Web Hack List

Preliminary research

Zero Knowledge (About) Encryption: A Comparative Security Analysis of Three Cloud-based Password Managers

AI-collected research leads through 22 September 2026, including targeted additions between broader sweeps. Unranked, incomplete, not community-vetted, and subject to change.

"Zero knowledge encryption" is a vendor term with no technical meaning, conveying that a server holding an encrypted vault learns nothing about it even when fully malicious. Comparing that claim against Bitwarden, LastPass, Dashlane and 1Password - together over 60 million users - shows where a malicious server can still observe or influence vault contents.

Record

Researcher
Matteo Scarlata, Giovanni Torrisi, Matilda Backendal and Kenneth G. Paterson
Published by
IACR Cryptology ePrint Archive
Date
Topic
Server

In the archive

Related sources

Tags

This page is the archive's own catalogue record. The research is the work of Matteo Scarlata, Giovanni Torrisi, Matilda Backendal and Kenneth G. Paterson, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .