Spanish password manager Passwork shares tech ties with Russian counterpart

Passwork, a password manager based in Spain, shares technological ties with a Russian counterpart certified by an agency under Russia's Ministry of Defense. The CEO of the Spanish company denies any relationship between the two firms.

**Passwork**, a password manager based in Spain used by government agencies and European universities, maintains technological ties with a Russian counterpart. According to the investigation published by **vsquare.org**, that counterpart lists sanctioned Russian missile manufacturers among its clients.

## A certification that requires code review

The Russian company has been certified by an agency under Russia's **Ministry of Defense**. That certification requires a deep review of the source code to look for "vulnerabilities or undeclared capabilities," according to the outlet.

Standard commercial audits are designed to find and patch bugs. Experts warn that a review conducted by Russian state-affiliated auditors could give **Moscow** information on how to exploit potential vulnerabilities in European software.

## Updates from the United Arab Emirates

The Spanish company has been receiving its software updates from an opaque company based in the **United Arab Emirates**. That company is run by one of Passwork's Russian co-founders.

The CEO of Passwork, based in Spain, said there is no relationship between the company registered in Spain and its Russian counterpart. He added that client data is stored securely on their own private servers.

## What is at stake for European clients

The risk flagged by experts is one of state-level security: a password manager concentrates access credentials for the systems of agencies and universities. The code review by auditors linked to the Russian Ministry of Defense is the most worrying point.

If you have any concerns about corporate or institutional credentials, it is advisable to consult a cybersecurity specialist.