Dashlane

Dashlane operates through Dashlane, Inc. in New York and Dashlane SAS in Paris, the French company that is the GDPR data controller, and it is the only US-headquartered provider here whose production vaults sit in Europe: AWS Dublin, with backups in Frankfurt, and US residency promised for enterprise customers from summer 2026. The vault uses AES-256-CBC with HMAC and Argon2d key derivation, the trust centre shows ISO 27001:2022 and SOC 2 Type II with the reports behind a request form, and the bug bounty runs on Intigriti. Confidential SSO is a genuine engineering distinction: the vault key for an SSO user is derived inside an AWS Nitro enclave with no admin access and wiped afterwards, so the identity provider never becomes a back door. The Android, Apple and browser-extension apps and the command-line tool are open source; the server is not, and there is no self-hosting. No breach of Dashlane's own systems is on the record; the 2025 extension clickjacking class was patched in August.

Prices in US dollars on 8 September 2026; our UK visit found no pound page and no tax statement. Premium is $5.42 a month on annual billing with a VPN for one device, dark-web monitoring and 1 GB of notes; Friends and Family is $8.13 a month for ten people. We found no permanent free plan on the current pricing page, only 14-day trials. Business is now "Dashlane Omnix" in two halves: Password Management at $8 a user a month billed annually, which is the vault, autofill, collections, admin policies, SSO and SCIM; and Credential Protection at $4, which detects phishing and credential risk in the browser even for staff who never open the vault; Enterprise bundles both for companies over fifty seats at a custom price. Only Password Management has a self-serve trial, there is no monthly billing, and a recurring Trustpilot complaint, dated July 2026, is that a business subscription needs thirty days' notice to cancel through a support-reviewed request in the admin console or it renews for a year.

The product runs as a browser extension and mobile apps rather than a desktop application, which suits some teams and annoys others. Passkeys are stored, a separate Dashlane Authenticator app handles TOTP, and hardware keys are listed for business. Developers get the open-source dcli tool for secrets in scripts and CI, a GitHub Action, a VS Code extension, a read-only public API with OpenAPI docs, and an MCP server that lets an agent query the business audit log, not the vault. Support is email seven days a week with chat and phone on business tiers, and no published SLA. Trustpilot is 2.8 on 6,127 reviews: 74% five-star, most of them old, with the recent unprompted reviews about the cancellation process, a chatbot where a human should be, and Mac autofill dragging the weighted score down.

Not yet tested by Saaskly: assessed on published pricing, documentation, audit reports and third-party reviews.