Keeper
fedramp high, fips 140-3 and quarterly pentests — none of whose reports you can actually read.
the deepest compliance stack in the category by a distance, attached to a security page that asserts everything and evidences none of it.
the certification list is genuinely unmatched here: soc 2 type 2 claimed for over a decade, iso 27001, 27017 and 27018, fedramp high, govramp high, and fips 140-3 validation under certificate #4743. for public-sector and regulated buyers that combination closes the decision on its own.
the cryptography is modern too — aes-256 with elliptic curve, record- and folder-level keys generated client-side, and kyber hybrid key encapsulation added for post-quantum resistance, which nobody else in this ranking has shipped.
the description above is ours, condensed from the ranking. pricing moves — check it on the vendor's own page before you rely on it.
- category
- password managers
- pricing
- unverified
- website
- keepersecurity.com
the deepest compliance stack in the category by a distance, attached to a security page that asserts everything and evidences none of it.
we researched this category against vendors' own pricing pages and licence files. that is where this line comes from — not from the vendor, and not from anything they paid for.
more password managers
Bitwarden
we checked this$19.80/yrthe only one open source top to bottom, audited by a named firm every year since 2018, and the cheapest here.
KeePassXC
we checked thisfreefree, fully open, and the only one with no server at all — there is no vendor vault for anyone to steal.