As we conclude the first quarter of 2026, we’re wrapping things up on a high note. This quarter has been all about updating and reinforcing NordPass features for even better security and user experience.
Contents:
Below, we’ll walk you through the latest security features, our research into data leaks with NordStellar, and the Nord Security Business Suite webinar. Let’s roll!
2025 was a big year, but 2026 is shaping up to be even bigger
We recently sat down with experts from NordLayer, NordPass, and NordStellar to review the major releases of the past year and take an early look at what’s coming next. You can watch this webinar recording to see how Nord Security Business Suite solutions are evolving to help you stay ahead of cyber risks. We covered everything from major product updates to new security layers designed for modern businesses.
Product updates
Next on the list are the product improvements we made this quarter. And there were several, so let’s take a look.
Added granularity to Shared Folders
We have introduced a 2-level deep Subfolder structure for Shared Folders, designed to give Enterprise plan users a more granular way to manage and share access across different teams and departments. This update allows you to create a logical hierarchy—from a parent Shared Folder down to two additional levels of nested subfolders. It is a practical solution for larger organizations that need to mirror their actual team structures within the platform.
To keep management simple, access levels are defined at the parent Shared Folder. Whatever permissions you set there—whether it is the ability to edit, share, view, or only autofill—flow downward to every Subfolder beneath it. This ensures that if you own a parent Shared Folder, you maintain full oversight and control over all the nested content.
Items Transfer from deleted members
Offboarding an employee involves many moving parts, and it is easy for important data to slip through the cracks if the process isn’t seamless. That’s why we updated our Items Transfer process to include Shared Folders alongside personal items. This closes a common gap where Admins might delete a user and unintentionally lose track of the Shared Folders that user owned within NordPass.
This means that when a member is deleted, all their personal items and any Shared Folders they owned are automatically transferred to a designated new owner. To maintain continuity for your teams, these folders are transferred exactly as they are—we don’t change names or modify any existing structures. This ensures the new owner can pick up where the previous one left off without needing to reconfigure permissions or search for missing credentials.
Streamlined access with centralized Sharing settings
Sharing credentials can quickly turn a secure environment into a messy jumble. It becomes difficult for Admins to track who has access to what, which increases the risk of exposing confidential information. To solve this, we have introduced centralized Sharing settings that allow you to define exactly how information is shared within your company and with external partners.
You can tailor these rules by role or individual to fit different needs—single-item sharing, folder-based sharing, or external sharing. This approach brings predictability and structure to your workflows by ensuring consistent permissions across teams and mapping them to the principle of least privilege. In practice, this means that people only have access to what they need for their specific roles, which reduces the potential for accidental data exposure.
Such centralized settings also simplify the process of managing team changes, from new hires to those moving roles or leaving the company. Because access can be aligned with your existing groups and roles, permissions update automatically as people transition. This creates a much stronger offboarding process. A single action removes access to multiple items at once, eliminating orphaned shares and reducing the risk of data leaks. For your security teams, this means more efficient audits with clear records and significantly less time spent on manual cleanup.
Efficient onboarding with Domain Reservation
Setting up new team members should be a seamless process, but it often becomes complicated when employees use company emails to sign up for personal NordPass accounts or free trials. We solved this with the Domain Reservation feature that allows you to reserve your company’s email domains within NordPass. This ensures that any account created with a corporate email address is funneled into your official organization correctly from the start.
By reserving your domain, you effectively block incorrect signups. This means that if an employee attempts to create a personal account or join a different organization using their company email, they will be directed to your designated corporate account instead. This provides users with clear instructions and eliminates the manual work usually required to identify and fix rogue accounts.
Admins and Owners can manage everything directly in the Business Admin Panel. They can add, manage, or remove reserved domains without needing to contact Support, which gives them immediate control over the organization’s digital footprint. Because this process aligns with your existing workflows, it also streamlines onboarding—users with an active invitation can skip account-type selection and go straight to their corporate setup. This ensures that permissions remain consistent and that your team has access only to what they need, right from day one.
A cleaner autofill interface
Here at NordPass, we strive to make our platform helpful, not distracting. To keep your digital workspace organized, we have updated the appearance of our autofill icons on your screen. Previously, these icons were always visible on login forms and classified fields, which could sometimes feel a bit cluttered. Now, the icon stays out of sight until you actually need it and only appears once you click or focus on a specific form field.
Seamless credential saving on iOS
We’ve updated the NordPass experience on iOS to make managing your credentials even more efficient. For those using iOS 26.2+ and who have NordPass 4.10.1+ versions, our autofill extension now integrates directly with Apple’s latest Password Manager APIs. This means the platform can now automatically react to 3 specific actions: when a new password is generated by the system, when a new account is registered, and when existing credentials are used to log in.
When these events occur within a website or app, the extension receives the details from iOS and immediately opens the “Add item” screen. This allows you to instantly save those credentials as new items, without any manual data entry or duplication.
Managing your team with member list exports
Organization Owners and Admins now have a simpler way to audit and manage their teams. We have added the ability to export your entire member list into a CSV file, giving you a clear, structured overview of your organization’s users at any time.
The process is straightforward: just navigate to the Members page and click the Export CSV button located next to the Invite members button. Once you confirm the action, you’ll get a comprehensive report that includes essential details such as:
User details. Email address, current role, and account status (Active, Pending, or Suspended).
Group membership. A full list of the groups each member belongs to.
Onboarding insights. Identification of whether a user was invited manually or via a provisioning system, including the specific provider used.
Activity tracking. The date and time of each member’s most recent activity.
Plan duration upgrades
We’ve updated our billing process to give you more flexibility in how you manage your organization’s subscription. You can now adjust your subscription duration, not just your plan tier. For example, if you are moving from a monthly Team plan to a 2-year Enterprise plan, you can complete the transition in just a few clicks.
When you choose to upgrade to a longer duration, your new billing cycle starts immediately from the day of purchase. To ensure a fair transition, we apply a prorated credit toward the new total for any unused portion of your previous cycle. This means you only pay for the value that you receive, with the remaining balance of your old plan automatically deducted from the price of the new one.
If you prefer to keep your current billing cycle and only upgrade your tier, the process remains as straightforward as before. You simply pay the difference between the tiers for the remainder of your existing period.
Other updates
Additionally, a series of smaller updates has been rolled out to make managing credentials more intuitive and effortless:
Enhanced keyboard control. NordPass in-page prompts can now be dismissed instantly using the ESC key, making the interface more responsive to your specific workflow.
Granular autofill controls. You can now specify autofill and autosave controls by a specific URL route, providing more control than just the top-level domain. This ensures NordPass only interacts with the exact pages you define.
Visual clarity in the autofill dropdown. To make it obvious where credentials are being placed, autofilled fields are now gently highlighted in teal. This subtle visual cue helps verify that the correct information was autofilled.
Passkey and security fixes. The passkey flow has been refined to eliminate confusion when choosing a different passkey and to ensure a smoother authentication experience. Additionally, editing Exposed, Weak, Old, or Reused passwords directly on the Password Health dashboard is now possible.
Research: data leak trends
Earlier this year, NordPass and NordStellar joined forces to analyze the evolving trends in leaked databases. By focusing on the most affected countries, industries, and the biggest leaks of 2025, this research offers a practical look at where cyber risks are most concentrated. It is designed to help security teams identify potential vulnerabilities before they are exploited.
Bottom line
We wrapped up Q1, a quarter busy with feature updates that established a solid starting point for the year ahead. From Subfolders to a more efficient onboarding process with Domain Reservation, these improvements are designed to give you better control and visibility. Stay safe online!