Passwork Password Manager Linked to Russian Security Services

An investigation by OCCRP reveals that Passwork, a password manager used by European entities, has ties to Russian security services despite its claims of being a European company based in Spain. The software, originally developed in Russia in 2014, is still utilized by Russian state-owned companies. Although no evidence of password theft has been found, the researchers note that companies operating under Russian law must comply with requests from Russian intelligence agencies. This raises concerns about potential vulnerabilities and espionage risks for users, including major firms in the Netherlands and Ireland. Following the revelations, some companies, like Novar, have ceased using Passwork. The situation remains contentious, with differing opinions on the software's safety among users.

Key Points: • Passwork, a password manager, is linked to Russian security services despite claims of European origins. • The software is used by various European organizations, including those in critical infrastructure sectors. • Concerns arise over potential espionage risks due to compliance requirements under Russian law.