Password Manager Review: Enpass
Never have to remember passwords again: Password managers like Enpass make exactly that possible. Almost at least: Only a single master password serves as the key to the keychain; you should never lose that one under any circumstance. Because then even Enpass can’t be of any assistance. Our test shows how well the software works if your memory never fails.
What is Enpass?
Enpass is a password manager available on Windows, Mac and Linux. There are also apps for Android and iOS and various browser extensions. One of the special features of Enpass is the pricing model: unlike most password managers, the program does not rely on a subscription service, but can be purchased for a one-time fee.
Pros and Cons
Easy to use desktop app
One-time fee instead of subscription
Cloud connection is optional
Autofill of the Android app is insufficient
Dangerous password sharing
Depending on the platform on which you want to install Enpass, the website will redirect you to the different marketplaces. We select the Windows version, which is downloaded from the Microsoft Store. Due to the tariff structure, you do not need an account beforehand and you take care of everything yourself during the setup. First of all, after installation, you will have to set your master password, and the program will give you tips on its security.
As soon as you have created your master password, you will land in the desktop client dashboard of Enpass. The dashboard is designed in the classic three-column layout, similar to other programs - see the next point for more information. You have to install the other components - browser extensions and mobile apps - manually, but this is no problem via the website.
You can also import data if you have already used another password manager. We have tested this with a .csv file from LastPass and received good results: Most entries were recorded correctly and the usernames and passwords ended up in the correct fields. A few adjustments had to be made here and there, but compared to some other programs, the import worked fine.
Enpass makes it easy for users to get started, and only a few minutes are needed to get the program up and running, even with imported data sets.
Score: 4.7 / 5
User Interface & Ease of Use
The desktop control of Enpass takes shape in two components: the offline app and a browser extension.
With its clear three-column structure, the offline client from Enpass resembles established dashboards of other providers. On the left is the scrollable menu with the record categories, tags and a kind of security panel. In the middle, the respective data records of a category are listed, and in the right-hand column, information on the individual data records. Known pages are accompanied in the client by their logo, the remaining logins are given a generic icon.
You can create custom categories for your own records only as a premium user, in return you can assign different tags to them, which are listed in the left main menu. Our self-created LastPass categories were taken over as tags during import, which makes sense. So you can sort your data relatively freely, but a category function within the categories provided by Enpass would make navigation even easier.
You can create new records by clicking on the "plus" sign in the upper menu. Here you will also find the password generator and the settings menu.
The browser extension also looks and feels like a best of proven components. A simplified menu gives you access to favorites, credit cards, identities, and the password generator. There is also a search function in the browser window, as well as frequently and recently used logins.
Enpass relies on proven input concepts for the interface, and the conservative UI approach pays off: The dashboard is easy to use, no function has to be searched for a long time, and its easy to use even for less technically experienced.
Score: 4.7 / 5
Enpass covers most basic functions of a password manager. In the Password Generator, which you can access in the desktop app and from the browser extension, you have enough options for creating strong passwords, although not quite as much freedom as some competitors.
The Cloud as an Option
While most password managers rely on integrated cloud functionality, which explains the prominence of the subscription model, cloud features are an optional bonus with Enpass. With well-known providers such as Dropbox, Google Drive or OneDrive, you can synchronise your data as you need. In the default setting, data is only backed up locally, which could make the program particularly appealing for some users. More about this in the "Security" section.
Enpass does not have a sophisticated security center like other password managers, but in the "Password check" submenu you can see which of your passwords do not meet the program's standards and which you have used repeatedly. The desktop app also links to the website haveibeenpned.com, where you can check whether your accounts are at risk. Unfortunately, you will have to change insufficient passwords manually, because there is no automatic password changer like with Dashlane.
Autofill rarely lets you down
The browser extension turned out to be quite reliable in our test. When visiting a website whose login data is already stored, a click on the Enpass logo in the address bar should reveal the record. With a double click you fill in the fields and are automatically logged in. Other password managers, on the other hand, use small buttons in the input fields themselves, so you don't even have to open the browser extension. This solution is even more elegant, but the "detour" via the address bar is not a big problem.
If you log into a website for the first time, the automatic saving feature adds your login to the app.
Enpass also concentrates on the basics when it comes to functions, which unfortunately leads to a few compromises. The security center is somewhat reduced compared to the competition and an automatic password change would have been welcomed. The share function is also not particularly refined: If you share a record, Enpass exports the password and username (depending on what you want to share) in plain text - not recommended.
What Enpass does, Enpass does well - but for the future there are a few more features we would like to see.
Score: 3.7 / 5
Enpass encrypts your data like most password managers with the AES 256-bit encryption method, which is considered the gold standard. If you choose not to use cloud synchronization at all, your data will only be stored locally, which some security-conscious users might see as an advantage. However, if you are using cloud services, you are dependent on the security standards of the respective providers.
A typical 2FA option is unfortunately not available from Enpass. But you have the possibility to prescribe internally created one-time passwords, so-called TOTPs (Time-based One Time Passwords) for certain data sets. These work like a built-in authenticator app that repeatedly generates current TOTP values in Enpass itself, which are valid for 30 seconds. This is a bit unnecessarily complicated, and a classic 2FA option would be a better option. Otherwise, the weak sharing function harbors most of the security risks - but at least Enpass itself warns against using it.
Score: 4.0 / 5
The mobile Enpass versions are almost feature-identical to the desktop application. The UI is of course adapted to the smartphone screens, and instead of the three-column structure there is a main menu that folds out, and different tabs for the records and their settings. You can also unlock the mobile app by fingerprint or PIN, so you don't have to enter your master password again and again.
Unfortunately the mobile app could not repeat the excellent autofill performance of the desktop version. Even with well-known websites - Reddit or Facebook - we had to resort to using the clipboard to bring the values from the Enpass app into the forms. There is also no integrated browser: With other password managers, saved websites can be opened in the data set with the touch of a finger, but with Enpass you can only copy the URL and paste it into your primary browser.
The good first impression of the app was unfortunately hindered due to its disappointing performance and shortcomings, such as the missing browser.
Score: 3.0 / 5
Unfortunately, Enpass does not have a real support channel via ticket or even live chat. If we can't find what we're looking for in the FAQs and tutorials in the support area, we suggest that you ask in the - relatively active - forum. However, not every Enpass user will want to go through this effort.
Despite Enpass lacking on the support side, we were eventuality able to find a support form. We received a helpful answer to our test question after only 14 hours after our email.
Score: 4.0 / 5
Enpass is not available as a subscription, but at a reasonable one-time price, which applies to one platform at a time. If you would like to use the premium version of the app on Windows and Android, for example, you must purchase two licenses. A current price list of the software can be found here:
|Price per Month||$0.00||$1.50||$0.00|
|Price per User||$0.00||$0.00||$0.00|
|Contract Period (month)||0||12||0|
|Number of Users||1||1||1|
|Number of Passwords||25||unlimited||unlimited|
|Number of Devices||1||unlimited||unlimited|
|Sync Multiple Devices|
|Only Local Storage|
|Two Factor Auth|
You can also use Enpass free of charge, which has serious limitations especially in the mobile versions. You can only save 20 records there. On Windows and Mac, on the other hand, you can create as many data sets and safes as you like. The only thing missing here are extra features such as the creation of user-defined categories or templates. Linux users can be especially happy: They can use all premium features for free.
Enpass knows how to please. This starts with the pricing model: On the desktop, you already get a full product in the free version, and a licence for the premium service is a real bargain compared to the subscriptions of many other programs. We also really like the desktop application: the most important functions are available, the interface is user-friendly and Autofill does what it is supposed to do. Some functions are missing or underdeveloped, but most of the shortcomings can be overcome.
The performance on the mobile device, on the other hand, was less acceptable: Autofill was anything but reliable here, and Enpass caused frustration exactly where password managers should actually stand for more convenience. In addition, password sharing at Enpass has so far been a security disaster.
So there is still a lot to do if Enpass wants to compete with the leaders in the password manager market. However, the good approaches and the great performance on the desktop make the program worth a look even now.
How we test
The browser extension of Enpass was tested on Google Chrome, the mobile application on an Android device (version 8.1.0).