Evidence labels
- Documentation-based overview: based on provider security materials, help documentation, feature pages, standards, audit references, and other identified primary sources.
- Hands-on test: based on direct use of a named plan, app, browser extension, device, or workflow during an identified test period.
- Long-term use: reserved for products used in a real workflow long enough to evaluate reliability, support, updates, and day-to-day friction.
Our current 1Password and NordPass pages are documentation-based overviews. They are not presented as hands-on or long-term tests.
Privacy and network verification
For our own password checker, we review source behavior and use a clean browser session to inspect requests, cookies, local storage, session storage, and console output. We type only a synthetic test value. We confirm that strength analysis does not create a network request and that the optional breach lookup sends only the expected five-character SHA-1 prefix after a deliberate click.
Password-manager evaluation areas
- Security architecture, encryption, authentication, and recovery
- Passkey, MFA, device, browser, and operating-system support
- Import, export, sharing, emergency access, and offboarding
- Password-health, breach-monitoring, and alert workflows
- Family, team, and administrator controls
- Pricing structure, renewal terms, and material limitations
- Published audits, security incidents, and remediation evidence
Hands-on test record
A hands-on review will identify the test date, product version when available, plan or trial, operating system, browser, devices, acquisition method, and material limitations. Screenshots or notes will exclude vault contents, recovery codes, personal credentials, and other secrets.
Scoring and rankings
We do not manufacture a precise numerical score from incomplete evidence. Recommendations are tied to a use case and explain tradeoffs. A product can be a strong fit for one audience and a poor fit for another.
Commercial controls
Affiliate approval, commission rate, free access, or sponsorship does not convert a documentation review into a hands-on test and does not purchase a ranking. Relevant compensation or free access is disclosed near the affected coverage.
Corrections and retesting
Product behavior and documentation change. Send a correction, primary source, or reproducible test case to info@ismypasswordsecure.com. We will update material errors and date meaningful retests when feasible.