How to delete your Enpass account

About deleting your Enpass account

Enpass is a unique password management solution that emphasizes a local-first architecture. Unlike cloud-based managers that hold your master key on their servers, Enpass stores your encrypted vault directly on your device. Users choose where to keep their data, whether that is on their local disk or via their own third-party cloud storage accounts.

While this design offers superior control, it complicates the process of 'deleting' an account because there is no central server to send a delete command to. Reasons for deleting your Enpass footprint typically include:

• Transitioning to a different password manager architecture.
• Retiring a specific cloud account used to sync your vault.
• Ensuring zero-knowledge of sensitive credentials remains on legacy hardware.
• Moving away from the current Enpass subscription model or app ecosystem.

What happens to your data

Because Enpass does not store your primary master password or the unencrypted contents of your vault, the company cannot 'delete' your data for you. When you decide to cease using Enpass, you are responsible for the physical destruction of the data files. The data points managed within Enpass include:

• Encrypted login credentials and web identities.
• Secure notes, credit card information, and identity documents.
• Attachments stored within the secure vault.
• Metadata regarding the frequency and timing of vault synchronization.

Once you delete your local vault file and remove the synced file from your cloud provider (such as Dropbox, iCloud, or Google Drive), that data is effectively unrecoverable by Enpass. They do not retain a 'shadow' copy of your vault in their own data centers.

Privacy considerations

Enpass relies on the security of the platforms you choose to host your data. Privacy risks often arise not from the app itself, but from the security posture of the cloud provider you synced with. To maximize your privacy before leaving the service:

• Audit your connected cloud services: Ensure that no orphaned copies of your vault remain in your Google Drive or iCloud storage settings.
• Clear browser extensions: Removing the Enpass browser extension is critical to prevent residual session tokens or local cache files from lingering.
• Use secure deletion tools: When deleting the vault file from a desktop, use a secure shredding utility to overwrite the sectors of your hard drive.

Frequently Asked Questions

Does Enpass store my master password on their servers?

No, Enpass uses a zero-knowledge architecture. Your master password is never transmitted to or stored on Enpass servers.

If I delete the app, is my vault gone?

Not necessarily. The app and your vault file are two separate entities. You must manually delete the .enpassdb file from your local device storage or cloud account.

How do I stop Enpass from syncing with iCloud?

Go to the Enpass settings menu, select the 'Vaults' section, click on your primary vault, and select 'Disconnect' from the sync service.

Will deleting the app remove the browser extension data?

No, you should remove the Enpass extension from your browser settings independently to ensure all cached data is cleared.

Can Enpass recover my data if I delete the file by mistake?

No. Since Enpass does not hold your master password or a copy of your vault, there is no 'account recovery' mechanism available if you delete your files without a backup.

Is my data private once synced to Google Drive?

Your vault is encrypted before it leaves your device, but the security of the file then becomes dependent on your Google account's authentication strength.