Enpass Review 2024: Great for Offline Storage

Enpass is an offline password manager that might provide more secure storage but lacks certain security features.
We receive compensation from the products and services mentioned in this story, but the opinions are the author's own. Compensation may impact where offers appear. We have not included all available products or offers. Learn more about how we make money and our editorial policies.
4.5
Editorial Rating
Learn More
On Enpass's website

Password Manager
Enpass
  • Offline password management so only you have access to your data
  • Extensive list of password import options
  • No 2FA or digital legacy features

Enpass is user-friendly, allows for extensive customization, and has high security standards, but we were surprised by some of its gaps. There's no emergency access for sharing your vault with your contacts and there's no additional authentication beyond your cloud account login.

Depending on your needs, these may not be deal breakers. Enpass is still a great option for someone seeking an inexpensive, offline password manager. We'll dive into the details in our review below. 

Pros
  • Offline password management so only you have access to your data
  • Extensive list of password import options
  • Free app with unlimited password storage for desktop
Cons
  • Difficult to connect to a server on desktop
  • No 2FA or digital legacy features
In this article
At a glance
Our experience
Cost
Features
Privacy policy
Is Enpass to use?
Customer service
Compatibility
Top alternatives
FAQs
Bottom line: Is Enpass password manager good?

At a glance

Price Starts at $1.99/mo (billed annually)
Free version Yes
Number of users 1 to 6
Compatibility Windows, macOS, Linux, Android, iOS
Browser extensions Chrome, Firefox, Safari, Edge, Opera, Brave, Vivaldi
Import/export tool Yes
Password sharing Yes
Encryption AES-256
Password generator Yes
Password strength report Yes
Autofill Yes
Digital legacy No
Cloud storage No
Details Get Enpass

How we test and rate password managers

We put every password manager through vigorous hands-on testing by downloading the software to our own devices. We test how the product works on both mobile and desktop, evaluating how well we're able to save, share, and use passwords across a variety of situations.

By taking a fine-tooth comb through all available features and settings, we carefully compare each product using our proprietary grading rubric. The star ratings take into account price, features, extras like cloud storage and data breach alerts, plus looks at security and privacy features like encryption levels and past data breaches. 

To learn more about how we test, check out our full testing methodology here.

We last tested Enpass on November 25, 2024.

4.5
Editorial Rating
Learn More
On Enpass's website
Password Manager
Enpass
  • Offline password management so only you have access to your data
  • Extensive list of password import options
  • No 2FA or digital legacy features

Our experience

We downloaded the Enpass app onto our laptop running Windows 11 and we set up the extension on the Google Chrome browser. Once it was finished downloading, we were prompted to select how to store our files. This is because Enpass doesn't store your data on its servers, so your data will stay with you. 

Welcome to Enpass setup page

We selected Google Drive for storage but Enpass gave us an error with no explanation, despite trying a few times. We selected local storage instead and were led to the dashboard.

Welcome to Enpass setup page with an error about Google Drive

We had few issues from there, though. From the right-hand menu, we selected import and Enpass provided a list of practically every password manager and browser we could think of. Other password managers we've tested have been incredibly limited, so we always appreciate having lots of import options.

Enpass list of import options

We selected Roboform and uploaded our CSV file. Enpass imported all of our files correctly, with the username and passwords all in the proper fields. 

We also installed the Google Chrome extension to try out its autofilling capabilities. The Enpass logo quickly appeared on the needed fields when we were logging in to our test Amazon account and when we went to create a Target account. As far as the basics go, Enpass delivered. 

Target account creation page with a prompt from Enpass to log in

How much does Enpass cost?

Enpass will cost you either $1.99/mo (billed annually) or $2.99/mo (billed annually). Both paid plans are the same, you just need to choose between an individual plan or a family plan, which can cover up to six users. It’s also worth mentioning that you can make a one-time purchase for an individual Enpass account for $99.99.

Enpass offers a free desktop version for Windows, macOS, and Linux, which allows you to store unlimited passwords along with multiple vaults. You can also use the mobile apps, which have a limit of 25 passwords. 

Plan Free Individual Family
Price Free $1.99/mo (billed annually) $2.99/mo (billed annually)
Number of users 1 1 6
Number of passwords Unlimited for desktop, 25 for mobile Unlimited Unlimited
Password vault
Autofill
Password generator
Password sharing
Data breach alerts
Details View Plan View Plan View Plan

For desktop users, Enpass offers a free password manager and a limited free version for mobile users. If you choose to purchase an Enpass plan from its website, the company will issue a full refund within 30 days of the subscription start date if you cancel your subscription.

Enpass password manager features

Enpass is a secure, offline password storage option, but you can share your passwords between devices and family members as well. With unlimited password storage, an autofill feature, and a secure bioidentical login option, we found it had some convenient features.

Importing and exporting passwords

Enpass is one of the best password managers we've tested for importing data from previous places. If you've used another password manager, Enpass most likely has an import option for it. If you saved your passwords on your browser, Enpass probably has that browser covered too.

We tested the import tool with a CSV file we had exported from Roboform. We selected the Roboform option and our records all saved in the correct fields. 

Enpass dashboard open on list of all items

To import and export passwords, select the button with three lines in the top-right corner. Then scroll to File and select Import or Export depending on your needs. 

Password sharing

There are two ways to share passwords within Enpass password manager. If you prefer to share passwords individually, you can share them with the intended recipient through a pre-shared key (PSK). To share the entire vault, you must either connect the vault to a cloud service or link all of your family's devices together on your local Wi-Fi network.

We added our personal email and created a PSK link to test password sharing. You can specify which fields of the record you want to share, which is a nice touch. 

Enpass window to share an item

The receiver will need to log in to their own Enpass app, copy the provided link from the sender, tap + to add an item, and paste the PSK on the Add item from clipboard selection. From our experience, this is a lot more tedious compared to other password managers, which usually will just generate a link or let you send an email with the item. 

We've also found online feedback from customers directly to Enpass which also noted these sharing issues within recent years. Because we were unable to establish a Wi-Fi connection that would connect our desktop computer to our iPhone, we did not attempt to share the entire vault with another user.

An easier option would be to set up your subscription on the family plan, which allows up to six members of your family to access all the password data. The main user can add and remove members through the Enpass Family Admin Console and share a family vault through either Wi-Fi or a cloud service.

Each family member’s data syncs every time the app is unlocked or within five seconds each time a data change is saved.

Password generator

The Enpass password generator has extensive options to make your passwords unique. The length can be anywhere from four to 100 characters, and Enpass will let you know if your passwords is poor if you make it too short.

You can also add uppercase letters or numbers to the unique, easily pronounceable words separated by periods, hyphens, commas, and more. 

Enpass password generator

Autofill

To autofill on our computer, we installed the Enpass Chrome extension. We navigated to the Amazon website to test out a record we created and the logo appeared to fill out our credentials. 

Amazon Create account page with the Enpass autofill pop-up

Enpass can also fill out your identity information, credit card details, and other information that goes in web forms. We tested this out from the Target account creation page and found it seamless to use.  

Password strength report

The password audit feature informs you if any passwords were part of a prior breach, currently compromised from a data breach, or identical to other passwords. For data breach monitoring, you’ll need to enable the Compromised Passwords Audit feature under Advanced Settings.

Enpass also informed us of any weak passwords. We entered a test record with the password "password123" and Enpass flagged it immediately, with repeated pop-ups prompting us to change it because it's been compromised. 

Enpass audit list of compromised passwords

The only list that confused us in the password audit section was the list of identical passwords. All of our passwords we imported from Roboform were listed as identical, but they each had unique strong passwords we had created with a generator. We're not sure what Enpass's standards are for idential passwords are and the online guides didn't provide much more information. 

Digital legacy

A digital legacy tool is a password-inheritance feature that allows the transfer of your passwords and accounts if you pass away. At the time of writing, Enpass password manager doesn't offer a legacy tool. 

Bonus features

During the setup process, we noticed that the app locked automatically when our phone timed out, which is a nice safety feature that makes it more difficult for others to access your information. If you would like to keep your password manager active longer, you can change the time in Settings with a range from 30 seconds to 12 hours of inactivity.

Within the iOS app, you can store unlimited passwords on the paid subscriptions and browse through them on the Browse tab. Each password is separated by a life category like credit cards, passwords, computer, travel, and more. You can also use Enpass password manager as an authenticator app, which will keep one-time codes for websites that use 2FA, and this item can also be found in the Browse section of the app.

The Enpass iOS app includes the Browse feature which lets you scroll through all your saved passwords.

Are you someone who remembers things a bit better with a photo? If so, the app permits you to attach photos to any password entry; PDFs may be attached as well. The Archived and Trashed features allow you to move unimportant items out of your main queue but save them for later if you may need them. Enpass is compatible with the Apple Watch, and you can enable your Apple watch in the Settings area.

Finally, in the Advanced Settings section, you can create a backup of your data. Although your data may be stored in a cloud service of your choice, you can create a local data backup for peace of mind. If, at any time, you feel that you need to delete all of your password data, there is one button in the app that can take care of that for you. 

It is worth mentioning that it will only delete the data from your local device, so you may have to go into the Cloud or your other devices to perform full deletion.

Enpass privacy policy

When creating your data privacy plan, implementing a password manager is an essential step for keeping your information secure. It's just as important to know what measures companies are taking to ensure that they care about your safety. 

While Enpass does collect standard data from you to make sure you can use the service, beware that they also use a variety of cookies and third-party subsidiaries to collect data from you for advertising purposes. Note that you can opt out of email correspondence.

What data is collected?

Data collected from Enpass password manager may include items like your web browser or mobile device, your IP address, your ISP’s name, web browser type, operating system information, country, language, and data about your browsing activity when using the service.

Additionally, the service uses cookies, or a unique string of letters and numbers that identifies your PC or mobile device. Cookies are primarily used to authenticate your information online without re-entering your details for each website visit. They are also used to store information about your activities and bookmark where you may have left off within a website.

Is my data used with third parties?

If you voluntarily log in to Enpass with a social media website like Facebook, Twitter, YouTube, or Google, you are agreeing to the company using and storing your profile information to enhance the experience with Enpass on your social media. 

Enpass may also share your personal data with their subsidiaries so that it can send more information about product and service offerings.

Enpass third-party audits

The latest Enpass audit was conducted in May 2023 by Cure53. The most recent 2022 analysis, performed by Cure53, stated that the auditing firm was left with a positive impression of the app, having found no critical security vulnerabilities within their audit.

Although we can never guarantee the current security level of any product, our Enpass review suggests that the company's systems and applications are just as secure as other comparable password managers.

Is Enpass safe to use?

Because a cloud service can be exposed to password hacking, many people feel safer only utilizing their local network or by keeping their passwords on only one device.

When we reached out to Enpass password manager to ask about their cloud security, the customer service agent responded that the Cloud is merely a “storage medium” and neither encryption or decryption is performed within the Cloud. The decrypting or encrypting of data is completed on your local device, so sensitive data does not leave your device in an unencrypted manner.

What this means is that even if a hacker could get into the Cloud, they would be unable to decrypt your passwords without your main Master Password. Yet, issues with cloud storage remain for all cloud users, such as security vulnerabilities or insider threats. 

Moreover, you are putting all of your passwords at one single point of potential failure. Although cloud storage is popular, these are a few things for you to think about when considering the safety of your password manager. 

Two-factor authentication

From Enpass’s website, you might believe that you will be setting up two-factor authentication (2FA) as an extra protection measure within the app itself, but that is incorrect. The Enpass website simply states that all paid Enpass password manager plans can identify your online accounts that require 2FA within the application, so don’t count on having 2FA as an extra login measure.

If you feel you need more security beyond your master password, Enpass does support the use of a Keyfile. A Keyfile is a file on your device that contains your encryption key, and this is what they provide versus the 2FA you may be used to. Enpass offers instructions for setting up your Keyfile and advise that the password manager cannot recover your lost Keyfile or Master Password because the data is offline and completely under your control.

We wish Enpass gave you the option to add 2FA to the master password in addition to the Keyfile. Enpass says the Keyfile should be safe enough, but we always appreciate another layer between us and hackers.[1]

Enpass compatibility

We liked that Enpass supports multiple devices, operating systems, and browsers. Enpass password manager desktop app is compatible with the following:

  • Microsoft Windows
  • macOS
  • Linux

You can also use the mobile version of Enpass with:

  • iOS
  • Android

Enpass also offers browser extensions and works with the following apps:

  • Dropbox
  • iCloud
  • Google Drive
  • OneDrive
  • Box
  • WebDAV
  • Nextcloud
  • Edge
  • Chrome
  • Firefox
  • Safari

The company gives you a choice to either store your password data with your local Wi-Fi connection or link to the cloud service that you prefer.

Enpass customer service

Enpass’s support page lists its most frequently asked questions in a series of articles. If you can't get the answer to your question from an article or the forum web page, you can reach out to customer support in a general email.

The first time we reached out to customer service, we received an email response within one business day, but the second time we reached out, we heard nothing regarding the issue. Eventually, customer support did respond to all our inquiries. 

We noticed that its responses directed us back to articles that hadn't been of any help. Although we appreciate the eventual replies, it was concerning that these resources weren't initially useful.

Top alternatives

Enpass is one of our highest rated password managers, but what if you need an easier way to share passwords or an option for digital legacy? That's why we've collected the following recommendations if you're still not sold:


Star rating
5.0
4.6
4.5
Starting price Starts at $1.29/mo (billed every two years) Starts at $1.66/mo (billed annually) Starts at $2.92/mo (billed annually)
Compatibility Windows, macOS, Linux, iOS, Android, Chrome, Firefox, Edge, Safari, Opera Windows, macOS, Linux, iOS, Android, Chromebook, Chrome, Firefox, Edge Windows, macOS, Linux, iOS, Android, Chrome, Firefox, Edge, Safari, Brave, Opera
Autofill
Password sharing
Password generator
Digital legacy
Learn more Get NordPass Get Roboform Get Keeper

Enpass FAQs


+

Can Enpass be hacked?

It’s not likely, although anything is possible. Enpass doesn't perform any cryptographic operations on data stored in the cloud — all such operations are only done locally. Your data is never sent to the cloud unencrypted, thus ensuring that even if an attacker were to gain access to your Enpass data file, it would remain secure behind your master password and be of no use to them.

If your cloud service provider has any vulnerabilities, hackers could potentially exploit them. That's why it's important to make sure you choose a trustworthy provider for your Enpass password manager.


+

How do I use Enpass password manager?

There are more features available on the desktop version of Enpass’ free password manager, so you may want to download its software to your correct operating system. 

If you also choose to use the mobile app, you can sync data on both devices through a local connector or a cloud service provider. Once you have downloaded the software, you can use bioidentical information for login and start generating and storing your passwords.


+

How do I recover my Enpass password?

There's no password recovery process with Enpass, so if you think you may lose or forget your master password, you'll need to have a data backup in place. If you'd like your Enpass data to be backed up on both your cloud service provider and your device, enable the Backup Automatically setting in Enpass.

To restore the Enpass data on your new device from the cloud account, navigate to the Welcome screen of the Enpass application on your device and follow these steps:

  1. Select Restore Existing > Cloud Account.
  2. Enter Vault password.
  3. Tap Continue.

This syncs all of your passwords onto the new device.

Bottom line: Is Enpass good?

Enpass is a good option for those wanting to store their password data on-site without any need to share it, given its relatively inexpensive price point.

When comparing Enpass with our top alternatives, its features and performance are satisfactory but not extraordinary. You may find these two password managers or one of our top recommended password managers offer better value for your money if you don’t require an offline password storage option.

4.5
Editorial Rating
Learn More
On Enpass's website
Password Manager
Enpass
  • Offline password management so only you have access to your data
  • Extensive list of password import options
  • No 2FA or digital legacy features
Author Details
Robin Moore is a freelance writer and editor specializing in blockchain technology, including wallet security and data privacy. She is the current Managing Editor for Watcher.Guru, a startup blockchain and finance news publication with 1.7 million followers on Twitter. Robin has also been the lead content editor with Genfinity.IO, another startup blockchain research publication. Before entering the Web3 space, she was a business analyst within the oil and gas industry. When she is not offering advice on the best ways to protect data privacy, she is hiking, doing yoga, or networking with her Web3 family on crypto-Twitter.
Steph Trejos is an Editor at All About Cookies, leveraging her expertise in the cybersecurity field. She holds a B.A. in English: Editing, Writing, and Media, as well as Media/Communications Studies. With over five years of professional writing experience, she has garnered recognition for her work on anti-financial crime topics, such as money laundering, terrorist financing, and cyberthreats.

Citations

[1] Enpass Discussion Forum