NordPass in 2026: setup, XChaCha20, and 2FA

Some password managers sell you quiet competence. NordPass sells you a brand. It comes from Nord Security, the Lithuanian company behind NordVPN, and it inherits that family's instinct for marketing: sponsorship reads, podcast ads, a landing page that loads like a product launch. The question underneath the gloss is the one that matters — is the vault any good?

The short answer is that NordPass is a competent, well-audited, closed-source manager with one genuinely distinctive technical choice and a pricing structure that rewards patience. The longer answer is the rest of this guide, with the 2FA fine print most reviews skip.

What NordPass is

NordPass is a consumer-first password manager from Nord Security, the company behind NordVPN and the NordLocker encrypted-storage product. The current iOS app — version 4.17, updated in October 2026 — describes the lineage plainly: passwords, passkeys, credit cards, Wi-Fi codes, and secure notes in one encrypted vault, with autofill across devices.

The trust artifacts are real, which is more than some competitors can say. The App Store listing notes a Cure53 independent audit of the apps, ISO 27001 certification and a passed SOC 2 Type 2 audit for the Business tier, and the company's zero-knowledge architecture claim. What it does not offer is open-source clients — you are trusting Nord Security's implementation, not reading it. That is the same trade Dashlane asks for and Bitwarden refuses on your behalf.

XChaCha20, honestly

Every password manager marketing page leads with an algorithm, and NordPass leads with XChaCha20-Poly1305 where most competitors say AES-256-GCM. The honest explanation is shorter than the marketing: both are authenticated ciphers with no practical attacks, and neither is a reason to pick a vault.

ChaCha20's real advantage is performance on hardware without AES acceleration — older phones, some embedded chips — where it runs faster than AES in software. On a modern phone with AES hardware, the difference vanishes. The cipher is the least interesting part of a vault's security. Key derivation, secret storage, and recovery design are where vaults actually differ, and NordPass does those well: Argon2id derives the key from your master password, which is the current best practice that 1Password's security model also builds on, in its own way.

So: XChaCha20 is a fine choice, and it is also a headline, not a reason.

Setup, start to finish

Setup is the standard modern flow:

1. Create an account on the NordPass site or in the app, and set a master password. Everything downstream depends on this one string — it derives the key that encrypts your vault, and the company cannot reset it for you.
2. Install the apps and browser extensions you need. The free plan has historically limited how many devices stay active at once, and those limits have shifted over the years, so treat the plan page as the source of truth rather than a review written in any given month.
3. Import existing passwords from a browser or another manager — the import tools are included, and this is the step that makes or breaks a switch.
4. Turn on autofill in your browser and phone settings, and let the manager capture new logins as you create them.

None of this is distinctive, which is the point: a password manager that makes setup interesting has failed at something.

The 2FA fine print

Two different things get called "2FA" in any password-manager review, and NordPass handles them differently.

The first is protecting your NordPass account itself. The apps support signing in with Face ID, Touch ID, and hardware security keys — the App Store description lists all three — and NordPass has been rolling out passwordless account options on top of that. A security key is the strongest of the three by a wide margin, for the same reasons the hardware key guide lays out: a FIDO2 credential answers only the genuine domain, so a phishing page collects nothing useful.

The second is the more interesting one: NordPass Authenticator, the built-in one-time-code feature. TOTP secrets can live in the vault alongside the passwords they protect, and the codes autofill when a site asks for them. It works, it is convenient, and it quietly collapses your two factors into one. If someone ends up with your master password — phishing, keylogger, a shoulder on a train — the second factor that was supposed to save you is sitting in the same vault, behind the same password, waiting for them.

This is not a NordPass flaw; it is the standard architecture of every combined manager. It is also the argument for the split arrangement: passwords in your manager, second factors in a dedicated 2FA vault. That is the design we build — 2FA by DependsiT holds only TOTP, HOTP, and Steam Guard entries, encrypted on your device before upload, and pairs with any password manager rather than replacing one. The guest generator needs no account if you just want codes for a secret you already hold.

Free, paid, and what things cost

NordPass keeps a free plan for personal use, and its device limits have changed more than once over the years — the current shape lives on the pricing page, not in a guide. What can be pinned down is the App Store, where the in-app purchases run from $0.99 to $35.99, with monthly billing at the top of that range and the yearly option around the middle. Apple's storefront always costs more than buying direct, and the company's own page holds the current rates for the direct plans.

Around the paid tiers sit the extras that justify them: the Data Breach Scanner that flags logins appearing in known incidents, Password Health that surfaces weak and reused credentials, secure sharing, and the family plan. None of these change the security model. They change the comfort.

Recovery: the question that matters more than the cipher

The feature nobody researches at signup is the one they research at midnight a year later. NordPass, like every zero-knowledge manager, cannot hand your master password back — Argon2id derivation means the company that stores your vault mathematically cannot read it. What the apps offer instead are the softer recovery paths: biometric access on devices you have already trusted, and account-recovery codes you can generate while you still have access. Generating them is a two-minute task, and skipping it is how password-manager horror stories start.

There is a second, quieter recovery question for NordPass specifically: the account itself. Because the vault is tied to a company account rather than a file you own, leaving means export — and the export exists, which puts NordPass ahead of the lock-in curve, but the habit of exporting after every big batch of changes is yours to maintain. The KeePass family makes that question disappear by making the database itself the portable artifact. NordPass makes it a checkbox. Check it sometimes.

Where NordPass wins, and where it does not

	NordPass	Bitwarden
Encryption	XChaCha20, Argon2id	AES-256, PBKDF2 or Argon2id
Open source	No	Yes, audited
Free tier	Personal plan, device limits	Unlimited passwords, unlimited devices
Paid price	Roughly double Bitwarden's $19.80 a year	$19.80 a year
Self-hosting	No	Yes, plus the Vaultwarden community option
Polish	The strongest argument in its favor	Functional, plain

The honest summary: NordPass wins on polish, family-plan pricing, and having a real security company behind it. Bitwarden wins on price, openness, and the right to leave — its export and self-host story is the category's best. LastPass no longer belongs in this comparison at all, and the free-manager roundup covers where every tier lands.

Frequently asked questions

Is NordPass safe?

The cryptography is sound — XChaCha20 with Argon2id derivation, zero-knowledge design, a Cure53 audit of the apps, and ISO 27001 plus SOC 2 Type 2 on the business side. The main reservation is structural rather than technical: the clients are closed source, so you are trusting Nord Security's implementation and audits rather than reading the code yourself. For most people that is an acceptable trade. For people who want verifiability, Bitwarden is the answer.

Does NordPass have a free plan?

Yes, for personal use, with device limits that have shifted over the years. The pricing page is the source of truth because the free tier's shape has changed more than once. If you need unlimited devices at no cost, Bitwarden's free tier is the structural answer — unlimited passwords on unlimited devices — and it has not wavered on that.

Can NordPass store 2FA codes?

Yes. NordPass Authenticator keeps TOTP secrets in the vault and autofills the codes when sites ask for them. It is convenient, and it also merges your two factors into one vault behind one master password. If you prefer the factors separated — passwords in one tool, codes in another — pair it with a dedicated 2FA vault rather than the built-in authenticator.

Is XChaCha20 better than AES-256?

No, and yes, and it does not matter. ChaCha20 is faster on hardware without AES acceleration — older phones mostly — while AES-256 with hardware support is effectively free on modern devices. Both are unbroken authenticated ciphers in their Poly1305/GCM configurations. No attacker is choosing which vault to crack based on the cipher. Pick a vault on its key derivation, its recovery story, and its export policy.

How does NordPass compare to NordVPN?

They are siblings from the same company, Nord Security, and they solve different problems. NordVPN encrypts your traffic in transit; NordPass stores your credentials at rest. A subscription to one does not include the other, though the company bundles them in some plans. The shared lineage mostly matters for trust: if you already believe the company's VPN marketing, its vault marketing will feel familiar, and vice versa.

If your second factor deserves its own home, the guest generator takes a Base32 secret, an otpauth link, a QR image, or a Google Authenticator export and returns codes with nothing stored and nothing sent. The features page has the vault version.