|Completely free, full-featured desktop version syncs among cloud services and other desktops||Syncing across devices is not automatic (users must set up syncing with preferred third-party cloud storage)|
|Easy to organize and categorize items in vault||Sharing can be clunky and includes option for unsecured sharing|
|Password auditing feature alerts users to any weak spots||Does not offer two-factor authentication|
|Option to gain full access across all devices through low-cost subscription or one-time fee||Importing passwords during vault setup is not as easy or intuitive as some password managers|
We believe every worthwhile password manager should offer users a positive experience in five key areas: security and encryption, app compatibility, usability and ease of use, password sharing and price. Below, we take a detailed look at how Enpass fares among each of these important features.
There are a few ways Enpass ensures it never has access to users’ passwords — in fact, the only personal information Enpass has access to is a user’s email address. Otherwise, users’ data is only stored locally on their own devices and, if desired, a cloud storage service of their choosing.
Whether using the app’s mobile or desktop versions, Enpass users must create a strong, unique master password that only they know. Users must remember this password because Enpass never has access to it, and if a user were to forget it, there would be no way for Enpass — or the user — to access data stored in the vault.
Additionally, while the company does not offer two-factor authentication, Enpass allows desktop users to opt for an additional level of security tied to their master password. This is called a keyfile, an encrypted key that’s stored locally on the user’s device. A hacker trying to infiltrate a user’s device would need to have somehow learned both the user’s master password and its accompanying keyfile.
While Enpass may lose some points in some users’ minds because it’s not open source, meaning it’s not completely free (mobile users must pay), users can’t fully customize it and the public cannot directly improve its code, it does use an open source, peer-reviewed cryptography engine called SQLCipher to encrypt all data. Enpass also has a helpful password audit feature that can identify and strengthen a user’s weak, old or duplicated passwords.
One of Enpass’ strong suits is its compatibility with most mobile devices, wearable devices, browsers and computer operating systems. Compatible browser extensions work with the company’s app and a user’s vault to autofill online forms with passwords and other personal information such as credit card and passport numbers. While Enpass does support most browsers, one notable exception is Internet Explorer.
The app supports Windows, Linux and MacOS desktops, and users who pay to use Enpass on their mobile phones can use the cloud storage software of their choice to sync data between multiple devices and the web. Cloud storage possibilities include Dropbox, iCloud, Google Drive, OneDrive, Box, WebDAV and Nextcloud. Users should note, however, that Enpass’ cloud syncing feature is not automatic; once they sync their device with a cloud service, they must make sure to manually set each of their devices to sync with the cloud.
Additionally, desktop users can make use of Enpass portable, a free version that users can install on a USB drive to easily access their vault from any desktop computer. Android and iOS users with Android or Apple watches can also take advantage of complimentary support for their wearable devices.
|App Compatible||Product Type|
|iOS||Yes||Mobile app (free or paid)|
|Android||Yes||Mobile app (free or paid)|
|Windows PC||Yes||Desktop app (free with free browser extensions)|
|macOS||Yes||Desktop app (free with free browser extensions)|
|Linux||Yes||Desktop app (free with free browser extensions)|
|Other||Vivaldi; Apple Watch; Android watches||Browser extension; Wearable devices|
Overall, Enpass‘ vault and browser extensions are both high value and easy to use, making it easy for users to organize and customize their passwords and other personal information. Enpass users can easily set up their primary vault by creating, with Enpass’ help, a strong master password and going through a quick email registration process. Bulk importing passwords can be a little tricky, as users must navigate to the app’s import settings and must use a CSV or Excel file to import data not available for import through another password manager or a browser other than Chrome.
Inside the vault, users can easily categorize items such as bank account numbers, credit card numbers, mailing addresses and passwords in templates that are simple to manage and find. Within the vault, users can also easily edit fields for online forms and attach any digital files they wish to protect such as copies of their Social Security card and driver’s license.
For users who want to sync their information across multiple devices, connecting their vault and devices to their cloud of choice can also be a little confusing because Enpass doesn’t do it automatically. Enpass does, however, automatically fill online forms and helps users generate new, strong passwords easily. Users also have the option to use biometrics such as fingerprints and facial recognition on their mobile devices to log in to Enpass.
Password sharing with Enpass can happen in two ways. If a user wants to share a password with someone else, they can choose to either share the password “normally” as plain text, meaning it may be visible to anyone who has it, or as a secure, encrypted password through what Enpass calls a pre-shared key. Users should note — Enpass makes it clear that its “normal” sharing option is not secure and should be used only in an urgent emergency.
The pre-shared key sharing option works by assigning a special key to the password that a user can send to the intended recipient through a means other than the one through which they intend to share the password. The recipient, then, will only be able to decrypt the password by entering this pre-shared key.
With each password sharing option, a user may only share one item at a time, and passwords may be shared through any secure medium such as messages, email or an app such as Whatsapp. Sharing is not limited to passwords, either, as users can share other types of data or file attachments.
Additionally, users can receive shared passwords. This is done through a link the Enpass user can click on to automatically add the item to their vault or copy and add to the vault through their device’s clipboard.
Finally, Enpass recommends that users set up secondary vaults specifically to share passwords with family members or a team of people such as work colleagues. These secondary vaults can be synced through a unique cloud account different from the one an individual uses for their primary vault.
Enpass’ pricing also has much to offer. With the Enpass Free plan, the desktop version is completely free and fully functional, giving users all of Enpass’ vault’s perks, syncing across multiple desktops and browser extension services at no cost. This includes password storage and organization, the password auditing feature, automatic form filling online, strong password generation, password sharing and more.
However, if an individual wants to use all of the app’s features on a mobile phone or other device, they’ll likely need to pay. Enpass does have a free version available for mobile use, but it only covers one vault and limits the number of passwords a user can store to 25. With so many sites requiring logins these days, this may not be enough for many.
Fortunately, Enpass also offers two payment options for premium accounts: a subscription service and a (rare within the password management world) one-time purchase. Each paid option includes all of Enpass’ features, meaning users can enjoy unlimited syncing across devices, unlimited vaults, unlimited password storage and more. Because Enpass’ strongly recommends creating secondary vaults for any data a user wishes to share with friends, family or colleagues, the paid accounts are ideal for families and businesses.
|Enpass Plans & Pricing|
|Mobile Subscription||$11.99/year (discounted as of June 2020 to $0.50 per month for first 12 months billed as $5.99 annually; then $11.99/year)|
|Mobile One-Time Fee||$59.99 one-time fee (discounted to $41.99 as of June 2020)|
|Functionality||How It Works|
|Setting up the vault||Set up memorable, strong master password necessary to access primary vault; Register your email address to access all features; Install browser extension and link it to Enpass app; Add items manually or import from previous password manager, CSV file, Excel spreadsheet or Chrome browser; Add tags to organize items|
|Logging in to accounts||Browser extensions work in conjunction with app to autofill usernames and passwords; In browser, click Enpass icon on login page to launch Enpass Assistant autofill function; Launch autofilled login pages directly from vault; Enpass prompts user to save new logins|
|Sharing logins||Set up secondary vault and link to cloud account not already used with Enpass to securely share passwords with family members or small teams|
|Recovering account||Users must remember master password (no account recovery without master password); Manually backup and restore vaults from local device or cloud|
|Advanced security features||Password audit; Create and store time-based one-time passwords; Pair master password with optional keyfile for extra security; Encrypted data only stored on users’ devices and optionally in the cloud; Data only encrypted and decrypted on local devices.|
Enpass users praise the password manager for its affordable, fair pricing and security measures that include data syncing through cloud storage and strong encryption. One reviewer says, “I like to keep my passwords locally in my own cloud service; this is the password manager that lets me do it … safer than the large company password managers.”
While some users express having difficulties with the app’s autofill function, such as the person who commented, “Autofill shows very inconsistent behavior,” others say flaws are made up for by the app’s unique benefits. As one user puts it, “There might be better apps (?), but I like the lifetime license and that I have control over where the data is stored.”
Individuals seeking a completely free (with desktop use) or low-cost password manager with strong security may find Enpass a win-win solution. Although Enpass doesn’t offer two-factor authentication, we feel the option to pair an encrypted keyfile with a user’s master password and the ability to add a time-based one-time password to any login goes a long way to keep users’ data safe. However, while Enpass can sync across devices and import passwords, individuals who insist or those features being automatic may consider paying more for a competitor’s product.