Internal note: Notify of changes

2.1 Mitigation to Credential Threats

All solutions are described in more detail in further sections of this document.

2.1.1 Phishing

Phishing is a social engineering attack that commonly uses a fake website to trick a user into entering sensitive information by impersonating a trustworthy organization.

The Dashlane extension prevents users from entering credentials on fraudulent domains, mitigates many click-jacking attacks, and provides users with cross-platform passkey support and a built-in AI Phishing Detection engine.

2.1.2 Credential Theft

Credentials are highly valuable targets for threat actors, making them critically vulnerable to attack vectors such as brute-force, credential stuffing, and large-scale data breaches.

Dashlane provides an easy way to generate strong and unique passwords for every single service users want to log in to, decreasing the risk of using weak or compromised credentials and the risk of credential reuse, where one compromised password exposes other accounts. Dark Web Monitoring features alert users so they can quickly react in case of theft or compromise.

2.1.3 Insider Threats

An insider threat refers to a security risk that originates within the organization. This person is often a current or former employee, contractor, or business associate who has or had authorized access to the organization’s network, systems, or data and uses that access to maliciously or inadvertently compromise the organization’s security.

Dashlane addresses insider threats through features such as Role-Based Access Control (RBAC), delegated admin controls, and detailed logs that monitor employee behavior, while its zero-knowledge encryption prevents unauthorized vault access.

2.1.4 Shadow IT and Unmanaged Sharing

Shadow IT/unmanaged sharing risks occur when employees use unauthorized or unsanctioned tools and methods (shadow IT) or share sensitive data through unsecured channels (unmanaged sharing). This creates security gaps that bypass corporate controls, increasing the risk of data loss, non-compliance, and exposure to unmonitored threats.

Dashlane mitigates shadow IT/unmanaged sharing risks by providing secure, policy-enforced credential sharing, which, combined with delegated administrative controls and event tracking, enables safe collaboration while strictly limiting unauthorized access.

2.2 Enterprise Integration

Dashlane is designed to integrate seamlessly into the modern enterprise security stack, strengthening credential protection without introducing additional complexity.

• Fits into your ecosystem: With standards-based SSO, SCIM provisioning, seamless integration with common MDM, and compatibility with leading identity and endpoint management solutions, Dashlane works with the tools you already rely on.
• Streamlined for IT: Deployment and administration are simple, reducing overhead for IT teams and avoiding the hidden costs of managing another siloed system.
• Visibility and control for security leaders: Detailed activity logs, real-time alerts, and granular role-based access give security teams the oversight they need to monitor, detect, and respond effectively.
• User-centric protection: Employees can securely manage and share credentials with a consistent experience that drives adoption and improves password hygiene.

By combining seamless integration, user-first security, and enterprise-grade controls, Dashlane elevates an organization’s credential security posture while reducing operational burden across IT and security teams.

2.3 Zero-Overhead Security Posture

Dashlane is architected not only to solve credential threats but also to prevent itself from introducing new risk. Our defense-in-depth approach is centered on architectural safeguards aiming for a minimal footprint on the enterprise’s attack surface:

• Supply chain compromise: Confidential computing and secure cloud enclaves isolate cryptographic operations from infrastructure, ensuring that keys and vault data remain protected even if the underlying cloud environment or Dashlane itself is compromised.
• Man-in-the-middle attacks: End-to-end encryption secures credentials at every stage, on device, in transit, at rest, and in use, with confidential computing providing defense even if network transport protocols are compromised.
• Account takeover: Multi-factor authentication, admin-assisted account recovery, automated SCIM deprovisioning, and secure device provisioning prevent account hijacking and enable rapid response to unauthorized access attempts.