NordPass Q1 2026 Update

Q1 2026 in Review: Accelerating Security and Usability with NordPass

As we close the first quarter of 2026, NordPass continues its trajectory of rapid innovation. This quarter’s engineering efforts were strictly focused on fortifying our security architecture and refining the user experience for enterprise environments.

Below is a comprehensive overview of our latest administrative controls, end-user enhancements, threat intelligence research, and strategic insights from the Nord Security Business Suite.

Enterprise-Grade Administrative Enhancements

This quarter, we introduced several powerful features designed to give IT and Security administrators granular control over organizational data and access lifecycles.

Granular Hierarchy via Nested Shared Folders

To better accommodate complex organizational structures, Enterprise plan users can now utilize a 2-level deep Subfolder architecture within Shared Folders. This enhancement allows teams to build a logical, cascading hierarchy that directly mirrors their internal departmental structures.

To ensure streamlined governance, access permissions (Edit, Share, View, or Autofill-Only) are dictated at the parent Shared Folder level. These permissions automatically inherit downward to all nested subfolders, ensuring that the folder owner retains absolute oversight and uncompromising control over the entire directory tree.

Centralized Sharing Policies

Ad-hoc credential sharing frequently leads to sprawling, unmanageable access logs and heightened data exposure risks. To mitigate this, we have deployed centralized Sharing settings, empowering administrators to strictly dictate how assets are shared internally and externally.

Administrators can now enforce rules by specific roles or individuals—covering single-item sharing, entire folders, or external guest access. By mapping permissions directly to the principle of least privilege, organizations can systematically prevent accidental data overexposure. Furthermore, as employees transition roles, their access is automatically updated based on their new group alignments, drastically reducing the burden of manual audits and eliminating orphaned shares.

Automated Onboarding with Domain Reservation

Preventing shadow IT and rogue accounts is now fully automated. Through our new Domain Reservation feature, administrators can officially reserve their corporate email domains within NordPass. Once reserved, any employee attempting to register a personal account or join a different organization using a corporate email will be automatically redirected to your official corporate environment.

Managed directly within the Business Admin Panel—without the need for Support intervention—this feature ensures total sovereignty over your organization’s digital footprint. It also accelerates onboarding; users with active invitations bypass account-type selections and are seamlessly dropped into their pre-configured corporate workspaces.

Seamless Asset Transfer During Offboarding

Employee offboarding is a high-risk operational phase where critical access can easily be lost. We have upgraded our Items Transfer protocol to automatically encompass Shared Folders alongside personal vault items. When an administrator deletes a user, ownership of their personal items and any Shared Folders they managed is instantly reassigned to a designated successor. Folder names, permissions, and nested structures are preserved perfectly, ensuring absolute business continuity without the need for manual reconfiguration.

Comprehensive Auditing via Member List Exports

To facilitate rapid compliance audits and team management, Organization Owners and Admins can now export their complete user directory into a structured CSV file. Initiated directly from the Members page, this comprehensive report details:

• User Telemetry: Email addresses, active roles, and current account statuses (Active, Pending, Suspended).
• Group Mapping: Complete visibility into the specific groups assigned to each user.
• Provisioning Insights: Data on how the user was onboarded (manual invitation vs. automated provisioning system, including the specific provider).
• Activity Logs: Precise timestamps of each member’s most recent platform activity.

Refining the End-User Experience

Native iOS Credential Capture

For users operating on iOS 26.2+ (with NordPass 4.10.1+), we have directly integrated our autofill extension with Apple’s latest Password Manager APIs. The NordPass application now autonomously detects three specific system events: the generation of a new password, the registration of a new account, and the successful login using existing credentials. Upon detection, NordPass instantly intercepts the payload and prompts the “Add item” screen, allowing users to save credentials natively without manual duplication.

Context-Aware Autofill Interface

To reduce visual clutter and maintain a pristine digital workspace, we have refined the behavior of our autofill icons. Rather than remaining persistently visible across all login and classified fields, the NordPass icon now remains hidden until the user actively clicks or focuses on the specific input field.

Flexible Subscription Upgrades

Scaling your NordPass deployment is now frictionless. Organizations can dynamically upgrade both their plan tier and their billing duration (e.g., shifting from a monthly Team plan to a 2-year Enterprise plan) directly within the dashboard. When extending a billing duration, the new cycle begins immediately, and a prorated credit for any unused portion of the previous cycle is automatically applied to the new invoice.

Additional Workflow Optimizations

• Enhanced Keyboard Navigation: In-page NordPass prompts can now be instantly dismissed via the ESC key.
• URL-Specific Autofill Controls: Administrators and users can now restrict autofill and autosave functionalities to specific URL routes (rather than just top-level domains), ensuring NordPass only engages exactly where authorized.
• Visual Autofill Confirmation: Fields successfully populated by NordPass are now subtly highlighted in teal, providing immediate visual verification of data placement.
• Security Dashboard Upgrades: The Passkey authentication flow has been streamlined to prevent friction during selection. Additionally, users can now directly edit Exposed, Weak, Old, or Reused passwords straight from the Password Health dashboard.