Dashlane vs NordPass Comparison

• Premium (individual, 1-year): $59.88 per year
• Friends & Family (10 members, 1-year): $89.88 per year

• Premium (individual, 2-year, standard rate): $80.73 for the first 27 months
• Family (6 users, 2-year, standard rate): $161.73 for the first 27 months

Penetration test and source-code review of the NordPass Business apps, browser extensions, admin panel and account system

The vault is encrypted client-side with AES-256 in CBC mode plus HMAC-SHA256 — an encrypt-then-MAC construction, so tampering with the ciphertext is detectable. The key is derived from the master password with Argon2d (3 iterations, 32 MB memory, 2 threads); PBKDF2 remains only as a backward-compatibility fallback that Dashlane says it will deprecate in 2026. All vault fields are encrypted, including usernames, item URLs and notes — not just passwords. Support for legacy CBC-only mode was removed in November 2025.

The vault is encrypted client-side with XChaCha20-Poly1305-IETF at 256 bits. The master key is derived from the master password with Argon2id and a 16-byte salt (iteration count not published). Zero-knowledge — NordPass says it only verifies that you hold the key, without ever storing it.

The product is run by Dashlane, Inc.; the brand and trademarks belong to Dashlane SAS, France. The company is independent and venture-backed — it has raised over $200M across five rounds, the last a $110M Series D led by Sequoia Capital in May 2019, with Bessemer Venture Partners, FirstMark Capital and Rho as earlier backers. It has not been acquired. Dual headquarters in New York and Paris.

Made by Nord Security, the company behind NordVPN, NordLayer and NordLocker, based in Lithuania. Venture-funded: a 2022 Series C led by Novator Ventures, Burda Principal Investments and General Catalyst at a $1.6B valuation, then a $100M round from Warburg Pincus in September 2023 at a $3B valuation.