Enpass
The offline-first password manager: no vendor servers, sync through your own cloud or Wi-Fi.
About
Enpass is an offline-first password manager from Enpass Technologies. The core idea is the opposite of the cloud vault model: your data lives on your devices and Enpass never touches its servers, so a breach of the vendor cannot touch your vault. Sync happens through your own cloud accounts, Google Drive, iCloud, OneDrive, Dropbox, Box, Nextcloud, or WebDAV, where only the encrypted copy is stored, or through a local Wi-Fi Sync Server with no cloud involved at all.
Security is AES-256 with 320,000 rounds of PBKDF2-HMAC-SHA512, and the product supports passkeys, a built-in TOTP authenticator, keyfile second-factor unlock, and unlimited separate vaults for work and personal use. The desktop app is free for individuals; mobile is free for up to 25 items. Premium runs about $23.99 per year or $99.99 as a one-time lifetime license, with Family and Business plans above that. Reviewers like the ownership model and lifetime option but note the app code is closed source (only the SQLCipher library is open), sharing with other users is clunkier than cloud managers, and there is no web vault for browser-only access.
What it can do
- Offline-first: no Enpass servers store your vault
- AES-256 with 320k rounds of PBKDF2-HMAC-SHA512
- Sync via your own cloud, WebDAV, or local Wi-Fi
- Unlimited separate vaults for work and personal
- Passkey storage and sync across devices
- Built-in TOTP authenticator
- Keyfile second-factor unlock option
- One-time lifetime license option
- Cross-platform: Windows, macOS, Linux, iOS, Android, wearables
Setup
Download the desktop app (free for individuals) or mobile app, create your master password and vaults, then connect sync through your own cloud account or the built-in Wi-Fi Sync Server. Premium unlocks unlimited items on mobile and breach monitoring.
Prerequisites
A personal cloud account (Drive, iCloud, OneDrive, Dropbox, WebDAV) for cross-device sync, or local Wi-Fi for device-to-device sync.
Use cases
Works with
Trust score — 7/10
Scored 7/10 (metrics tier, metrics-v1). Evidence: 2026 reviews confirm the offline-first model with no vendor servers, sync via own cloud/WebDAV/Wi-Fi, AES-256 with 320k PBKDF2-HMAC-SHA512, the free desktop and 25-item mobile limits, ~$23.99/year or $99.99 lifetime Premium, passkeys, and the built-in TOTP authenticator. Strengths: vendor can't be breached for your data, lifetime license, flexible sync you control. Docked for: (1) closed-source app code limits independent audit; (2) no web vault and clunky sharing versus cloud managers; (3) mobile free tier caps at 25 items. License: proprietary (SQLCipher library open source).
How the trust score is built
Full methodology →- Adoption · stars/downloads, log-scaled vs peers
- 7.0/10
- Maintenance · recency, releases, issue load
- 8.0/10
- Openness · license + docs
- 4.0/10
- Manual review · sanity read + red-flag check
- 7.0/10
- · Offline-first: no Enpass servers touch your vault; sync via own cloud (Drive/iCloud/OneDrive/Dropbox/WebDAV) or local Wi-Fi Sync Server
- · AES-256 with 320k rounds of PBKDF2-HMAC-SHA512; passkeys; built-in TOTP; keyfile unlock; unlimited vaults
- · Desktop free for individuals; mobile free up to 25 items; Premium ~$23.99/yr or $99.99 lifetime; no web vault; closed-source app code
Sources
Every fact above was checked against these sources. Where a claim comes from the provider and couldn't be independently verified, the text says so.