Dutch Firms Used Password Manager with Hidden Russian Roots - DutchNews.nl
Investigators found shared code, identical branding and an FSB-certified Russian sister company, prompting Dutch users to review the password manager.
- Multiple Irish State agencies are reviewing their use of Passwork, a password manager that an investigation revealed concealed its Russian origins while presenting itself as an EU-founded firm based in Spain.
- First developed in Russia 12 years ago, the software shares original source code and logos with an FSB-certified version, and Russian founders maintain ongoing involvement in the Spanish-based entity.
- The Irish Times submitted some 100 Freedom of Information requests to determine the extent of state usage, though journalists found no evidence that passwords were stolen or data compromised.
- Government agencies, including the Office of Public Works , are exploring 'future options' after consulting the National Cyber Security Centre; Novar, a Dutch builder, stopped using the software immediately.
- Passwork owner Alexander Muntyan denied links to the Russian firm, acknowledging only 'limited product related knowledge-transfer support' during a two-year transition that ends in August 2026.
13 Articles
13 Articles
‘Made in EU’ password manager shares codebase with Russian State-certified firm
An investigation reveals that Passwork Europe SL, a Spain-based password manager marketed as fully European, shares a codebase with a Russian State-certified firm, raising security concerns. Source
“We're a European organization based in Spain, serving thousands of customers across the EU, in Germany, Austria, Switzerland, France, Spain, the USA, and…
A password manager used by European government agencies and universities is based in Spain, but originated in Russia. This is the conclusion reached by researchers from the journalistic collective OCCRP, in collaboration with Investico, NU.nl, De Groene Amsterdammer, Le Monde, and De Tijd, among others. Passwork has concealed its origins and ties to the Russian security services, the researchers write. On the company's website, Passwork emphasi…
A password manager that looks European and is also used by various vital companies and governments in the EU turns out to actually have ties to the Kremlin and the Russian secret service. Research by journalistic collective OCCRP reveals that Passwork, which markets itself as ‘Made in EU’, is actually Russian, holds a license from the FSB, and moreover attempts to conceal its Russian connections.
Coverage Details
Bias Distribution
- 45% of the sources lean Left
Factuality
To view factuality data please Upgrade to Premium







