password-manager-security

Preview image for a blog post

Beyond Zero-Knowledge: Unmasking Server-Side Vulnerabilities in Modern Password Managers

New research reveals server-side vulnerabilities in leading password managers, exposing data via account recovery, shared vaults, and encryption weakening.
Preview image for a blog post

Zero-Knowledge Under Siege: Design Flaws Expose Password Manager Vaults to Server-Side Attacks

Researchers expose critical design weaknesses enabling vault attacks in major password managers, even with zero-knowledge encryption, during server compromise.