NordPass review (2026): a tidy password manager from the NordVPN team

What NordPass is in 2026

NordPass is the password manager from Nord Security, the company that makes NordVPN. Nord Security launched it in 2019, the same year it released NordLocker and NordLayer, and now sells it to both households and businesses. On the App Store the seller is Nordvpn S.A., and the Firefox add-on listing names NordVPN as the developer.

The idea has stayed the same since launch: you remember one master password and NordPass keeps everything else. In 2026 "everything else" covers a lot more than passwords. The vault holds passkeys, payment cards, Wi-Fi codes, secure notes, personal details and documents such as IDs, and it now generates the one-time codes many sites ask for at sign-in. NordPass says the whole vault is encrypted on your device before it syncs, so Nord Security cannot read it.

NordPass comes as a Free tier and a paid Premium plan, with separate business plans for companies. The apps are the same; Premium switches on extra features such as file attachments on more item types. For teams, the business version adds an admin side for password rules and shared logins.

The apps are in active development. The iOS app received updates in February, May, October and early November 2026, and the Firefox extension was updated on November 4, 2026.

Setting up NordPass

Setup follows the usual pattern for a password manager. You create an account, set a master password, then add the browser extension and the phone app. NordPass works on desktop, mobile and browsers, and you sign in to each with the same account so your vault syncs between them.

If you already use another password manager or your browser's built-in one, export your passwords from it and import the file into NordPass. NordPass also exports, so you are not locked in if you leave later. Once the import finishes, turn on autofill. On iPhone and iPad running iOS 18 you can switch NordPass autofill on from inside the app, which saves a trip through the Settings app.

Two housekeeping options are worth knowing before you need them. A setting lets you log out of every device in one tap, which helps if you lose a phone. And since May 2026 both Free and Premium users can reset their whole vault themselves, which is useful if an import goes wrong and you want a clean start.

The iOS app needs iOS 18 or iPadOS 18 or later. If your iPhone is older than that, check whether it can update before you commit to NordPass as your only password manager.

How NordPass protects your vault

NordPass encrypts your data with XChaCha20, a modern stream cipher, on your own device. Many password managers use AES-256, which is also secure, so the cipher matters less than the design around it. NordPass uses a zero-knowledge design, which means Nord Security stores your encrypted vault but cannot read it.

That design has one consequence you should plan for. If you forget your master password, Nord Security cannot look it up for you, so check what recovery option NordPass gives you when you create the account and keep a copy of your master password somewhere safe offline.

On top of the master password you can turn on multi-factor authentication for the NordPass account itself, and use your fingerprint or face to open the app on supported devices.

For businesses, Nord Security describes the business version as encrypted from end to end and says it helps with compliance work, naming HIPAA among the standards. If your company needs a specific audit report or certificate, ask NordPass's sales team for the document before you sign up.

Autofill, passkeys and the built-in authenticator

Day to day, autofill is the feature you use most. The extension and apps spot username and password fields, fill them, and offer to save new logins when you sign up for something. NordPass has kept working on the details: an August 2025 update improved how it suggests items when you autofill online, and a December 2025 update made it easier to switch between accounts when you autofill.

Passkeys sit in the vault next to passwords and sync across your devices the same way. You will still need both for a while. NordPass's own November 2025 study of the 1,000 most-visited websites found that only 2% supported passkeys, while 61% required a password.

The feature that sets NordPass apart from a basic password manager is NordPass Authenticator. It generates the one-time codes that sites ask for during two-step sign-in, the job an app like Google Authenticator usually does, and NordPass can fill in the code right after your password. NordPass relaunched the authenticator in December 2025, and business users can now reach their codes on several devices and browsers at the same time.

Keeping 2FA codes in the same app as your passwords is a trade-off. It makes signing in quicker, but anyone who gets into your vault gets both factors. If that worries you, keep your bank and email codes in a separate authenticator app and use NordPass Authenticator for lower-risk accounts.

Password Health and the Data Breach Scanner

Password Health lists passwords that are weak, old or reused across sites. After an import, this is where you start: it shows which accounts to fix first, and you can generate a new strong password from the built-in generator as you go.

The Data Breach Scanner checks for leaks that include your details and sends an alert when it finds one. Since November 2025 it also highlights each vault item affected by a breach, so you can see which login to change without searching for it. NordPass refreshed the scanner's layout at the same time to put the main information first.

Use them together: clear the reused passwords Password Health flags first, then let the breach alerts tell you when one of the new ones needs changing.

Email masks, documents and file storage

Email masking gives you a separate address to hand to a website instead of your real one, and messages sent to the mask reach your inbox. If a shop starts sending spam or leaks its list, you know which site it was and you can retire that mask. Since November 2026 you can add a note to each mask, which helps once you have a dozen of them.

NordPass also stores documents such as passports and IDs and reminds you before they expire. That is handy if you renew travel documents or professional licenses on a schedule.

NordPass lists 3GB of file storage for attachments. With Premium, you can attach files to more item types, including passwords, secure notes and credit cards, so a scan of a card or a recovery code file can live next to the login it belongs to.

Sharing and emergency access

You can share single items or whole folders with people you choose. NordPass refreshed the look of sharing in its latest iOS release and fixed a bug in February 2026 that stopped shared folder owners renaming their folders.

Emergency access lets you name trusted contacts who can reach your vault if something happens to you. Set this up early, because it only helps if it is in place before anyone needs it.

NordPass's listings do not set out how many people you can share with on each plan. If you plan to share a lot of logins with a partner or a small team, check the plan details before you choose between Premium and a family or business plan.

NordPass for business

The business version keeps the same apps for staff and adds an admin side. Nord Security says admins can set company-wide password rules and monitor and manage the credentials people share, which answers two questions a small company usually has: are staff using strong passwords, and who can see the shared logins.

Business users can also reach their authenticator codes on several devices and browsers at the same time, so staff who switch between a laptop and a desktop are not stuck.

Nord Security sells other business security products besides NordPass, including NordLayer for network access, so companies already using NordLayer can buy from a supplier they know.

Apps and platforms

NordPass says it works on desktop, mobile and browsers. The iPhone and iPad app needs iOS 18 or later and comes in English and nine other languages, and there is a browser extension for Firefox.

Users rate the iOS app 4.7 out of 5 from about 13,000 ratings on the US App Store. The Firefox extension has about 145,000 users and a 4 out of 5 rating from 1,158 reviews, which is decent but shows more mixed feedback than the phone app.

Pricing and value

NordPass has three kinds of plan: Free, Premium and Business. The iOS app is a free download and sells 1-month and 12-month plans through the App Store, and NordPass was running a Black Friday offer on the 1-year Premium plan in early November 2026. On the US App Store on November 4, 2026, those in-app purchases were listed at $4.99 for a 1-month plan and $31.99 to $35.99 for a 12-month plan; the listing does not say which plan each price buys.

We could not confirm NordPass's current web prices on November 4, 2026, so this review quotes no web prices. Check the pricing page for today's price, the renewal price after any first-year discount, and the money-back period before you pay.

To judge value, compare it with two close alternatives. Bitwarden Premium costs $19.80 a year ($1.65 a month) and includes an authenticator, file attachments, emergency access and security reports. 1Password Individual costs $2.99 a month billed yearly for your first year on its current offer, then $3.99 a month. If NordPass Premium costs more than Bitwarden, you are paying for email masks, document reminders and the overall polish of the apps.

Support

NordPass runs a help center at support.nordpass.com and answers email at [email protected]. Start with the help center for setup and autofill questions, and email support if your answer is not there.

We could not confirm whether NordPass offers live chat for personal plans, so check the help center's contact options if you prefer to talk to someone in real time.

NordPass vs Bitwarden

Bitwarden is the main rival for anyone who cares most about price and transparency. Its code is open source, and you can host the Bitwarden server on your own network if you want your vault off someone else's cloud. Its Free plan includes unlimited passwords and devices and sharing with one other user, Premium costs $19.80 a year, and Families covers six people for $47.88 a year. Teams costs $4 per user a month and Enterprise $6, both billed yearly.

NordPass is the friendlier pick for people who want extras without setting anything up. It builds in email masking and reminders before stored documents expire, so you do not need a separate alias service.

Choose Bitwarden if open source, self-hosting or the lowest yearly price matter to you. Choose NordPass if you want email masks and a polished app from the NordVPN team.

NordPass vs 1Password

1Password does not list a free plan, but it gives you 14 days to try it with no card required. Individual costs $2.99 a month billed yearly for new customers' first year, then $3.99, and Families costs $4.49 a month for the first year, then $5.99, for five people.

NordPass has a Free tier, so you can start using it without a trial clock. Both companies also sell business plans.

Choose 1Password if you want a full trial before you pay and a family plan for five people. Choose NordPass if you want to start free or care about email masks. If you also want encrypted mail and a VPN in the same account, look at Proton Pass, whose free plan includes 10 email aliases and unlimited devices.

Pricing and value

Plan names checked November 4, 2026.

Plan	Price	What it adds
Free	$0	The NordPass apps on the free tier
Premium	Not confirmed	Premium extras such as file attachments on passwords, notes and cards
Business	Not confirmed	Company-wide password rules and monitoring of shared credentials

NordPass's current US prices could not be confirmed on its pricing page on November 4, 2026, so check nordpass.com/pricing for today's price, renewal price and refund period. The iOS app sells 1-month and 12-month plans through the App Store. On the US App Store on November 4, 2026, those in-app purchases were listed at $4.99 for a 1-month plan and $31.99 to $35.99 for a 12-month plan; the listing does not say which plan each price buys.

Who should buy it

• People who want passwords, passkeys and 2FA codes in one app that fills in all three
• Anyone who signs up for a lot of newsletters and shops and wants email masks
• Travelers and professionals who store passports, IDs or licenses and want expiry reminders
• NordVPN customers who would rather keep their security apps with one company
• Small teams that want company-wide password rules and a view of shared logins

Who should skip it

• Anyone who wants open-source code or to host the vault themselves; Bitwarden does both
• People who want a two-week trial of the paid version first; 1Password gives 14 days with no card
• Buyers who want mail, a VPN and a password manager in one account; Proton Pass comes inside Proton Unlimited
• iPhone and iPad owners who cannot update to iOS 18
• Companies that need SSO and SCIM confirmed before they buy; Dashlane lists both on its Password Management plan