verifier.org

Keeper

fedramp high, fips 140-3 and quarterly pentests — none of whose reports you can actually read.

unverified#organisations-whose-proc

the deepest compliance stack in the category by a distance, attached to a security page that asserts everything and evidences none of it.

the certification list is genuinely unmatched here: soc 2 type 2 claimed for over a decade, iso 27001, 27017 and 27018, fedramp high, govramp high, and fips 140-3 validation under certificate #4743. for public-sector and regulated buyers that combination closes the decision on its own.

the cryptography is modern too — aes-256 with elliptic curve, record- and folder-level keys generated client-side, and kyber hybrid key encapsulation added for post-quantum resistance, which nobody else in this ranking has shipped.

the description above is ours, condensed from the ranking. pricing moves — check it on the vendor's own page before you rely on it.

pricing
unverified
our verdict

the deepest compliance stack in the category by a distance, attached to a security page that asserts everything and evidences none of it.

we researched this category against vendors' own pricing pages and licence files. that is where this line comes from — not from the vendor, and not from anything they paid for.

more password managers

Enpass

stores its vault in your own cloud drive, with a one-time licence option

#byo-storage#one-time

Psono

self-hosted manager aimed at teams, open source and audited

#self-hosted#teams

Passbolt

open-source team manager built around per-user gpg keys

#self-hosted#gpg

Bitwarden

we checked this$19.80/yr

the only one open source top to bottom, audited by a named firm every year since 2018, and the cheapest here.

#almost-everyone-it-wins-#on-price#on-the-free-tier-simulta