Hubbry Logo
DashlaneDashlaneMain
Open search
Dashlane
Community hub
Dashlane
logo
8 pages, 0 posts
0 subscribers
Be the first to start a discussion here.
Be the first to start a discussion here.
Dashlane
Dashlane
from Wikipedia
Dashlane
DevelopersDashlane, Inc.
Initial releaseMay 23, 2012; 13 years ago (2012-05-23)
Repositorygithub.com/Dashlane
Written inKotlin (Android)
Swift (iOS)
Operating systemmacOS, Windows, iOS, Android
Available in12 languages
TypePassword manager, digital wallet
LicenseProprietary software
Websitewww.dashlane.com

Dashlane is a subscription-based password manager and digital wallet application available on macOS, Windows, iOS and Android, founded in Paris.[1] Dashlane uses a subscription business model option.[2][3]

Overview

[edit]

Dashlane was founded in Paris on July 6, 2009, releasing their first software on May 23, 2012, that first included a password manager (encrypted using AES-256),[4] which was walled behind a single master password. Over time, more features were introduced to the product such as:

Source code

[edit]

The source code for the Android and the iOS app is available under the Creative Commons NonCommercial license 4.0.[11][12]

Security incidents

[edit]

2025 DOM-based Extension Clickjacking

[edit]

Security researcher Marek Tóth presented a vulnerability in browser extensions of several password managers (including Dashlane) at DEF CON 33 on August 9, 2025. In their default configurations, these extensions were shown to be exposed to a DOM-based extension clickjacking technique, allowing attackers to exfiltrate user data with just a single click.[13] The affected password manager vendors were notified in April 2025. According to Tóth, Dashlane version 6.2531.1 (August 1, 2025) addressed the issue.[14]

See also

[edit]

References

[edit]
[edit]
Revisions and contributorsEdit on WikipediaRead on Wikipedia
from Grokipedia
Dashlane is a cybersecurity company specializing in password management and credential protection software, designed to generate, store, and autofill secure credentials across personal and business devices. Founded in 2009 in by Bernard Liautaud along with co-founders Alexis Fogel, Emmanuel Schalit, Guillaume Maron, and Jean Guillou, the company has grown into a leading provider of zero-knowledge encryption-based solutions that prioritize user privacy and defense against and credential theft. The platform operates on a subscription model, offering features such as AI-powered alerts for security risks, secure sharing of credentials, and integration with passkeys for , available on major operating systems including macOS, Windows, , and Android. Dashlane's core technology employs end-to-end AES-256 with a zero-knowledge architecture, ensuring that even the company cannot access users' data, and it includes tools like VPN access via a partnered service for premium users to enhance online privacy. Headquartered in with additional offices in , the company serves over 18 million individual users and 20,000 enterprises as of 2025, emphasizing proactive credential security through its Omnix™ platform. Notable for its focus on both consumer and business markets, Dashlane has raised $192 million in funding as of 2025 from investors including and , enabling expansions into enterprise-grade features like and compliance with standards such as SOC 2 and GDPR. The service has received high ratings from independent reviewers for its user-friendly interface and robust protection against evolving cyber threats, positioning it as a key player in the space.

Company background

Founding and early history

In the late 2000s, a surge in high-profile data breaches, such as the 2007 TJX Companies incident that exposed approximately 45.7 million credit and numbers and the 2009 breach affecting 130 million card accounts, highlighted the vulnerabilities of weak and reused passwords in online security. These events underscored the growing need for tools that could securely generate, store, and autofill strong credentials across devices and platforms. Dashlane was founded in 2009 in , , by Bernard Liautaud as CEO, along with co-founders Alexis Fogel, Guillaume Maron, and Jean Guillou. The company's initial focus was on developing a user-friendly to address the escalating risks of theft and credential compromise, emphasizing ease of use alongside robust protection for personal digital identities. Drawing from the founders' expertise in and —Liautaud, for instance, had previously co-founded Business Objects, a leading firm—the team aimed to create a solution that simplified secure logins without sacrificing . Development progressed steadily in , where Dashlane's headquarters were established, leading to the first public release of its software in 2012. This initial version introduced core functionalities, including AES-encrypted storage for passwords and basic autofill capabilities for web forms, marking Dashlane's entry into the burgeoning password management market. By 2014, the company had expanded its operations to include an office in , supporting growth in the U.S. market while maintaining its European roots.

Funding and growth

Prior to the Series B, Dashlane had secured $5 million in Series A funding in September 2011 from FirstMark Capital. Dashlane secured its initial significant external funding through a Series B round of $22 million in May 2014, led by , with participation from existing investors including Rho Ventures and FirstMark Capital. This investment supported the company's expansion of its password management platform and user base, which had reached 2 million users at the time. In May 2016, Dashlane raised $22.5 million in a Series C round led by , marking a to integrate identity features into its offerings. This brought the total funding to approximately $52.5 million and enabled enhancements in management capabilities. The company's most substantial funding came in May 2019 with a $110 million Series D round led by , which valued Dashlane at over $500 million post-money. By this point, Dashlane had raised more than $185 million in total funding, using the capital to scale operations and target enterprise customers. Following these rounds, Dashlane experienced steady growth, expanding its workforce to 308 employees by 2025 while establishing a stronger international presence, including U.S. headquarters in New York and a new multi-floor office in , , to support engineering and operations. The focus on enterprise scaling included revamped partner programs in 2025 to drive channel sales and credential security adoption, without major acquisitions.

Products and services

Personal offerings

Dashlane provides two primary personal plans tailored for individual users and households: the Premium plan and the Friends & Family plan. The Premium plan, designed for single users, is priced at $4.99 per month when billed monthly or $2.50 per month (equivalent to $29.99 annually) when prepaid yearly, offering full access to core password management functionalities. The Friends & Family plan supports up to 10 users under a single subscription at $7.49 per month or $3.75 per month ($44.99 annually), allowing each member to maintain a private vault while sharing select items securely. Both plans include unlimited storage for passwords and passkeys across all devices, autofill for seamless logins, secure credential sharing with permissions, and an identity dashboard that monitors for data breaches and personal information exposure on the . In September 2025, Dashlane introduced passkey support on smartwatches. In 2025, Dashlane partnered with Yubico to enable passwordless to the service using FIDO2-compatible YubiKeys as the primary authentication method, eliminating the need for a master password; this is available for new personal users on desktop browsers, with plans for broader rollout. These features enable users to centralize and protect their online credentials without device limitations. In September 2025, Dashlane discontinued its free tier, which previously offered limited functionality, effective September 16, requiring all users to subscribe to a paid plan for continued access. The service is compatible with Windows, macOS, , Android, and major web browsers such as Chrome, , , and Edge, ensuring cross-platform . For individuals and families, Dashlane's personal offerings prioritize simplicity in credential management, reducing the risk of weak or reused passwords through intuitive tools that promote secure habits without technical complexity.

Business solutions

Dashlane offers two primary business plans designed for organizational and credential management: the Management plan and the Omnix plan. The Management plan is priced at $8 per user per month when billed annually, providing core features for secure employee access and administrative control. The Omnix plan, which extends these capabilities with advanced credential protection, costs $11 per user per month under the same billing terms. Both plans are scalable, allowing organizations to add users as needed, and enterprise-level customizations are available upon contact for larger deployments. In November 2025, early access to passwordless admin using YubiKeys was introduced for primary administrators on these plans. Key components of these solutions include a centralized admin console that enables IT administrators to set permissions, enforce security policies, and monitor organizational password health. Integration with (SSO) providers via and (SCIM) provisioning simplifies user onboarding and offboarding. Additionally, support for (SIEM) systems facilitates compliance reporting, with Dashlane certified under SOC 2 Type II standards by the American Institute of Certified Public Accountants and compliant with GDPR requirements for data protection and privacy rights. Deployment is primarily cloud-based through Dashlane's Secure Cloud, utilizing zero-knowledge architecture where data is encrypted on user devices before transmission. While full on-premises hosting is not offered, the platform supports integration with on-premises for user synchronization. Organizations can evaluate these solutions via a 14-day free trial, which allows testing of features for up to 10,000 users without commitment. These plans target mid-to-large organizations seeking to manage employee securely, particularly in remote or distributed work environments where shared logins and access controls are critical. Unique aspects include proactive defense in the Omnix plan, featuring real-time risk intelligence, AI-powered alerts, and automated employee notifications to mitigate breaches. Browser-based protections, such as warnings against autofill on suspicious sites and restrictions on pasting to unassociated domains, further enhance team-wide without disrupting workflows.

Core features

Password management tools

Dashlane's password management tools center on a secure digital vault that stores an unlimited number of credentials, secure notes, and other sensitive . Users encrypt their information locally on their device using AES-256 before any to Dashlane's servers, ensuring that the company maintains a zero-knowledge where it cannot access or decrypt the stored . This local encryption process, performed via the user's master or device-specific keys, protects entries across all supported platforms, including web browsers, mobile apps, and desktop applications. The service facilitates seamless autofill capabilities through browser extensions and mobile apps, automatically detecting and populating usernames, passwords, and even codes on supported websites and forms. Complementing this, Dashlane includes a built-in password generator that creates strong, unique passwords based on user-defined criteria such as length and character types, which can be saved directly to the vault without manual entry. These tools reduce the of managing complex credentials while promoting the use of non-reusable passwords for each account. Secure sharing allows users to grant access to specific vault items with other Dashlane users via permission levels, such as "Can autofill," which enables without displaying the password in , thereby preventing unauthorized copying or further distribution. Shares can be managed through groups or individual invitations, with ensuring that only authorized recipients can interact with the shared content. This feature supports collaborative scenarios, like family or team access to shared accounts, while maintaining control over visibility. A dedicated Password Health dashboard provides ongoing monitoring of stored credentials, evaluating factors like , reuse across accounts, and exposure to known data breaches. Users receive a composite score and actionable alerts for weak or compromised entries, helping identify vulnerabilities such as outdated or duplicated passwords. This monitoring integrates breach data from external sources to flag at-risk logins, encouraging proactive updates without requiring manual scans. Dashlane also integrates support for passkeys, aligning with standards for . Users can store, sync, and autofill passkeys across devices, using biometric verification or device PINs for secure access to compatible websites and apps. This functionality facilitates a transition from traditional passwords to more resistant phishing-resistant methods, stored securely within the encrypted vault alongside conventional credentials.

Advanced security capabilities

Dashlane provides monitoring as a proactive measure, continuously scanning the and other sources for exposed personal information such as addresses, credentials, contact information, credit cards, Social Security numbers, other ID numbers, and computer IP addresses associated with user accounts. When a potential breach is detected, users receive immediate alerts via the Dashlane app or , enabling them to take swift action like updating passwords or securing affected accounts. This feature is available across personal and business plans, with support for monitoring up to five addresses to cover multiple identities. In addition to dark web scans, Dashlane integrates a VPN service through a partnership with , offering premium users access to encrypted browsing without additional cost. This VPN encrypts to protect against on public networks and helps mask IP addresses for enhanced during online activities. Users activate the service via the Dashlane web app and connect through the Hotspot Shield desktop or mobile applications, supporting secure connections across multiple devices for seamless protection. Phishing protection in Dashlane includes real-time alerts delivered through its , which detects suspicious websites and warns users before autofilling or pasting on potentially risky domains. Leveraging AI-powered detection, the system analyzes site behavior and patterns to identify attempts, even when users are not actively logged into the vault, and provides administrators with visibility into organizational risks. Vault-specific alerts further prevent exposure by flagging when stored logins are used on unverified sites. Identity theft alerts form part of Dashlane's broader security notification system, monitoring for data breaches that could compromise personal information like stored credentials or payment details, and notifying users instantly if their accounts appear in leaked datasets. These alerts focus on high-risk exposures that might facilitate , such as compromised emails or passwords, and include integration with Dark Web Monitoring to flag exposed Social Security numbers and other personal identifiers, prompting users to change details and monitor for further threats. For storing sensitive non-password data, Dashlane offers secure notes, an encrypted storage option within the vault for items like IDs, licenses, or confidential documents, accessible only after master password . Complementing this, Dashlane supports two-factor (2FA) by allowing users to enable it for individual logins, generate time-based one-time passwords via its built-in , and protect the vault itself with 2FA methods including app tokens or codes. This integration ensures that even if credentials are compromised, an additional verification layer blocks unauthorized access.

Security and privacy

Encryption and architecture

Dashlane employs a zero-knowledge , ensuring that all sensitive user , including passwords and personal information, is on the user's device using AES-256 before any transmission to Dashlane's servers. This approach means that the servers store only , rendering the data inaccessible to Dashlane employees or potential attackers even in the event of a server compromise, as the decryption keys remain solely with the user. The encryption key is derived from the user's master password through a , specifically Argon2d, which replaced in 2018 to provide enhanced resistance against brute-force attacks via higher computational costs and memory usage; legacy systems may still utilize with high iteration counts for compatibility. This derivation process ensures that the master password itself is never stored or transmitted in , further bolstering the zero-knowledge model. To access the account, (MFA) is required, combining the master password with a second factor such as authenticator apps, (e.g., or facial recognition for local device unlock), or hardware security keys like YubiKeys supporting U2F protocols. This layered verification prevents unauthorized access even if the master password is compromised. Data synchronization across devices is handled through , where the encrypted vault is transmitted over secure SSL/TLS channels, and only authenticated devices—verified via a unique user device key or secure token exchange—can decrypt and access the content locally. This maintains the privacy of the throughout the sync process without exposing to intermediaries. As of 2025, Dashlane has reported no major incidents involving breaches of user vault , attributing this record to its robust zero-knowledge design and proactive cryptographic updates, though a third-party CRM access event in August 2025 affected non-sensitive business metadata without impacting encrypted user information.

Transparency initiatives

Dashlane has pursued transparency in its operations by progressively open-sourcing components of its software. In February 2023, the company released the source code for its Android and applications on under a Attribution-NonCommercial 4.0 license, enabling public review and scrutiny of the mobile implementations. This initiative marked an initial step toward greater openness, allowing developers and security researchers to examine the code for potential vulnerabilities. Building on this, in December 2024, Dashlane made the source code for its web extension publicly available on , further expanding opportunities for external auditing while noting that the proprietary core infrastructure remains closed-source. To bolster trust, Dashlane undergoes regular independent security audits and maintains key compliance certifications. The company conducts annual third-party security audits to verify the integrity of its systems, with recent evaluations including penetration testing on servers and backoffice infrastructure in 2025. Additionally, Dashlane has held SOC 2 Type II compliance since at least 2020, with the certification renewed in 2024 to affirm ongoing adherence to standards for security, availability, processing integrity, confidentiality, and privacy. Dashlane provides public resources to educate users and developers on its practices. A key document is the "Security Principles and Architecture" whitepaper, which outlines the company's zero-knowledge approach and was updated in January 2025 to include details on protection and integration safeguards. Complementing this, Dashlane offers developer APIs, such as the Public API launched in March 2025, which enable secure integrations for retrieving organization like health metrics while maintaining read-only access to promote transparent building. Community engagement forms another pillar of Dashlane's transparency efforts, centered on its repositories. These platforms host the open-sourced mobile and web extension code, inviting contributions, bug reports, and independent audits from the developer community, though the full proprietary backend remains unavailable for modification. In alignment with global privacy regulations, Dashlane demonstrates transparency in data handling through compliance with the General Data Protection Regulation (GDPR) and the (CCPA). The company provides dedicated resources detailing user rights, such as access, rectification, and erasure, under these frameworks, ensuring verifiable adherence to transparent data processing practices.

Reception and impact

Critical reception

Dashlane has received generally positive evaluations from technology reviewers, with scores emphasizing its usability and security features. In August 2025, PCMag awarded it 4 out of 5 stars, highlighting its ease of use and inclusion of unique tools like phishing alerts and VPN access. Cybernews gave it 4.5 out of 5 stars in July 2025, particularly commending its robust security measures and zero-knowledge architecture. Security.org rated it 8.9 out of 10 overall in July 2025, noting its strong encryption and additional protections like dark web monitoring. Reviewers have praised several key strengths of Dashlane. Its intuitive interface was highlighted by TechRepublic in a March 2025 analysis for simplifying password management across devices. has noted the effectiveness of its phishing alerts in enhancing user protection against online threats, while commended the integrated VPN for providing comprehensive beyond basic password storage. Criticisms have centered on pricing and feature limitations. The discontinuation of Dashlane's free tier in September 2025 has led to perceptions of higher costs, with premium plans starting at $4.99 per month, as reported by . Additionally, Security.org pointed out limited monitoring, which only scans for breached passwords rather than full surveillance for financial details, placing it behind competitors in that area. Dashlane has earned notable awards, including Google Play's "Best of 2015" for its Android app. On G2, it holds a 4.5 out of 5 star average rating as of 2025, based on over 600 reviews praising ease of use. In comparative rankings, Dashlane frequently appears in the top 5 password managers, though it trails in affordability metrics according to multiple 2025 analyses.

Market position and awards

Dashlane occupies a notable position in the password management industry, recognized as a premium provider emphasizing enterprise-grade security and usability. The global password management market is valued at approximately $2.4 billion in 2025, with projections for significant growth driven by rising cybersecurity demands. Dashlane holds around 3.33% of the overall , positioning it as a key player focused on high-end business solutions rather than broad consumer volume. In the enterprise password managers segment, it commands about 1.4% mindshare, reflecting targeted growth in organizational . Key competitors include , which has faced challenges from multiple security breaches; 1Password, valued for its more affordable pricing tiers; and , distinguished by its fully open-source architecture appealing to privacy-focused users. Dashlane differentiates itself through proactive credential protection and seamless integration, particularly in business environments. By 2025, Dashlane serves over 19 million users worldwide and more than 23,000 businesses, underscoring strong enterprise traction. This expansion accelerated following a $110 million Series D funding round in 2019, led by , which enabled enhanced product development and market scaling. Dashlane has received several industry awards highlighting its security leadership. In 2024, it won the Fortress Cybersecurity Award in the Authentication & Identity category from the Business Intelligence Group, recognizing its innovative credential management solutions. The company also earned a spotlight feature in Cyber Defense Magazine for 2024, praising its enterprise credential security capabilities. Additionally, in 2025, Dashlane was named an Editor's Choice winner among top password managers by AllAboutCookies.org and PCWorld's Best Password Manager for 2025–2026. The 2019 Sequoia Capital investment served as a milestone endorsement, bolstering its credibility among investors and enterprises. Dashlane has contributed to industry standards through collaborations, notably co-developing the OpenYOLO with in 2016—an open-source project enabling secure password access for Android apps and promoting "you only once" efficiency across password managers. This initiative advanced cross-platform credential handling and influenced broader adoption of standardized protocols.

References

Add your contribution
Related Hubs
User Avatar
No comments yet.