Password Manager Review: Enpass
Do you never want to fret over tons of passwords again? If so, look no further than password managers like Enpass. All you'll have to do is remember a single master password. Below we'll let you know how well the software works.
What Is Enpass?
Enpass is a password manager available for Windows, Mac, and Linux. The service also offers apps for Android and iOS, as well as various browser extensions. One of Enpass's special features is its pricing model: Unlike most of its ilk, the program does not rely on repeating subscriptions but is purchased for a one-time fee.
Pros and Cons
Easy to use desktop app
One-time fee instead of a monthly or yearly subscription
Optional cloud synchronization
Poor autofill functionality in the Android app
Allows dangerous password sharing
When installing Enpass, you'll be directed to the appropriate marketplace for the operating system you're planning to use. We selected the Windows version, which was downloaded from the Microsoft Store. Due to the service's pricing structure, it isn't necessary to create an account before getting started. Once the installation is complete, you'll need to create your master password, however, the program will give you tips on how to do this.
After you've come up with a master password, you'll be taken to the service's desktop client's dashboard, which is designed like most other password manager programs (three columns). You'll have to install the other components (browser extensions and mobile apps) manually, but this is easy to do via Enpass's website.
Should you have switched to Enpass from another password manager, it's possible to import data sets. We tested this with a .csv file from LastPass and experienced good results: Most entries were recorded correctly, with usernames and passwords (mostly) winding up where they were supposed to. A few adjustments had to be made here and there, but compared to some of the other programs we evaluated, there was really not all that much to complain about so far as the import was concerned.
Enpass makes it easy for users to get started, requiring only a few minutes to set up.
Score: 4.7 / 5
User Interface & Ease of Use
Enpass has two desktop components, namely, an app that can be used offline, as well as a browser extension.
As we mentioned above, Enpass's desktop app's interface looks a lot like those of other password managers owing to its three-column structure. To the left, you'll find a scrollable menu with the record categories, tags, and a kind of security panel. In the middle, you'll be able to view a list of data records organized by category, and to the right, individual entries. Known pages are accompanied by their logo in the client, with other logins assigned a generic icon.
Only premium users are able to create custom categories for their records, however, all users can assign different tags to categories, which will then appear in the main menu on the left-hand side of the interface. These serve as de facto sub-categories. The categories we created in LastPass were converted into tags when we imported our data. While the tags help to organize records, Enpass could facilitate this even further by making it possible to sort sub-categories as well.
New records can be manually created by clicking on the "plus" sign in the upper menu. Here, you'll also find the password generator and settings menu.
The browser extension looks and performs like a high-end piece of software. Its simplified menu provides users with access to favorites, credit cards, identities, and the password generator. Also included is a search function in the browser window, as well as frequently and recently used logins.
Enpass's designers seem to have relied upon concepts that have proven their success in their competitors' interfaces, an approach that we believe pays off. The dashboard is easy to use, doesn't require long to find features or functions, and can be gotten hang of in a matter of minutes (if not faster).
Score: 4.7 / 5
Enpass comes with nearly all of the features we look for in a password manager. The password generator, which is accessible through both the desktop app and the browser extension, provides a multitude of different options for creating strong passwords, albeit, a bit less freedom than similar components offered by its competitors.
Optional Usage of the Cloud
While most password managers rely on integrated cloud functionality, further underlining the popularity of the subscription model, Enpass offers this as an optional feature. It's possible to synchronize your data as needed using well-known providers such as Dropbox, Google Drive, or OneDrive. However, if using the platform's default settings, data will only be backed up locally, which might make the program particularly appealing for some users. For more about this, scroll down to the security section below.
Enpass does not offer a sophisticated security center like other password managers, however, in the "Password Check" submenu, it's possible to see which of your passwords do not meet the program's standards as well as which you have used more than once. The desktop app also links to haveibeenpwned, where you can check whether your accounts are at risk. Unfortunately, you will have to manually change any outdated and/or compromised passwords since the service lacks an automatic password changer like that offered by Dashlane.
During testing, we came to the conclusion that Enpass's browser extension was fairly reliable. When visiting a website for which login data is already stored, clicking on the Enpass logo in the address bar should reveal the record. With another click, you can fill in the fields and enable automatic logins. Other password managers offer similar functionality by adding buttons to the input fields themselves, making it unnecessary to open the browser extension. While the latter is certainly more elegant, Enpass's approach isn't that bad.
Should you log into a website for the first time, the automatic saving feature adds your login to the app.
When it comes to features, Enpass also seems to focus on the basics, which unfortunately leads to a few compromises. The security center is not as robust as those offered by some of Enpass's competitors, and the lack of automatic password changing is unfortunate. The share feature could do with some refining too. When sharing a record, depending on what it is that you are intending to share, Enpass exports passwords and usernames in plain text.
What Enpass does, it does well, however, there's definitely some room for improvement!
Score: 3.7 / 5
Enpass encrypts data, like the majority of its competitors, using AES 256, the industry gold standard. Should you not want to use cloud synchronization, your data will only be stored locally, which some security-conscious users might see as an advantage. However, if using the cloud, the security of your data depends on the standards of those providers and services.
Enpass doesn't offer 2FA, however, it is possible to assign internally created one-time passwords, so-called TOTPs (Time-based One Time Passwords) to certain data sets. These work like a built-in authenticator app that repeatedly generates current TOTP values within Enpass, remaining valid for 30 seconds. This is somewhat more complicated than it needs to be, and a basic 2FA option would, in our opinion, be a better option. Apart from that, the weak sharing function is certainly the platform's Achilles' heel, however, Enpass does well by warning its users against using this too much.
Score: 4 / 5
So far as features are concerned, Enpass's mobile apps are almost identical to the desktop app. The UI is adapted to smartphone screens, and instead of the three-column structure, you'll find a collapsable main menu with different tabs for records and their settings. The mobile app can be unlocked by fingerprint or PIN, making it unnecessary to repeatedly enter your master password.
Unfortunately, the mobile app lacks the desktop version's excellent autofill performance. Even on well-known/popular websites like Reddit or Facebook, we had to use the clipboard to transfer data from Enpass to the forms.
Enpass's mobile app also lacks an integrated browser. With other password managers, saved websites can be opened in the data set with the touch of a finger, however, in Enpass you'll have to manually copy and paste the URL into your main browser.
The mobile app's good first impression quickly wore off owing to its disappointing performance. As such, we've had to make some deductions.
Score: 3 / 5
Despite Enpass's (apparent) deficits in this area, we did eventually find a support form, which was answered competently after around 14 hours.
Score: 4 / 5
Enpass can be purchased for a (reasonable) one-time fee which provides a license for a single platform. Should you want to make use of the app's premium Windows and Android versions (for example), you'll have to purchase two licenses. A current price list for Enpass can be found below:
|Price per Month||$0.00||$1.50||$0.00|
|Price per User||$0.00||$0.00||$0.00|
|Contract Period (month)||0||12||0|
|Number of Users||1||1||1|
|Number of Passwords||25||unlimited||unlimited|
|Number of Devices||1||unlimited||unlimited|
|Sync Multiple Devices|
|Only Local Storage|
|Two Factor Auth|
Enpass can also be used without paying, however, you'll have to make do with serious limitations to the mobile versions, such as the ability to only save 20 records. On Windows and Mac, on the other hand, you can create as many data sets and vaults as you like. The only things missing on these are extra features such as the creation of user-defined categories or templates. Linux users can make use of all premium features at no cost whatsoever.
Enpass is a lot like Dr. Jekyll and Mr. Hyde.
Its desktop version really appealed to us. The software's free version is solid, while the premium licenses are clearly and reasonably priced. In terms of performance, the desktop app was excellent, putting the most important features within arm's reach in a user-friendly interface, with autofill functionality shining in particular. Some features we would have liked to see were missing or underdeveloped, but most of the shortcomings can be fairly easily overcome.
On the other hand, we were far less enthusiastic about the mobile app's performance. There, autofill was anything but reliable causing frustration in the one area that password managers are meant to take care of. In addition, password sharing seems to have been disastrous to date.
Overall, there remains quite a bit of homework for Enpass to do if it wants to go head-to-head with the leaders in the password manager market. However, the good news is that it has something solid to build on, namely, its desktop application.
How We Test
We tested Enpass's browser extension in Google Chrome, and its mobile application on an Android device (version 8.1.0).