NordPass is a highly effective password manager that helps you keep all of your passwords organized and secure in one place. NordPass also offers many helpful features, such as the ability to generate strong, unique passwords and the option to store and fill in passwords for websites and apps.

It’s easy to use and navigate, making it a great choice for both tech-savvy users and those who may be less familiar with password managers. NordPass uses end-to-end encryption to protect your passwords, and they have a strict no-logs policy, which means they don’t track or store any of your data.Īnother standout feature of NordPass is its user-friendly interface. The company is committed to keeping your data safe and secure, and they offer a number of features to help you achieve that. One unique aspect of NordPass is its focus on privacy. It’s a great tool for anyone who wants to improve their online security and protect their personal information. 'The steps in the provided description of the fix should address the external iframe handling as the user is now in control of which iframes are filled by the extension (as opposed to filling all iframes by default).NordPass is a password manager that helps you store, organize and secure all your passwords in one place.

“I highly appreciate that the vendor decided to address this security issue,' said Sven Krewitt, senior vulnerability researcher at Flashpoint. IT Pro has asked the company why it decided to release the fix now even though it has known about the issue since 2018.

“This eliminates the iframe attack vector while still allowing convenient autofill functionality for sites that have trusted iframes,” a spokesperson from Bitwarden told IT Pro. If a user fills in an untrusted iframe when using manual autofill, the password manager will flag an alert into the URI or URL to let the user decide whether to cancel or proceed with the operation. These trusted domains include the same domain as a website or a URL the user has designated as safe.īitwarden said that autofill on page load remains 'off' by default. The password manager will only fill in iframes from trusted domains if a user enables autofill on page load.

Bitwarden autofill