PROVIDER EVIDENCE

nordpass

82/100 trust score · confidence 86/100

Strong documented security architecture, export capability and business compliance signals. Confidence is limited by mixed personal/business audit scope, reliance on provider-published summaries, dynamic renewal pricing and the absence of independent SignalBridge testing of recovery, support and endpoint behavior.

Open provider profile

provider_legal

cancellation refund

NordPass documents account-level cancellation of auto-renewal and a 30-day refund policy for the initial personal subscription purchase; renewals are generally excluded.

View source

Confidence 88/100 · reviewed 2026-07-17 · next 2026-10-17

Limitations: Business agreements, app-store purchases and local consumer law may differ.

provider_public

independent audit

NordPass says its consumer and business products have undergone independent Cure53 security audits, and its business service cites ISO 27001:2022 and SOC 2 Type 2 coverage.

View source

Confidence 84/100 · reviewed 2026-07-17 · next 2026-10-17

Limitations: Audit scope, report availability and the distinction between personal and business products must be checked before relying on a certification claim.

provider_public

portability export

NordPass provides a documented CSV export process protected by the master password, allowing users to move stored items out of the service.

View source

Confidence 90/100 · reviewed 2026-07-17 · next 2026-10-17

Limitations: CSV exports are unencrypted files and require careful handling; some item types or metadata may not transfer perfectly to another product.

provider_public

pricing plans

NordPass publishes personal and business plan structures, plan features, billing cadence, minimum seat counts and notes that taxes may be excluded.

View source

Confidence 80/100 · reviewed 2026-07-17 · next 2026-08-17

Limitations: Dynamic pricing, regional offers, VAT and renewal amounts require transaction-time verification.

provider_public

recovery

NordPass provides a unique 24-symbol recovery code that can reset the master password if retained securely.

View source

Confidence 84/100 · reviewed 2026-07-17 · next 2026-10-17

Limitations: Loss of both the master password and recovery code can create severe account-access consequences.

provider_public

security architecture

NordPass documents zero-knowledge architecture, local end-to-end encryption and XChaCha20 encryption for vault data.

View source

Confidence 86/100 · reviewed 2026-07-17 · next 2026-10-17

Limitations: Architecture claims are provider-published; implementation quality and endpoint security remain separate considerations.

provider_public

support operability

NordPass advertises support and provides a substantial help center covering migration, recovery, billing and administration.

View source

Confidence 72/100 · reviewed 2026-07-17 · next 2026-10-17

Limitations: Documentation availability does not prove response quality or resolution outcomes in real incidents.

provider_public

vault privacy

NordPass says vault data is encrypted and decrypted on the user device and that master passwords and encryption keys do not reach its servers.

View source

Confidence 84/100 · reviewed 2026-07-17 · next 2026-10-17

Limitations: This does not remove risks from weak master passwords, compromised devices, recovery-code handling or browser integrations.