Is NordPass® Password Manager & Digital Vault safe?

Clean risk

This extension saves, generates, and autofills passwords and other vault items across websites.

It stores passwords, passkeys, credit cards, personal information, notes, documents, and file attachments, and it can autosave new logins and autofill saved details. It also provides password generation, password health checks, data breach scanning and monitoring, sharing, emergency access, device sync, MFA/OTP support, and import/export tools.

NordPassFirefox Add-ons
0Risk
Who publishes it

NordPass - no other listings under this identity, 18 shared hostnames

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
NordPass
Website
nordpass.com

Shared hosts - 18 hostnames

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

api-contentstorage.stag.us.nordlocker.com
Also called by 3 other listings
api-contentstorage.us.nordlocker.com
Also called by 3 other listings
api.cloudstorage.global.nordlocker.com
Also called by 3 other listings
api.eu.nordpass.com
Also called by 3 other listings
api.nordpass.com
Also called by 3 other listings
api.stag.eu.nordpass.com
Also called by 3 other listings
api.stag.us.nordpass.com
Also called by 3 other listings
ecp-core.dev.global.nordpass.com
Also called by 3 other listings, including NordPass
ecp.stag.global.nordpass.com
Also called by 3 other listings, including NordPass
features.nordpass.com
Also called by 3 other listings, including NordPass, NordPass
panel.nordpass.com
Also called by 3 other listings, including NordPass
pricing.nordsec.com
Also called by 3 other listings, including NordPass
rockycliff.net
Also called by 3 other listings, including NordPass
s1.npass.app
Also called by 3 other listings
staging.api.cloudstorage.global.nordlocker.com
Also called by 3 other listings
static-assets.nordpass.com
Also called by 3 other listings, including NordPass
support.nordpass.com
Also called by 4 other listings, including pCloud Pass - Password manager
nordpass.com
Also called by 8 other listings, including NordVPN - a VPN proxy extension for Firefox, NordVPN

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Where it sends data

Destinations our analysis observed NordPass® Password Manager & Digital Vault contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • ecp-core.dev.global.nordpass.com

    NordPass® Password Manager & Digital Vault sends data to ecp-core.dev.global.nordpass.com. No other extension we have analysed sends data here.

  • ecp.stag.global.nordpass.com

    NordPass® Password Manager & Digital Vault sends data to ecp.stag.global.nordpass.com. No other extension we have analysed sends data here.

  • nordpass.com

    NordPass® Password Manager & Digital Vault sends data to nordpass.com. No other extension we have analysed sends data here.

  • panel.nordpass.com

    NordPass® Password Manager & Digital Vault sends data to panel.nordpass.com. No other extension we have analysed sends data here.

  • rockycliff.net

    NordPass® Password Manager & Digital Vault sends data to rockycliff.net. No other extension we have analysed sends data here.

Updated 15 October 2026amo-2809477