PCMag editors select and review products independently. If you buy through affiliate links, we may earn commissions, which help support our testing.

Enpass Password Manager

 & Kim Key Senior Writer, Security

Our team tests, rates, and reviews more than 1,500 products each year to help you make better buying decisions and get more from technology.

Our Expert
LOOK INSIDE PC LABS HOW WE TEST
65 EXPERTS
43 YEARS
41,500+ REVIEWS
Enpass Password Manager - Security (Credit: Enpass)
3.5 Good

The Bottom Line

Enpass is an easy-to-use password manager that shifts responsibility for credential security to the customer by offering local and third-party cloud storage options.

Pros & Cons

    • Free for desktop users
    • Local storage available
    • Includes data breach monitoring
    • Attractive, easy-to-use apps
    • Form-filling test failures
    • Lacks digital inheritance options

Enpass Password Manager Specs

Actionable Password Strength Report
Fill Web Forms
Import From Browsers
Multiple Form-Filling Identities
Product Category Password Managers
Product Price Type Direct
Secure Password Sharing

Like all password managers, Enpass allows you to create a unique, strong password for every website. Security-wise, you don't have to worry about Enpass suffering from a data breach because the company doesn't keep your private information on its servers. Instead, the app stores your passwords locally or via customer-controlled cloud storage. That's why we like it, despite encountering difficulties with auto-filling data on web forms during the latest round of testing. That said, if you're looking for a free, open-source password manager that allows you to create masked emails to prevent spam, Proton Pass is our Editors' Choice, while NordPass is our top pick for paid password managers because it includes top-notch business and security features at a reasonable price.

How Much Does Enpass Cost?

If you use Enpass on a Linux, macOS, or Windows desktop, you can store unlimited logins for free. There’s also a portable version you can run from a USB drive.

If you want to use Enpass exclusively on a mobile device, there's a totally free version that doesn't sync with a desktop account and is limited to 10 logins. You can upgrade within the app to a free Lite subscription, which includes syncing between your device and a desktop vault, as well as room for up to 25 logins. Other free password managers, including Bitwarden, LogMeOnce, and Proton Pass, do not restrict the number of logins you can store in your vault.

The Individual Enpass plan costs $23.99 annually and includes unlimited password storage and syncing. You also get security alerts for website breaches, and Enpass will identify accounts in your vault that support multi-factor authentication or passkey creation.

A family plan offers the same features for up to six people at $47.99 annually. Alternatively, you can pay a one-time fee of $99.99 to unlock all premium features for a single account, valid for life.

Enpass's prices are extremely reasonable when compared with the competition. For example, the Premium tier for 1Password is $35.88, Keeper is $34.99, and LogMeOnce is $30 annually.

Getting Started With Enpass

Enpass offers apps for Android, iOS, Linux, macOS, and Windows, as well as browser extensions for Brave, Chrome, Edge, Firefox, Opera, Safari, and Vivaldi. You can also access your logins via Enpass's app for Android Wear.

(Credit: Enpass/PCMag)

To start using Enpass, download and install the app, then provide and confirm your email address. Next, create a master password, which encrypts all your data. This password should be memorable but not guessable by anyone else. Enpass rates your master password and offers specific advice for improving a bad one—noting, for example, that what you've typed contains a name or a common password. Your master password is irretrievable, so be sure to write it down in a secure location.

Local vs. Cloud Storage

Enpass handles credential storage differently than many password managers. After you log in to the app, Enpass allows you to choose where to store your vault data. You have two options: Store your passwords locally on your device or keep them in a third-party cloud storage account. This means that if you want to use the password manager app on multiple devices, you will need to sync your credentials using a third-party cloud service, such as Google Drive, or a shared Wi-Fi connection.

(Credit: Enpass/PCMag)

To store your credentials using your own cloud storage, go to Settings > Vaults in the desktop app, select the vault you want to sync, and choose Set Up Sync. Then, you need to give Enpass permission to set up a folder in your Box, Dropbox, Google Drive, iCloud, or OneDrive account. You can also use a shared network folder.

During the latest round of testing, I had no trouble setting up storage and syncing credentials across devices using a third-party cloud account. However, I encountered some setbacks when attempting to sync credentials stored locally from one device to another. The server and your target devices must be connected to the same Wi-Fi network for the feature to work. The benefit of this setup is that your data never leaves your home network. I was unable to fully test this feature because the desktop computer we use for testing does not support Wi-Fi connectivity.

Syncing is more straightforward with most other password managers because the data is stored on the company's cloud-based servers. However, these servers are juicy targets for hackers, so storing your data locally whenever possible is a safer option.

Importing Existing Passwords

Enpass imports credential lists from many competitors, including Bitwarden, Dashlane, and RoboForm. If your old password manager isn't on the list, never fear. Export your list from your old app to a CSV file and import it to your Enpass vault.

(Credit: Enpass/PCMag)

Authentication Options

Enpass doesn’t offer the typical multi-factor authentication (MFA) options for its apps, such as codes generated by authenticator apps or authentication via hardware security keys. According to an Enpass spokesperson, the reason is as follows: "Enpass users store their vaults in spaces they control, [and] there are already multiple extra layers of authentication between those vaults and anyone trying to access them."

Enpass doesn't store customer data on its servers, so I don't think requiring MFA for its apps is necessary. Enpass's lack of MFA does not affect the product's score.

I recommend ensuring that your phone and computer unlock with biometrics, such as a face or fingerprint scan, or a passcode. That way, if you lose your device or someone steals it, your private data is a little harder to extract.

Data Privacy and Security

Before reviewing and testing a password manager, I send the company questions about its privacy and security practices. I do this to hold companies accountable for safeguarding your private data. The answers below provide information about Enpass's privacy and security policies, allowing you to make an informed decision before downloading a new app or browser extension.

Has your company ever had a security breach?

No.

What unencrypted information does the password manager store in user vaults?

None — everything is encrypted.

What is the company's policy regarding selling or sharing customer data with third parties?

Enpass collects only a registration email address and, in some cases, the user’s name, as described in our privacy policy. We may share limited data with vetted subprocessors who support service delivery under strict contractual and security controls (required under GDPR and ISO 27701). As you know, Enpass has no access at all to the data in users' vaults.

How does your company respond to requests for user information from governments and law enforcement?

Enpass has no access to any data users store in their Enpass vaults. If required by subpoena, law, or other legal process, in some circumstances, Enpass may provide a user's name and email. As mentioned above, this is the only personal information Enpass has about any user.

Enpass's answers align with the company's privacy policy. I encourage anyone in the market for a new password manager to browse each app's privacy policies to learn more about how companies collect, sell, or store user data.

Security Features

You can open Enpass mobile apps using biometrics, such as a fingerprint or face scan. In the app's Settings menu, you can configure app timeouts and unlock methods. While you're there, check out some of the security tweaks I recommend below.

(Credit: Enpass/PCMag)

Menu Settings

First, I suggest enabling the Hide Sensitive option in the Security settings menu. It will obscure your password fields to protect you from over-the-shoulder snoops.

Next, go to the Advanced section of the Settings menu. There, you'll find the option to scan your vault for passwords exposed in a data breach. In a post on the support site, Enpass explains that the scans happen locally on your device, and Enpass doesn't send your passwords to a third party, which is ideal.

Below that setting is the Erase Everything option. It nukes your vault, leaving your passwords safe and secure in the cloud or on a different device. Vault data stored via third-party cloud storage on a USB drive or other device will not be affected. It's helpful if you think your device has been compromised and want to keep your data out of the wrong hands.

Enpass Audit

I like Enpass' vault audit functions, which identify breached, compromised, identical, MFA and passkey-supported, or weak logins in your vault. Other password managers, like RoboForm, offer similar password hygiene tools.

Hands On With Enpass

For this review, I tested Enpass on Android, as well as its Chrome and Edge browser extensions, and the Windows app.

Password Capture and Replay

The desktop app is easy to navigate, although it may not be very helpful for people who don't frequently use desktop apps, as it cannot autofill passwords in web browsers. That said, it's required to use the browser extensions. I didn't have trouble capturing and storing existing logins in my vault, and it was also easy to create new ones using the browser extensions.

(Credit: Enpass/PCMag)

If you use the browser extension, check the box that requires Enpass to authenticate all your new sessions. This is one way to prevent someone from using your browser's old authenticated session tokens to steal your credentials.

Passkey Storage

I successfully created and stored passkeys using Enpass. You can manage your passkeys by clicking or tapping on the Passkeys section in your vault. From there, you can edit the entry to include other info, such as an associated phone number, a security question, or a secret key for a one-time code.

(Credit: Enpass/PCMag)

Password Generator

I always tell people to create long, strong, and unique passwords for their accounts, and Enpass makes that task easy. The password generator creates a 32-character password by default, which is excellent. The maximum is 100 characters. Your passwords can include capital and lowercase letters, digits, and symbols.

(Credit: Enpass/PCMag)

Storage and Form Filling

In addition to passkeys and passwords, you can store various types of information in your Enpass vault, including addresses, phone numbers, and even your social security number. That said, I don't recommend storing all your private information in a single app, even if you do so locally. If someone accesses your device, they'll have all of that information. Instead, consider keeping your private data and files on a storage device that isn't connected to the internet, like a thumb drive or a portable hard drive.

(Credit: Enpass/PCMag)

Typically, a password manager can auto-fill details such as your name, address, or phone number on the web. This makes quick work of shopping checkout forms or information requests on government websites. Unfortunately, auto-filling using the Chrome browser extension was hit-or-miss during the latest evaluation. Sometimes Enpass recognized the form field and offered to fill in the name or email address I stored in my vault, but more often than not, those fields remained unfilled.

You can attach files and images to your vault entries. For example, you could add a photo of your driver's license to the corresponding item. Your storage space is limited to the amount left on your local device or in the cloud storage account you set up.

Sharing and Emergency Access

I don't normally advise sharing passwords, but there are relatively low-risk situations where sharing makes sense. To share a vault credential with another person who uses Enpass, first create a preshared key (PSK) for the credential you want to share. The PSK is a password you create and send to the recipient or group before sending the password itself. The shared passwords are only accessible via the Enpass app.

(Credit: Enpass/PCMag)

Other password managers make sharing a little easier and more intuitive. For example, Keeper allows you to designate different levels of security for your shared passwords. You can also create separate vaults specifically for sharing passwords with family and friends, which is handy if you share a Netflix account with family members or if you and your friends need access to a fantasy football account.

Enpass does not currently offer any password inheritance or other emergency access features, which would facilitate the transfer of your credentials and other valuable information in the event of your untimely demise. Bitwarden, Dashlane, Keeper, and NordPass all offer digital inheritance methods.

Mobile Apps

Unless you pay for Enpass' Individual Plan, your mobile apps can only manage a single vault and the first 25 entries you add. You may hit that limit quickly, so it’s not as workable a solution as other free password managers, such as Bitwarden or Proton Pass, which do not restrict you to a certain number of entries.

(Credit: Enpass/PCMag)

I tested Enpass' Android and iOS apps. The apps' appearance is comparable to the browser extension and desktop version, but the free versions are not as functional. For example, there's no way to upload your password list from your phone. You can still access any vaults you’ve synced, manage tags, use all the password audit tools, and generate passwords. The Enpass mobile app can also function as an authenticator app, and you can use it to scan QR codes and generate MFA tokens.

I was able to use my synced passwords on my mobile device and could log into my test accounts without any problems. If you have trouble auto-filling your logins, visit your device's Settings menu to ensure that Enpass is set as your default password manager.

Enpass Business

Enpass used to offer three levels of service for businesses, but the company has since trimmed those down to just one offering, the Business Plan, which costs $1.99 per user per month. There's also an Enterprise Plan for larger companies.

Like the personal plan, Business users can store data locally on their devices, with an option to use cloud storage. Key highlights of the plan include access recovery, vault sharing, complimentary family plans for all employees, custom branding options, and automatic user provisioning via SCIM from trusted platforms like Azure AD and Okta. All business accounts include integration with Google Workspace and Microsoft 365.

As with competitors NordPass and Dashlane, Enpass Business features an audit system for users and a security dashboard for administrators. The reporting dashboard shows which employees have weak, reused, or old passwords in their vaults.

One helpful feature of Enpass Business is automatic offboarding. It enables administrators to automatically delete data from employee devices and vaults when employees leave the organization. Competitor Bitwarden has a similar function: admin users can remove team members from vaults at their discretion.

Customer Service Options

Need help with your Enpass account? You can send an email to support@enpass.io to receive assistance. If you'd like to try troubleshooting the problem on your own, visit the Enpass support website or ask a question in the app's forums.

Is Deleting Your Enpass Account Easy?

If you ever want to move on from Enpass and switch to a new password manager, you must cancel your subscription before you can fully delete your account. If you subscribed to the app using Apple's App Store or Google's Play Store, you'll need to cancel the subscription within those apps. If you bought your subscription on Enpass' website, visit this link, enter your email address, and then follow the link you receive in your email inbox to access your account page, where you can cancel your subscription.

After canceling your subscription, deleting your account is a very straightforward process, which is ideal. Open the Settings menu on any platform, click or tap your email address, and then select Delete Account.

Final Thoughts

Enpass Password Manager - Security (Credit: Enpass)

Enpass Password Manager

3.5 Good

Enpass is an easy-to-use password manager that shifts responsibility for credential security to the customer by offering local and third-party cloud storage options.

About Our Expert

Kim Key

Kim Key

Senior Writer, Security

My Experience

I review privacy tools like hardware security keys, password managers, private messaging apps, and ad-blocking software. I also report on online scams and offer advice to families and individuals about staying safe on the internet. Before joining PCMag, I wrote about tech and video games for CNN, Fanbyte, Mashable, The New York Times, and TechRadar. I also worked at CNN International, where I did field producing and reporting on sports that are popular with worldwide audiences.

In addition to the categories below, I exclusively cover ad blockers, authenticator apps, hardware security keys, and private messaging apps.

The Technology I Use

I like testing new software for work, but I'm less "plugged in" to the internet than I used to be. I tend to read app privacy policies to see what kind of data companies collect, and as a result of those findings, I don't use many mobile apps. In a similar vein, I was an early adopter of many social media platforms, but now I’m just an infrequent Reddit lurker.

I'm a gear junkie. I split my work time between a 2021 Apple MacBook Pro and a Lenovo ThinkPad. I shoot most of my videos for PCMag using a Canon M50, a Sony A7iii, and a Sony a6000. I edit videos using Final Cut Pro and Adobe Premiere Pro.

I write all of my words for PCMag either in the MS Notepad app on my ThinkPad or the Notes app on my iPhone 12 mini. If I'm traveling and working, I use my iPad to write short articles or take notes.

My dad built me my first computer sometime in the late '90s, and I used it for reading Encyclopedia Britannica and writing Sailor Moon fan fiction. My first phone was the ubiquitous Nokia candy bar.

Read full bio