Encryption engine SQLCipher - Enpass

Your data is protected by the world’s leading cryptography algorithm

Your data is fully encrypted with 256-bit AES with 320,000 rounds of PBKDF2-HMAC-SHA512 using the open-source encryption engine SQLCipher. This provides you with advanced protection against brute force and side channel attacks.

We don’t keep your encryption key or its derivative

The key that encrypts your data is derived from your master password which only you know. There is no record of your master password or its derivative with Enpass. If you forget your master password, there is no way to recover your data.

Encryption key - Enpass
Cloud Sync - Enpass

Sync your data with your preferred cloud provider

Optionally, you can sync your (encrypted) data across all your devices seamlessly through any of the supported clouds (iCloud, Dropbox, Google Drive, OneDrive, and WebDAV). Your data is always transmitted in encrypted format. Encryption and decryption always happens locally on your device.

We never keep your data on our servers

We do not save your Enpass data on our servers. Your data is only stored on your device(s) unless you specifically choose to sync it via your personal cloud storage (iCloud, Dropbox, Google Drive, OneDrive, and WebDAV).

No data on server - Enpass

Use Enpass with confidence

ISO 27001 certified

Certified as per ISO 27001

Our Information Security Management System (ISMS) is certified as per the ISO 27001:2013 standard which ensures that processes inside our organizations are both streamlined and secure, meeting the security and compliance requirements of our customers.

Learn more

Cure53

Comprehensive security audit

We regularly engage third-party security experts to perform audits and penetration tests. We would like to thank Cure53 for their thorough analysis & code-level security audit, and their assistance in achieving higher security standards.

Learn more

GDPR compliant

GDPR compliant

Enpass adheres to the guidelines for data protection set forth by the European Union in the General Data Protection Regulation (GDPR). We make sure your personal data is protected and our data protection practices remain transparent.

Frequently Asked Questions

100% of your data is encrypted with Enpass everywhere. You can open data file inside a binary editor and see it yourself. All you will see is nonsense, gibberish data ( encrypted with AES 256). For more information on Enpass security, check out the Enpass Security White Paper.

If you forget your master password nothing can be done to recover it. There are no such backdoor with options to get back or reset your master password as there is no record of it with us. This is the only way we can make the data inaccessible to anyone except you.

Your cloud always contains a copy of same encrypted data as on your device. We download the whole encrypted copy and decrypt it locally on your device for real sync operation to merge changes. Afterwards we upload the encrypted data on cloud. In a nutshell, your cloud is only a storage medium and no security related operation ( encryption or decryption ) is actually performed there. All such operations are performed locally on your device.

Your data is encrypted using the same standard as on your device, i.e. AES-256 with 320,000 rounds of PBKDF2-HMAC-SHA512 using SQLCipher engine. Even if an attacker gains access to your Enpass data file, it is unusable for him until your master password itself is compromised; otherwise it will take him years to crack and peep through your data.

Enpass uses SQLCipher as cryptography engine which is used world wide for cryptographic operations. It is peer reviewed and open-source. Its design details are available here.

Your Enpass data can only be decrypted by your master password. Please read more here to learn how we have used Fingerprint to unlock Enpass with best possible security.

Your Enpass data can only be decrypted by your master password. Please read more here to learn how we have used Touch ID to unlock Enpass with best possible security.

Enpass provides an option to conveniently share vault’s items with other users. However, the sharing security depends upon how you choose to share the item via a secure mode or an insecure mode. Please visit our help page here for more info.

If you have discovered a potential security issue with Enpass, we kindly ask you to go to this page right now..