Keeper vs Proton Pass Comparison

• Keeper Unlimited (individual, 1-year): $42.99 per year
• Keeper Family (5 users, 1-year): $91.99 per year

• Pass Plus (individual, annual): $35.88/year
• Pass Family (up to 6 users, annual): $59.88/year

Source-code review and gray-box testing of the browser extensions, mobile and desktop apps, and CLI

Each record is encrypted client-side with its own 256-bit AES-GCM key; those record keys are wrapped by a per-user Data Key, which is in turn wrapped by a key derived from the master password with PBKDF2-HMAC-SHA256 at 1,000,000 iterations (128-bit salt) — the highest iteration count among the managers reviewed here. Every field is encrypted, including URLs, titles, notes, custom fields, TOTP secrets and file attachments. The offline cache uses a separate randomly generated Client Key protected with PBKDF2-HMAC-SHA512. A hybrid Kyber key-encapsulation layer began rolling out across the clients in November 2025.

Vault and item data are encrypted with 256-bit AES-GCM under 32-byte random keys; the user key is protected by a bcrypt hash of the account password. Authentication uses a hardened SRP implementation; sharing uses OpenPGP with ECC (Curve25519). Every field is encrypted client-side — usernames, URLs and notes included — so Proton cannot see which services you hold accounts with. Offline access on paid plans uses Argon2 for the local hash.

Founder-led (Darren Guccione, CEO; Craig Lurey, CTO), headquartered in Chicago with a product office in El Dorado Hills, California and sales offices in Cork, Ireland and Tokyo. Two minority growth-equity investments: Insight Partners ($60M, August 2020 — the company's first outside equity) and Summit Partners (May 2023). No majority-stake acquisition; the founders retain control.

Proton AG, Geneva, Switzerland. Since June 2024 the primary shareholder is the non-profit Proton Foundation, which the founders endowed with Proton shares in an arrangement they describe as irrevocable. Proton began as a 2014 crowdfunding campaign.