nordPASS
Passwords — personal and for the team.
Unreadable to us.
What is nordPASS? A password manager from Germany for personal vaults and for the whole team — with zero-knowledge encryption: your passwords are encrypted and decrypted solely in your browser. The server holds nothing but unreadable blocks of data, even the names of your vaults and folders. With a browser add-on and autofill on iPhone and Android.
Already using nordOFFICE? Then nordPASS can be switched on there as the Passwords module.
Billed monthly, no advance payment. Unlimited entries, vaults and shares.
All prices are net, plus statutory VAT.
Zero-knowledge — what that really means.
Many providers call themselves “encrypted” and mean: encrypted on the server's disk — with the provider still holding the key. With nordPASS it is the other way round.
Your master password stays with you
The main key is derived from your master password in the browser — in 600,000 computation steps, so that guessing does not pay. The master password itself is never transmitted and never stored.
Encrypted before anything moves
Passwords, notes, custom fields, attached files and even the names of vaults and folders are encrypted in the browser (AES-256-GCM). Only then do they go to the server.
The server sees blocks of data
Only unreadable ciphertext is stored. Anyone without a key for a vault is not even served that ciphertext — not an administrator, and not the operator either.
Sharing without handing over keys
When you share a vault, its key is wrapped with the recipient's public key (RSA-3072). Only their browser can open it again — in transit it was never in the clear.
The first step: your master password. It is stored nowhere and never transmitted.
The honest downside: Because we cannot read your data, we cannot restore it either. That is why you receive a recovery kit to print out during setup — with it you can reset your master password yourself at any time. Without the master password and without the kit, the data is gone. That is not an oversight but the price of nobody else being able to read along.
Moving in takes minutes.
Export from your previous password manager, drag the file into nordPASS — done. The import also runs entirely in the browser: the file is never uploaded in the clear.
1Password
Reads .1pux, .1pif und CSV — samt Ordnerstruktur aus dem Export.
Bitwarden
JSON and CSV, with folders, custom fields and 2FA keys.
KeePass
KeePass XML and CSV — groups become subfolders.
LastPass, Dashlane, Keeper
The usual CSV exports are recognised and mapped correctly.
NordPass, Proton Pass, RoboForm
Also read directly — with no detour through another program.
Apple, Chrome, Firefox
The password lists of the browsers and the keychain come as CSV — nordPASS understands those too.
A preview before writing
You see every entry beforehand and deselect individually what should not come along.
Duplicates recognised
Entries that already exist — in the vault or twice in the file — are deselected in advance.
An unknown format? No problem either
If no template fits, map the columns by hand. That way any export can be read in.
Everything you and your team need day to day.
Vaults and folders
As many vaults as you like — personal and shared, with folders and subfolders inside — and per entry a login, address, notes and custom fields.
Sharing per vault or folder
Share individual folders with colleagues, read-only or with write access — the rest of the vault stays invisible.
2FA codes in the entry
The six-digit code runs right inside the entry — no reaching for the phone when you are opening the account anyway.
Files on the entry
Licence keys, PDFs, key files: attachments are encrypted as well — including their file names.
One-time links
Pass a password outside: a link with an expiry date and a limited number of retrievals, optionally protected by a passphrase. The key exists only in the link, never on the server.
Request a password
Customers enter credentials into a form themselves — already encrypted for you in the browser. One click and the entry is in your vault.
Generator and auto-lock
Strong passwords at the press of a button; the vault locks itself again after a time you set.
Re-encrypt
After withdrawing a share you replace all keys of a vault in one go — old copies are then worthless.
Browser add-on
An extension for Chrome, Firefox, Safari and Edge: unlock, get a suggestion for the domain, fill in username and password. Every connection can be revoked individually.
Autofill on the phone
On the iPhone as a password service in the system settings, on Android 8 and later as an autofill service — unlocked with Face ID, Touch ID or the device lock.
On every device
In the browser, in the desktop app for Mac and Windows and in the iPhone app — the same vault everywhere.
Secure in three steps.
Order
Choose your address — your app is set up automatically at ihr-name.nordoffice.app eingerichtet, meist in wenigen Minuten.
Set a master password
The first time you open it you set your master password and print the recovery kit. That takes two minutes and happens only once.
Bring your data across
Drag in the export from your previous manager, check the preview, import — and connect the team through shared folders.
Try nordPASS.
Four weeks free.
You receive personal demo access — as soon as you have confirmed your e-mail address. You set your master password there yourself; even in the demo nobody but you knows it.
- Really try it out — create a vault, test the import, share a folder
- No risk — no payment details, ends automatically
- Help included — tips to get started, by e-mail
Frequently asked questions about nordPASS
What does zero-knowledge mean at nordPASS?
Can an administrator see my passwords?
What happens if I forget my master password?
Can I bring my passwords across from another manager?
How do I share a password with somebody outside the team?
Is there a browser extension and autofill on the phone?
How do I get a password from a customer without it travelling by e-mail?
No more passwords in the chat.
Order nordPASS with the address you want — ready to use in a few minutes.