Softwr

Cybersecurity · head to head

Enpass vs One Identity

Enpass logo

Enpass

Cybersecurity

Offline-first password manager that stores your vault locally instead of the cloud

From
Free
Rated
-
Full reviewWebsite
One Identity logo

One Identity

Cybersecurity

Quest-owned identity governance, PAM and Active Directory management

From
On request
Rated
-
Full reviewWebsite

The short version

  • Only Enpass has a free tier, so it costs nothing to try first.
  • Each has a real cost: Enpass no built-in cloud sync of its own, so users must configure a third-party storage provider for multi-device sync.; One Identity the portfolio is assembled from separate acquisitions, so components are separately licensed, separately administered and do not present one console, which raises operational cost.
  • They diverge on capability: Enpass covers Offline vaults, One Identity covers Identity Manager.
  • Prices and features above were last checked on 1 September 2026.

Where they differ

Only the attributes on which Enpass and One Identity actually diverge.

Attributes where Enpass and One Identity differ
AttributeEnpassOne Identity
Starting priceFreeOn request
Pricing modelfreemiumquote
Free tierYesNo
Platformsweb, ios, android, windows, mac, linuxWeb, Windows, Linux

Identical on both: user rating (Not yet rated), category (Cybersecurity).

What each one covers

Drawn from each product's published feature list. An absence here means we hold no record of it - not that the product lacks it.

Only in Enpass

  • Offline vaults
  • Bring-your-own-cloud sync
  • Autofill and password generator
  • Password audit
  • Business admin console
  • Cross-platform apps

Only in One Identity

  • Identity Manager
  • Safeguard
  • Active Roles
  • OneLogin
  • Password Manager
  • syslog-ng
  • Starling connectors

What people use each for

The jobs each tool is most often brought in to do.

Enpass

  • Storing passwords without trusting a vendor's cloudnot One Identity
  • Syncing a vault via personal cloud storagenot One Identity
  • Managing a household's shared loginsnot One Identity
  • Provisioning team vaults with SSO-adjacent admin controlsnot One Identity

One Identity

  • An organisation whose authoritative directory will remain on premises Active Directory and needs delegated administration with attribute-level controlnot Enpass
  • A government or defence environment requiring privileged session management on a hardened physical appliance rather than a cloud servicenot Enpass
  • A manufacturer with SAP and Active Directory needing provisioning governed under one certification processnot Enpass
  • An enterprise consolidating Active Directory after an acquisition and needing automated account lifecycle across both forestsnot Enpass

Where each one falls short

Documented limitations, not opinions. Every one is a constraint you would hit in normal use.

Enpass

  • No built-in cloud sync of its own, so users must configure a third-party storage provider for multi-device sync.
  • Mobile Lite tier caps vaults at 25 items, pushing active mobile users toward a paid plan quickly.
  • Lacks dark web monitoring and breach alerting found in some competing password managers.
  • Team/business plan lacks a native SSO login option comparable to enterprise-grade competitors.

One Identity

  • The portfolio is assembled from separate acquisitions, so components are separately licensed, separately administered and do not present one console, which raises operational cost.
  • Identity Manager implementations are customisation-heavy and commonly run over a year, with the services spend exceeding the licence cost in the first year.
  • Quest has changed private equity ownership more than once since the Dell separation, and buyers should ask directly about product investment commitments before signing a multi-year deal.
  • Product documentation and support sit behind a customer portal, which makes independent evaluation before purchase harder than with vendors that publish openly.
  • The cloud-native and developer experience trails the pure-play identity vendors, so organisations moving decisively to SaaS applications find the on premises heritage becomes a constraint rather than an asset.

Pricing, plan by plan

Enpass

Free
  • LiteFree
    • Up to 25 items on mobile
    • Unlimited items on desktop trial
    • No cloud sync
  • Individual$1.99/month
    • Unlimited items
    • Cloud sync via own storage provider
    • Unlimited devices
  • Family$2.99/month
    • Up to 6 members
    • Shared vaults
    • Unlimited devices per member
  • Business$1.99/month
    • Per-user pricing billed yearly
    • Admin console
    • Microsoft 365 / Google Workspace integration

One Identity

On request
  • Identity Manager$undefined/year
    • Priced per managed identity
    • On premises or hosted
    • Access certification and provisioning
  • Safeguard$undefined/year
    • Priced per privileged user or per appliance
    • Hardened appliance option for session management
    • Licensed separately from Identity Manager
  • Active Roles$undefined/year
    • Priced per managed Active Directory account
    • Delegated administration and automated provisioning
    • Licensed separately

Which should you pick?

Choose Enpass if

  • You need offline vaults.
  • You want to start without paying.
  • You work on web, ios, android, windows, mac, linux.
  • You also want bring-your-own-cloud sync.
Enpass review

Choose One Identity if

  • You need identity manager.
  • You work on Web, Windows, Linux.
  • You also want safeguard.
One Identity review

Questions people ask

Is Enpass or One Identity better?
Neither clearly leads. Enpass starts at Free and One Identity at On request, and user ratings are close enough to be indistinguishable. Choose on capability and platform support.
Which is cheaper, Enpass or One Identity?
Enpass has a free tier; the other does not. Paid plans start at Free for Enpass and On request for One Identity.
Does Enpass or One Identity run on more platforms?
Enpass runs on web, ios, android, windows, mac, linux. One Identity runs on Web, Windows, Linux.
Can I use Enpass for free?
Yes. Enpass has a free tier, so you can try it without paying. One Identity starts at On request.
What is Enpass best used for?
Enpass is most often used for storing passwords without trusting a vendor's cloud, syncing a vault via personal cloud storage, managing a household's shared logins, provisioning team vaults with sso-adjacent admin controls. Of those, storing passwords without trusting a vendor's cloud and syncing a vault via personal cloud storage are not what One Identity is typically brought in for.
What can Enpass do that One Identity cannot?
Enpass covers Offline vaults, Bring-your-own-cloud sync, Autofill and password generator, Password audit. One Identity covers Identity Manager, Safeguard, Active Roles, OneLogin.

Answered from the vendors’ own pages

One Identity: Is One Identity the same company as Quest?

Yes. One Identity is Quest Software's identity and access management business unit, not a separate vendor.

One Identity: Does it include privileged access?

Safeguard provides it, but it is licensed separately from Identity Manager. Neither includes the other.

One Identity: Why choose this over SailPoint or Saviynt?

Almost always because of Active Directory depth via Active Roles or an appliance requirement for privileged sessions. For cloud-first estates the specialists are the stronger choice.

Share

Related pages

More on Enpass

More on One Identity

Keep looking

Other head to heads