Last Updated: December 1, 2021
- Secure Password Sharing: Yes
- 2FA: Supported
- Ease of Use: Average
- Security: Good
- Free Version: Yes
- Customer Support: Email, ticket
- Mobile Apps: Yes, Android and iOS
- Travel Mode: No
Desktop users in search of a free password manager.
- Multi-factor authentication
- Proprietary TOTP authenticator
- Plans diversity
- Uses third-party cloud storage
- Doesn't support traditional 2FA
- No password inheritance
What Is Enpass
The Enpass password manager is an offline service. It offers more functionality than its browser-based counterparts but isn’t as expensive as its competitors. A paid subscription is optional, but you could get by without premium features if your digital life mostly revolves around a desktop.
Let’s see what it can offer:
Whether you go with the free or premium version, the current set of Enpass solutions can be just what you’re looking for.
Enpass works with practically all desktops, laptops, smartphones, and tablets. Enpass for Linux is compatible with the following 64-bit distributions:
- CentOS 7
- Fedora 28
- Mint 19
- Ubuntu 16.04 or later
If you have the Enpass desktop app, you can download extensions for the most popular browsers. This password manager supports more than just Chrome, Firefox, and Safari – you’ll be able to use it on Edge, Opera, or Vivaldi.
Like Enpass mobile apps, the desktop ones are downloadable through digital distribution platforms such as Microsoft Store and Apple Store.
Moreover, Enpass apps and web browser extensions have to work in tandem, especially to enable password capture and replay.
To link an Enpass extension to a corresponding desktop app, the entry of a passcode generated by the former is required. This method eliminates the necessity to type in your master password every session.
Enpass apps are not created equal, though. Usually, desktop ones beat their mobile counterparts on features. But there are functions exclusively available through smartphones and tablets. More on these later on in our Enpass review.
You can deploy the app via a USB drive by downloading the ZIP file containing 65MB of software archives of Enpass Portable on Enpass.io. This way, you can use the password manager on any computer without having to install it on the hardware and have your apps and settings wherever you go.
This version of the password software can be set up and configured on any Windows-, macOS-, or Linux-powered hardware. Since everything is saved on the USB drive, you won’t leave any footprints on a personal computer whatsoever.
This plug and play app is useful any time, but it’s perfect when you’re away from the desktop you normally run Enpass on.
Even if you have the offline password manager on your mobile device when traveling, Enpass Portable may help you pass border security checks more easily.
You can easily migrate data from web-based password managers and other password management solutions to the Enpass desktop app.
If you want to export CSV files from Excel, make sure to convert them to the formats Enpass accepts. Follow the templates for logins, credit cards, notes, and miscellaneous credentials on Enpass.io.
One of the privileges of being a paid mobile user is the access to multiple vaults of Enpass. You’ll have the ability to not just save as many items as you want but also segregate them into countless categories.
You can likewise make your credentials more searchable with tags. If you want to customize categories, templates, and individual items as your preference, you can.
Moreover, you can create a unique password for each vault. A word of caution: the Primary vault password servers as your master password by default. Since it is irrecoverable, losing or forgetting it can lock you out of Enpass.
Enpass can function as file storage. With Attachments, you can add images and files of any format like PDF to any saved item of your choice. Enpass allows up to 5MB per attachment.
For convenient navigation, you can find all items with attached files through the sidebar. You can remove attachments as easily as you can add them.
With the web browser extensions from Enpass for Chrome, Firefox, Safari, Edge, and Opera, you can automatically enter your credentials and card details in web forms. You can access password-protected web pages and streamline the checkout process on ecommerce sites.
Moreover, this feature enables Enpass to capture new login details on new webpages. The password software will prompt you to save the information, so you can autofill the same form next time.
Enpass Autofill works with multiple-fields web forms too. Save some personal data on the app first, and then sync such identity details across your devices. It has over 80 native templates available.
This built-in auditor checks whether passwords saved on Enpass are Weak, Identical, Expired, or Pwned.
The fourth refers to passwords, including seemingly strong ones, that have been compromised. The tool is managed by Have I Been Pwned, which is managed by Australian Microsoft Regional Director Troy Hunt.
With your permission, Enpass will check your password against the Have I Been Pwned database. Whether you want to audit your items en masse or individually, Enpass will alert you when your information has been involved in a data breach.
This native tool automates new password generation, so you can have unique and strong credentials for each of your accounts. With this feature, you can come up with random or pronounceable passwords (or passphrases).
Generated using the Diceware method, passphrases can be difficult to crack. But they’re just hyphenated dictionary words.
Also, the passphrase length Enpass generates by default is merely six-word long, which rates as good. You would think that the Enpass Password Generator would create something stronger automatically. But you can go up to 15 words to make it more secure.
To satisfy different password requirements of sites, you can define which symbols the tool should include or exclude.
With this option, you can connect Enpass to the cloud. Although you don’t have to, it’s a convenient way to ensure that every change you make on the password manager applies across all of the devices running it.
Following are the file storage and synchronization services Enpass supports.
- Google Drive
Other than automatic updates, syncing Enpass to the cloud allows you to have data backups.
This feature also lets you grant colleagues, relatives, and friends with whom you share similar cloud accounts for access to groups of items by sharing them vault passwords. There is no Enpass Teams yet, but Cloud Sync is the next closest thing.
Since there’s a third-party cloud storage service involved, you can’t set access permissions and sharing attributes at all.
Speaking of sharing, you can directly and securely share items to another Enpass user. First, you need to generate a pre-shared key, a password your recipient must have to access the encrypted data. Also, you can limit what fields to share by toggling off Email, Password, or Website.
To complete the operation, Enpass will ask you how you want to share the data. You can choose to copy it to clipboard, send it via email, or explore some other way.
Surprisingly, the password manager also provides an unsecure way to share supposedly secret data.
If you take this route, Enpass will encrypt the username, password, and site with a pre-defined key, which any user of the service can import. The software will merely send the data in plain text along with an encrypted block.
The creators of the software acknowledge that this method can be risky. Although it offers advice to minimize the chances of leakage of data, we won’t recommend it in this Enpass review.
This tool enables you to create a backup for your password vault data. You can save it either on your desktop over a wireless network or on your mobile device.
If you’re using the latter to create a backup on your desktop, choose Backup over Wi-Fi on Vault Settings. It’s imperative that both pieces of technology are connected to the same network. Also, you must be on the Enpass mobile app throughout the whole process.
On the mobile screen, you’ll get a message containing an address bar you should navigate through your desktop’s web browser. After, it will redirect you to Enpass’s Backup Service, a page where you can download the encrypted data backup.
If you’re using a desktop, the process is straightforward. Choose Backup Now, and then pick a location.
Enpass Mobile Apps
In terms of functionality, Enpass’s mobile apps were historically not on par with the desktop ones. But the iOS and Android versions have improved significantly. Previously unavailable features like the built-in password generator are now present on mobile.
Despite the limitations mobile Enpass Lite users contend with, you can do certain things with a smartphone or tablet that are impossible with a desktop.
Number one is wearable support. You can connect Enpass to your Android Wear or Apple Watch using your Android device or iPhone, respectively.
You may receive a passcode to complete the setup. A wearable can’t use the password manager independently; you must pair your gadget with your smartphone through Bluetooth to access your data stored on Enpass.
Also, we found that the Enpass Autofill worked more seamlessly on mobile than on desktop.
You can create a backup with your mobile device sans third-party cloud synchronization. With Folder Sync, you can set your Enpass account to automatically save your data in your hardware’s local storage directory.
You can pick an existing folder or create a new one as the file destination. To spot your backup, look for sync default.walletx.
The new version of Enpass retained the software’s beloved security features and brought back a one many users missed.
The main criticism we found in every Enpass password manager review we read was the company’s refusal to adopt traditional two-factor authentication options. Nevertheless, Enpass does support multi-factor authentication in its way.
This is the leading cryptography algorithm today, so we couldn’t ask for more. To neutralize side channel and brute force attacks, Enpass uses 100,000 rounds of PBKDF2-HMAC-SHA512 using SQLCipher, an open-source, peer-reviewed encryption engine.
Third-Party Data Synchronization
Enpass piggybacks on the advanced cybersecurity of premier cloud service providers.
All data encryption and decryption happen locally on the device. So your password vault data will be safe in the rare event that your chosen supported online file storage system gets hacked.
If you use a device with biometric sensors, you can log into Enpass using fingerprint, eye, or face recognition tech. You’ll still need to enter your master password to decrypt your credentials and identities.
With Enpass, you won’t need a third-party authenticator solution. You can access the time-based one-time passwords of your stored items without leaving the app.
Enpass auto-copies TOTP, so you can just manually paste them in the designated fields. Scanning the QR code on the sites where you want to add TOTP works too.
Perhaps due to popular demand, Enpass has restored this feature. With Password Subset, you can see some password characters based on their position. Whether it be the first, third, or last, you can specify which ones to reveal.
The use of a keyfile can complement your master password. We took some time to look into it for this Enpass password manager review – it acts as a second layer of authentication.
Enpass can automatically remember the location of your keyfile and verify it upon login. This way, you won’t have to enter it when using the hardware that contains it.
In addition, you can generate a QR code for your keyfile if you wish. A keyfile is removable and irrecoverable, so you should get rid of it if you’re uncomfortable using it or back it up if you want to keep it.
Enpass apps and extensions talk through a local web socket. The company verifies its web browser extension’s unique identifier and the browser’s code signature to prevent anyone from eavesdropping your sensitive information.
Security Audit Report
The latest Enpass Security Audit Report from VerSprite is available for download on Enpass.io.
Ease of Use and Interface
Enpass Assistant, the third component of the password manager, handles all of the user interface work. You can make it stick to the screen, so it won’t disappear when you click outside of it.
Enpass apps use Favicons for popular sites and generic but customizable icons for the rest. A dark theme is available, which is a plus factor for us. We used it when writing our Enpass review.
To simplify search, it has Trash and Archive folders to filter out items you don’t want to see. Except Notes, you can view the change histories of all fields in an item.
Lastly, Enpass provides localization support for the following languages:
Enpass offers no live chat support, nor does it provide a phone number. To be honest, that was one of the things that disappointed us during our Enpass review research.
Instead, the company accepts email inquiries at firstname.lastname@example.org and requests through Enpass.io. It displays its US and India addresses too.
Despite the lack of instant customer support options, there are numerous knowledge bases (FAQ, User Guide, and Blog) along with its whitepaper to answer all-too-common questions and guide you every step of the way.
Enpass Forums has a thriving community. The Enpass Team is as active as participative users, so you can rest assured that the company will take note of your feedback when you post it.
Enpass Plans and Pricing
As mentioned, the software is available in free and paid versions.
The desktop version is free but limits storage to 25 items.
The premium subscriptions are as follows:
- $15.99 ($2.67/month)
- $23.99 ($2/month)
- $35.99 ($3/month)
Verdict – Is Enpass Worth It?
Enpass doesn’t support app passwords. And the software also lacks a value-added feature for digital legacy. But don’t write it off just yet.
In the grand scheme of things, Enpass can handle the basics well. Since it’s free for desktop users, and for mobile users to some extent, and has sufficient security features, we recommend trying it. It might just surprise you!
Enpass is a standalone password manager. By definition, the service doesn’t require internet connectivity.
Other than logins, Enpass is useful for securely storing PINs, Social Security information, debit and credit card numbers, notes, and all other credentials you want to keep handy offline.
No, it isn’t. Enpass uses the globally used SQLCipher instead of developing its proprietary code for cryptography.
Enpass is free for desktop users. This password manager will cost you money only if you want to store more than 25 items and create multiple vaults on mobile.
Enpass’s adamance about not using intuitive two-factor authentication options will always make a dent in its trustworthiness. But, as we discussed in this Enpass review, this password manager provides a bunch of features to authenticate your identity and protect your sensitive data.