{"id":813,"date":"2025-08-25T10:51:58","date_gmt":"2025-08-25T10:51:58","guid":{"rendered":"https:\/\/privascore.org\/?page_id=813"},"modified":"2025-08-25T10:51:59","modified_gmt":"2025-08-25T10:51:59","slug":"priva-score-passwortmanager","status":"publish","type":"page","link":"https:\/\/privascore.org\/en\/priva-score-passwortmanager\/","title":{"rendered":"PRIVA SCORE: Password Manager"},"content":{"rendered":"<p class=\"has-base-2-background-color has-background\">Summary: For privacy-conscious users, <strong>Bitwarden and KeePass<\/strong> The clear recommendations. Bitwarden offers the best compromise between user-friendliness, security, and transparency, while KeePass ensures maximum data control. <strong>LastPass<\/strong> and <strong>Dashlane<\/strong> should be avoided \u2013 details below. <\/p>\n\n\n\n<p><strong>The PRIVA SCORE evaluates the data protection features of the 10 most popular password managers. The maximum score is 312 points. <\/strong>The focus is on features such as end-to-end encryption, zero-knowledge architecture, security audits, open source, security incident reports, GDPR compliance, two-factor authentication, and local storage options \u2013 the data protection features relevant to this app category.<br><br>As always, the PRIVA SCORE evaluates how well apps\/services <a href=\"#datenschutzfunktionen\">Data protection features<\/a> In this category, all providers offer end-to-end encryption. <\/p>\n\n\n\n<p><strong>The providers<\/strong><\/p>\n\n\n\n<p><strong>Bitwarden and KeePass<\/strong> <strong>achieved the highest PRIVA SCORE with 312 and 276 points respectively.<\/strong> They offer end-to-end encryption, true zero-knowledge architecture, and maximum transparency through open source. <strong>Bitwarden<\/strong> Regular audits and a lack of security incidents underline the high level of data protection and also <strong>KeepAssist<\/strong> guarantees data protection through complete local data storage.<\/p>\n\n\n\n<p><strong>NordPass, 1Password, Keeper, Enpass, Sticky Password and RoboForm<\/strong> perform mediocrely with scores between 268 (<strong>NordPass<\/strong>) and 202 (<strong>Sticky Password, Roboform<\/strong>) points. They offer good to acceptable encryption standards and two-factor authentication, but do not consistently fulfill all important data protection features. Exclusively cloud-based storage or a lack of audit transparency, for example, lead to point deductions.<\/p>\n\n\n\n<p>Get the lowest PRIVA SCORE <strong>Dashlane<\/strong> (193 points) and <strong>LastPass<\/strong> (166 points). Important audit evidence is missing, and the zero-knowledge architecture is partially poorly implemented. LastPass also stands out due to several serious security incidents in which password vaults were compromised.<\/p>\n\n\n\n<p><\/p>\n\n\n\n<figure data-wp-context=\"{&quot;imageId&quot;:&quot;69def6a96700b&quot;}\" data-wp-interactive=\"core\/image\" data-wp-key=\"69def6a96700b\" class=\"wp-block-image size-medium wp-lightbox-container\"><img loading=\"lazy\" decoding=\"async\" width=\"208\" height=\"300\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"https:\/\/privascore.org\/wp-content\/uploads\/2025\/08\/Passwortmanager_250808-208x300.webp\" alt=\"\" class=\"wp-image-817\" srcset=\"https:\/\/privascore.org\/wp-content\/uploads\/2025\/08\/Passwortmanager_250808-208x300.webp 208w, https:\/\/privascore.org\/wp-content\/uploads\/2025\/08\/Passwortmanager_250808-710x1024.webp 710w, https:\/\/privascore.org\/wp-content\/uploads\/2025\/08\/Passwortmanager_250808-768x1107.webp 768w, https:\/\/privascore.org\/wp-content\/uploads\/2025\/08\/Passwortmanager_250808-8x12.webp 8w, https:\/\/privascore.org\/wp-content\/uploads\/2025\/08\/Passwortmanager_250808.webp 851w\" sizes=\"auto, (max-width: 208px) 100vw, 208px\" \/><button\n\t\t\tclass=\"lightbox-trigger\"\n\t\t\ttype=\"button\"\n\t\t\taria-haspopup=\"dialog\"\n\t\t\taria-label=\"Enlarge\"\n\t\t\tdata-wp-init=\"callbacks.initTriggerButton\"\n\t\t\tdata-wp-on--click=\"actions.showLightbox\"\n\t\t\tdata-wp-style--right=\"state.imageButtonRight\"\n\t\t\tdata-wp-style--top=\"state.imageButtonTop\"\n\t\t>\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewbox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\" \/>\n\t\t\t<\/svg>\n\t\t<\/button><\/figure>\n\n\n\n<div style=\"height:100px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading has-medium-font-size\" id=\"datenschutzfunktionen\">Explanation of data protection features<\/h2>\n\n\n\n<p id=\"serverstandort\"><\/p>\n\n\n\n<p id=\"e2e\"><strong>End-to-end encryption<\/strong>Passwords are encrypted on the device before being transmitted online. The key never leaves the user&#039;s device, so the provider has no insight into the contents.<\/p>\n\n\n\n<p><strong>Zero-knowledge architecture<\/strong>This feature guarantees that the provider has no technical means of accessing the user&#039;s encrypted content. This means that password manager providers do not know the access password, nor can they read the stored passwords. This also prevents attackers from stealing passwords. <\/p>\n\n\n\n<p><strong>Independent security audits<\/strong>Reputable password managers regularly have their code base audited by external experts. Providers that don&#039;t publish at least excerpts from these audit reports should be treated with caution.<\/p>\n\n\n\n<p><strong>Open-Source<\/strong>: Open source code allows independent security researchers to verify the security level and minimize hidden risks.<\/p>\n\n\n\n<p><strong>No serious security incidents<\/strong>: Password managers with a proven history of data leaks or hacks are downgraded.<\/p>\n\n\n\n<p><strong>GDPR compliance<\/strong>: The provider complies with European data protection requirements, which is particularly important with regard to storage location and data transfer.<\/p>\n\n\n\n<p><strong>Two-factor authentication<\/strong> (2FA): Additional security layer protects against unauthorized access, even if the master password is stolen.<\/p>\n\n\n\n<p><strong>Local storage option<\/strong>: The ability to store passwords exclusively on your own device increases data protection compared to cloud solutions.<\/p>","protected":false},"excerpt":{"rendered":"<p>Summary: For privacy-conscious users, Bitwarden and KeePass are the clear recommendations. Bitwarden offers the best compromise between usability, security, and transparency, while KeePass ensures maximum data control. LastPass and Dashlane should be avoided \u2013 details below. The PRIVA SCORE evaluates the privacy features of the 10 most popular password managers. The maximum score is 312 points. The focus is on [\u2026]<\/p>","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_seopress_robots_primary_cat":"","_seopress_titles_title":"","_seopress_titles_desc":"","_seopress_robots_index":"","footnotes":""},"class_list":["post-813","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/privascore.org\/en\/wp-json\/wp\/v2\/pages\/813","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/privascore.org\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/privascore.org\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/privascore.org\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/privascore.org\/en\/wp-json\/wp\/v2\/comments?post=813"}],"version-history":[{"count":0,"href":"https:\/\/privascore.org\/en\/wp-json\/wp\/v2\/pages\/813\/revisions"}],"wp:attachment":[{"href":"https:\/\/privascore.org\/en\/wp-json\/wp\/v2\/media?parent=813"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}