ExpressVPN’s password manager (named ExpressVPN Keys) leverages zero-knowledge encryption to ensure that no one—not even ExpressVPN—can decrypt the information our users store. Zero-knowledge encryption ensures that if there was a data breach of our servers, an attacker would not be able to decrypt any information stored by our users. This information is only ever decrypted on a user’s device, and can only be decrypted using encryption keys generated by the user’s primary password—which only they know.