password managers make sharing a little easier and more intuitive. For example, Keeper allows you to designate different levels of security for your shared passwords. You can also create separate vaults just for sharing passwords with family and friends, which is handy if you are sharing a Netflix account with family members or if you and your friends need access to a fantasy football account.
Enpass does not currently offer any password inheritance or other emergency access features, which would facilitate the transfer of your credentials and other valuable information in the event of your untimely demise. Bitwarden, Dashlane, Keeper, and NordPass all offer digital inheritance methods.
Unless you pay for Enpass' Individual Plan, your mobile apps can only manage a single vault and the first 25 entries you add. You may hit that limit quickly, so it’s not as workable a solution as other free password managers, such as Bitwarden or Proton Pass, which do not restrict you to a certain number of entries.
I installed Enpass on a Samsung Galaxy A71 5G. The Android app's interface is comparable to the browser extension and desktop version, but the free version of the app is not as functional. For example, there's no way to upload your password list from your phone. You can still access any vaults you’ve synced, manage tags, use all the password audit tools, and generate passwords. The Enpass mobile app can also function as an authenticator app, and you can use it to scan QR codes and generate MFA tokens.
Unfortunately, auto-filling did not work as expected while using the Android app. As you can see in the screenshot below, the app filled the username into the password field. I did not encounter this problem when using the Enpass browser extension.
As with the regular individual or family Enpass accounts, Enpass Business (starting at $2.99 per user per month) stores data locally on employee devices, with an option to use cloud storage. You can also sign up for the Starter plan, which is $9.99 each month for up to 10 users. The Enterprise plan is $3.99 per user per month and adds security dashboard access, access recovery, vault sharing, free family plans for all users, custom branding options, and automatic user provisioning via SCIM from brands such as Azure AD and Okta. All business accounts include integration with Google Workspace and Microsoft 365.
As with competitors NordPass and Dashlane, Enpass Business features an audit system for users and a security dashboard for administrators. The reporting dashboard shows which employees have weak, reused, or old passwords in their vaults.
One helpful feature of Enpass Business is automatic offboarding. It allows an administrator to automatically delete data from employee devices and vaults when they leave the organization. Competitor Bitwarden has a similar function: admin users can remove team members from vaults at their discretion.
Need help with your Enpass account? You can send an email to [email protected] to receive assistance. If you want to try fixing the problem on your own, visit the Enpass support website or ask a question on the app's forums.
Is Deleting Your Enpass Account Easy?
If you ever want to move on from Enpass and switch to a new password manager, you must cancel your subscription before you can fully delete your account. If you subscribed to the app using Apple's App Store or Google's Play Store, you'll need to cancel the subscription within those apps. If you bought your subscription on Enpass' website, visit this link, enter your email address, and then follow the link you receive in your email inbox to access your account page where you can cancel your subscription.
After canceling your subscription, deleting your account is a very straightforward process, which is ideal. Just open the Settings menu on any platform, click or tap your email address, then choose Delete Account.
Enpass is a high-quality password management app that handles password capture and generation well on all platforms. I really like that you can choose where to store your vault data. Website form filling and Android auto-filling didn't always work in testing, however, which is a notable frustration. Ultimately, our Editors' Choice for affordable password management is Proton Pass, since it is free and easy to use. If you're willing to pay, you can get high-quality security features and business options with NordPass, our Editors' Choice for premium password management.
Best for Local Storage
-
Free for desktop users
-
Local storage available
-
Includes data breach monitoring
-
Attractive, easy-to-use apps
-
Android app failed auto-filling tests
-
Form-filling test failures
-
Lacks digital inheritance options
Enpass is an easy-to-use password manager that can keep your private credentials out of the cloud.
STILL ON THE FENCE?
Read the latest from Kim Key
- The Best Live TV Streaming Services for 2025
- I Write About Security for a Living. This Is the Only Way I Recommend Sharing Passwords
- Proton Pass: Best-In-Class Free Password Management
- NordPass Review: Top-Notch Password Management at a Reasonable Price
- Cyber Apocalypse Now: Black Hat 2025’s Most Terrifying Hacks and Security Breaches
- More from Kim Key
