Dashlane vs RoboForm Comparison
| Feature | ||
|---|---|---|
| Overview | ||
| Rating | 7.2 | 7.4 |
| Pricing |
Show billing detailsHide billing details
|
Show billing detailsHide billing details
|
| Free tier | Paid only | Limited free tier |
| Established | 2009 | 2000 |
| Platforms | ||
| Security | ||
| Independent security audit | None on record | None on record |
| Source code | Partly open source | Closed source |
| Encryption | AES-256-CBC + HMAC, Argon2dShow detailsHide detailsThe vault is encrypted client-side with AES-256 in CBC mode plus HMAC-SHA256 — an encrypt-then-MAC construction, so tampering with the ciphertext is detectable. The key is derived from the master password with Argon2d (3 iterations, 32 MB memory, 2 threads); PBKDF2 remains only as a backward-compatibility fallback that Dashlane says it will deprecate in 2026. All vault fields are encrypted, including usernames, item URLs and notes — not just passwords. Support for legacy CBC-only mode was removed in November 2025. | AES-256, PBKDF2-SHA256 1MShow detailsHide detailsThe vault is encrypted client-side with AES-256 using a key derived from the Master Password via PBKDF2 with SHA-256 and a random 32-byte salt, at 1,000,000 iterations by default — the same order of magnitude as the highest iteration counts in this category, though PBKDF2 remains a non-memory-hard KDF unlike Argon2. Only a one-way, server-side password derived from the Master Password is ever sent to RoboForm's servers; all encryption and decryption happens locally. |
| Vault 2FA | TOTP | TOTP + hardware keys |
| Second-secret model | No | No |
| Past data breach | Yes | No |
| Telemetry | On unless you opt out | Opt-in |
| Features | ||
| Hosting | Cloud | Cloud |
| Passkeys | Stores for sites | Stores + unlocks |
| Built-in email aliases | No | No |
| Company | ||
| Owner | Dashlane, Inc.Show detailsHide detailsThe product is run by Dashlane, Inc.; the brand and trademarks belong to Dashlane SAS, France. The company is independent and venture-backed — it has raised over $200M across five rounds, the last a $110M Series D led by Sequoia Capital in May 2019, with Bessemer Venture Partners, FirstMark Capital and Rho as earlier backers. It has not been acquired. Dual headquarters in New York and Paris. | Siber Systems, Inc.Show detailsHide detailsPrivately held and independently operated since RoboForm's original 2000 release; not venture-backed and never acquired. Headquartered in Fairfax, Virginia, led by CEO Vadim Maslov. Siber Systems also makes GoodSync, a file-synchronization product, alongside RoboForm. |