NordPass vs RoboForm Comparison

• Premium (individual, 2-year, standard rate): $80.73 for the first 27 months
• Family (6 users, 2-year, standard rate): $161.73 for the first 27 months

• Premium (individual, 1-year): $29.88 per year
• Family (5 accounts, 1-year): $47.75 per year

Penetration test and source-code review of the NordPass Business apps, browser extensions, admin panel and account system

The vault is encrypted client-side with XChaCha20-Poly1305-IETF at 256 bits. The master key is derived from the master password with Argon2id and a 16-byte salt (iteration count not published). Zero-knowledge — NordPass says it only verifies that you hold the key, without ever storing it.

The vault is encrypted client-side with AES-256 using a key derived from the Master Password via PBKDF2 with SHA-256 and a random 32-byte salt, at 1,000,000 iterations by default — the same order of magnitude as the highest iteration counts in this category, though PBKDF2 remains a non-memory-hard KDF unlike Argon2. Only a one-way, server-side password derived from the Master Password is ever sent to RoboForm's servers; all encryption and decryption happens locally.

Made by Nord Security, the company behind NordVPN, NordLayer and NordLocker, based in Lithuania. Venture-funded: a 2022 Series C led by Novator Ventures, Burda Principal Investments and General Catalyst at a $1.6B valuation, then a $100M round from Warburg Pincus in September 2023 at a $3B valuation.

Privately held and independently operated since RoboForm's original 2000 release; not venture-backed and never acquired. Headquartered in Fairfax, Virginia, led by CEO Vadim Maslov. Siber Systems also makes GoodSync, a file-synchronization product, alongside RoboForm.