Credential Risk Detection is available to organizations with Credential Protection.
Omnix Risk Detection uncovers credential risk across your organization without compromising employee privacy.
Our zero-knowledge architecture ensures that no one, not even Dashlane, can access anyone's credential data. We used these same principles when building Credential Risk Detection to ensure the security of your employees's data.
This is how Credential Risk Detection protects your privacy:
- Password inputs are security checked locally on each employee's browser
- Audit logs are protected with encryption using AWS Nitro technology
- Log entries include only the domain and the employee work device profile username, not the password itself
How does Dashlane identify weak and compromised passwords?
Dashlane uses an algorithm to detect weak and compromised passwords. As with credentials in the vault, neither Dashlane nor the Dashlane admin can access the passwords that Credential Risk Detection monitors or detects.
Credential Risk Detection doesn't track all employee browser activity or save sensitive data like the usernames or passwords employees enter on a website. The tool provides only the most relevant information to admins:
- Who entered the at-risk password, identifying them using their employee work device profile username, which can differ from their email address
- The website domain where the employee entered the password
- The password's risk classification, indicating whether it's weak or compromised
More about Dashlane security and privacy
Read Dashlane's Credential Risk Detection privacy statement
Explore Dashlane's Security Principles & Architecture
Learn more about Security at Dashlane