1Password vs NordPass Comparison

• Individual (annual): $47.88/year
• Families (up to 6 users, annual): $71.88/year

• Premium (individual, 2-year, standard rate): $80.73 for the first 27 months
• Family (6 users, 2-year, standard rate): $161.73 for the first 27 months

Penetration test and code review of the 1Password system

Penetration test and source-code review of the NordPass Business apps, browser extensions, admin panel and account system

Data is encrypted with AES-GCM-256. The vault key is derived from your account password using PBKDF2-HMAC-SHA256 at 650,000 iterations, then combined with a 128-bit Secret Key that never leaves your devices — so an attacker who guesses the password alone still cannot decrypt anything. Authentication uses SRP, so password-equivalent data is never sent to the server.

The vault is encrypted client-side with XChaCha20-Poly1305-IETF at 256 bits. The master key is derived from the master password with Argon2id and a 16-byte salt (iteration count not published). Zero-knowledge — NordPass says it only verifies that you hold the key, without ever storing it.

AgileBits Inc., a Canadian company headquartered in Toronto, Ontario. Venture-funded — Accel and ICONIQ Growth both hold board seats. Founded 2005; roughly 1,400 employees.

Made by Nord Security, the company behind NordVPN, NordLayer and NordLocker, based in Lithuania. Venture-funded: a 2022 Series C led by Novator Ventures, Burda Principal Investments and General Catalyst at a $1.6B valuation, then a $100M round from Warburg Pincus in September 2023 at a $3B valuation.