# nordpass

Source: https://startwithidentity.com/vendors/password-management/nordpass/
Last updated: 2026-09-20
License: content by Start with Identity. Cite the source URL.

---

## Overview

NordPass is the business and consumer [password manager](https://startwithidentity.com/vendors/password-management/) from Nord Security, the Lithuanian company behind NordVPN, launched in 2019. Nord Security raised 100 million dollars led by Warburg Pincus in September 2023 at a [3 billion dollar valuation](https://warburgpincus.com/2023/09/28/nord-security-raised-another-100m-investment-round/), with roughly 2,000 staff at that time. NordPass pairs a clean interface with modern cryptography and a credible business tier, though it trails the category leaders on enterprise integration depth.

## What it is good at

The cryptographic story is genuinely differentiated. NordPass encrypts with XChaCha20-Poly1305-IETF and derives keys with Argon2id rather than the AES-256 and PBKDF2 combination most competitors use. It holds SOC 2 Type 2 and renewed ISO/IEC 27001:2022 in December 2025. It has no entries in the National Vulnerability Database, and when DEF CON 33 research disclosed clickjacking flaws across ten password managers in August 2025, NordPass had already shipped a fix months earlier. Passkey storage, breach monitoring, and group-based sharing are all present, and admin controls are straightforward for teams without a dedicated identity function.

## Where it falls short

Tier gating is aggressive. Google Workspace is the only SSO option below the Enterprise tier, so any business running [Okta](https://startwithidentity.com/vendors/iam/okta/) or [Microsoft Entra](https://startwithidentity.com/vendors/iam/microsoft-entra/) pays the top price or goes without. Provisioning reportedly requires deploying an Encryption Service onto your own infrastructure, unusual friction for a SaaS product. There is no self-hosting and no open-source codebase.

Pricing transparency is the real weakness. Prices render client-side and vary by promotion and geography, and NordPass publishes no renewal rate at all, which matters when headline prices are first-term discounts. Audit currency is also thin: the most recent NordPass-specific audit we could verify is from 2021.

Independent research has found real issues. The USENIX Security 2024 injection-attack paper showed NordPass leaking vault information through duplicate-password metrics.

## Pricing

One-year and two-year terms only; no monthly option on personal plans. Teams is a fixed 10-user bundle, Business and Enterprise start at 5 seats. Published discounts are 20 to 28 percent for annual and 28 to 40 percent for two-year terms. Get the renewal price in writing.

## Best for, and who should look elsewhere

Choose NordPass for small and mid-sized teams wanting strong cryptography and a manageable admin experience. Choose [1Password](https://startwithidentity.com/vendors/password-management/1password/) for enterprise depth, [Bitwarden](https://startwithidentity.com/vendors/password-management/bitwarden/) for open source or self-hosting, or [Keeper Security](https://startwithidentity.com/vendors/pam/keeper-security/) if you need privileged access alongside passwords. See [1Password vs Bitwarden](https://startwithidentity.com/compare/1password-vs-bitwarden/).

## Bottom line

A cryptographically modern password manager that suits SMB and mid-market teams, held back by Enterprise-only SSO and a refusal to publish renewal pricing.