ExpressKeys vs RoboForm Comparison

• Premium (individual, 1-year): $29.88 per year
• Family (5 accounts, 1-year): $47.75 per year

White-box design and cryptographic-trust-assumption review plus dynamic penetration testing and source-code audit of the ExpressKeys Android and iOS apps and their shared Rust core. Five senior testers, sixteen days. Backend components and third-party dependency analysis were out of scope.

The vault is protected by a symmetric document key, itself wrapped by a root key derived from your vault password via PBKDF2-HMAC-SHA512 at 210,000 iterations. Cure53's March 2026 audit flagged this as GPU-crackable and recommended a memory-hard function (Argon2id or scrypt) instead.

The vault is encrypted client-side with AES-256 using a key derived from the Master Password via PBKDF2 with SHA-256 and a random 32-byte salt, at 1,000,000 iterations by default — the same order of magnitude as the highest iteration counts in this category, though PBKDF2 remains a non-memory-hard KDF unlike Argon2. Only a one-way, server-side password derived from the Master Password is ever sent to RoboForm's servers; all encryption and decryption happens locally.

ExpressVPN (and ExpressKeys as one of its products) is registered in the British Virgin Islands and has been part of Kape Technologies plc (LSE-listed, ultimate beneficial owner Teddy Sagi) since September 2021.

Privately held and independently operated since RoboForm's original 2000 release; not venture-backed and never acquired. Headquartered in Fairfax, Virginia, led by CEO Vadim Maslov. Siber Systems also makes GoodSync, a file-synchronization product, alongside RoboForm.