Blog
Security insights, product updates, and guides to protect your digital life.
What "Open Source Password Manager" Should Actually Mean
Plenty of password managers call themselves open source. Far fewer publish the code that does the encrypting. Here is what to check, and what SandPass publishes.
Read more →Why Zero-Knowledge Encryption Matters for Password Managers
Most password managers claim to be secure, but only zero-knowledge architecture ensures that even the provider can't access your data. Here's why it matters.
Read more →OPAQUE Protocol Explained: Why Your Password Should Never Touch the Server
A deep dive into the OPAQUE protocol (RFC 9807), how it works, and why it's a breakthrough for password authentication.
Read more →How to Migrate from LastPass or Bitwarden to SandPass
A step-by-step guide to importing your passwords from LastPass, Bitwarden, 1Password, or Chrome into SandPass — entirely in your browser.
Read more →How Browser Extensions Can Steal Your Passwords — And How SandPass Prevents It
Browser extensions have access to every page you visit. Here's how SandPass's security model protects your credentials from common attack vectors.
Read more →