Finder: which security tool fits you?
There is no single best password manager or hardware wallet. Pick what matters to you, such as a free plan, open source or your device, and see which tools fit.
Password managers

- Company
AgileBits Inc., Canada- Free plan
- no
- Free trial
- 14 days
- Open source
- no
- Apps
- Windows, macOS, Linux, iOS, Android, browser extension, command line
- Encryption: “Our dual-key model ensures that even we can't see exactly what you've saved in 1Password.”
- Certifications it names: SOC 2 Type 2 and ISO 27001.
- You choose where your data is stored: in the United States, Canada, or the European Union.

- Company
Bitwarden Inc., United States- Free plan
- yes
- Open source
- yes
- Apps
- Windows, macOS, Linux, iOS, Android, browser extension, web app, command line
- End-to-end encryption: “Bitwarden uses end-to-end encryption for all vault data, which only your master password can decrypt.”
- Open source, with regular security audits by third parties such as Cure53, according to Bitwarden.
- A free plan: “Get basic password management today. Always free.”

- Company
- KeePassXC Team
- Free plan
- yes
- Open source
- yes
- Apps
- Windows, macOS, Linux, browser extension
- Keeps the password database encrypted on your own device: “no data is stored on remote servers”.
- Free and open source under the GPLv3 license; a community project without a company behind it.
- Version 2.7.9 received a security visa from the French cybersecurity agency ANSSI. It has no mobile apps of its own.

- Company
Keeper Security, Inc., United States- Free plan
- yes
- Free trial
- 30 days
- Open source
- partly
- Apps
- Windows, macOS, Linux, iOS, Android, browser extension, web app, command line
- “Keeper is a zero-knowledge security provider.”
- A free version, Keeper Free, limited to 10 records and one mobile device; the paid plan can be tried for 30 days.
- Names ISO 27001, 27017, and 27018 certifications and tests by firms such as NCC Group.
Passpack
The website refused automated reading on October 23, 2026, so no facts were collected.

- Company
Proton AG, Switzerland- Free plan
- yes
- Money back
- 30 days
- Open source
- yes
- Apps
- Windows, macOS, Linux, iOS, Android, browser extension, web app, command line
- End-to-end encryption: “your data is never accessible to us and only you can decrypt it using your secret password.”
- All apps are open source; Proton names audits by Cure53 (2023) and Recurity Labs (2026).
- A free plan without ads, according to Proton; paid plans come with a 30-day money-back guarantee.
Private email

- Company
Hush Communications Canada Inc., Canada- Free plan
- no
- Money back
- 60 days
- Open source
- no
- Apps
- web app, iOS
- Encryption per email: “To encrypt an email, just click the toggle.”
- Encrypted email and e-signable forms, mainly for healthcare, legal, and small-business use; also offered for personal use.
- No free plan listed; its website offers a 14-day free trial of the healthcare plan. Servers in Vancouver and Calgary, Canada, according to its privacy policy.

- Company
Heinlein Hosting GmbH, Germany- Free plan
- no
- Free trial
- 30 days
- Open source
- partly
- Apps
- web app
- “End-to-end encryption with PGP and S/MIME and storage in our data centres in Berlin.”
- Names BSI C5 and ISO 27001 certifications.
- No free plan; every plan can be tried free for 30 days.
Posteo
In its own words: “Posteo: Green, Secure, Ad-free”
- Company
Posteo e.K., Germany- Free plan
- no
- Open source
- partly
- Apps
- web app
- Encrypts all email data, including content, attachments, and metadata, and names an external security audit by Cure53.
- Sign-up without name or address: “You do not have to enter any personal information during signup”.
- One account for 1 euro a month; no free accounts.

- Company
Proton AG, Switzerland- Free plan
- yes
- Money back
- 30 days
- Open source
- yes
- Apps
- web app, Windows, macOS, Linux, iOS, Android
- End-to-end and zero-access encryption: “Zero-access encryption means we never see your inbox, on any plan.”
- A free plan: “Proton Mail will always offer a free secure email plan.”
- Run by Proton AG, which says it is incorporated and headquartered in Switzerland; the same company runs Proton VPN.

- Company
Tutao GmbH, Germany- Free plan
- yes
- Open source
- yes
- Apps
- web app, Windows, macOS, Linux, iOS, Android
- “All data in Tuta is stored end-to-end encrypted on our own servers in ISO 27001 certified data centers in Germany.”
- Quantum-safe encryption: Tuta says it replaced RSA with x25519 and Kyber-1024.
- A free plan: “Tuta Mail will be free, forever.” All apps are open source.
Hardware wallets
BitBox
- Company
Shift Crypto AG, Switzerland- Money back
- 90 days
- Open source
- yes
- Apps
- Windows, macOS, Linux, iOS, Android
- Open source: “BitBox publishes its firmware and BitBoxApp source code so researchers can inspect how they work.” Its firmware builds are reproducible.
- The BitBox02 Nova has an EAL6+ certified secure chip that, according to BitBox, “can never learn any cryptocurrency-related secrets”. The app for iPhone and iPad supports only the Nova.
- Returns: unused orders within 90 days of delivery. A BitBox02 whose vacuum seal has been opened counts as used and cannot be refunded.
Ledger
In its own words: “Phones weren’t built for security, Ledger Atom™ is.”
- Company
Ledger SAS, France- Money back
- 14 days
- Open source
- partly
- Apps
- Windows, macOS, Linux, iOS, Android
- Secure element: “EAL6+ Secure Element to protect your private keys”. Ledger lists CC EAL6+ for Stax, Flex, Nano Gen5 and Nano S Plus, and CC EAL5+ for Nano X.
- The apps on the device are open source on GitHub. Ledger OS, the system on the device, is “the Ledger proprietary customized operating system”.
- Customer data leak, as Ledger reports it: in June 2020 about 1 million email addresses were exposed, and the names, postal addresses and phone numbers of 9,500 customers. In December 2020 the data of about 272,000 customers was published.