Canadian password managers
Last verified:
Short answer
1Password is a Canadian company, AgileBits Inc. Toronto-headquartered; outside investors, ownership beyond that unverified. The vault is in Canada only if the account is created on 1password.ca. Shared items can be stored in the EU while they are shared. We did not find another widely used password manager that is both Canadian-owned and running its own data centre.
What people are usually comparing
Most people looking this up already use a US or European password manager, or the one built into a browser. This page compares the Canadian company in the category, 1Password, with three options that are not Canadian: Bitwarden, Proton Pass, and KeePassXC.
1Password’s privacy notice, effective 29 December 2025, says secure data is hosted where the customer chooses: the EU, the US, or Canada. The support article published 18 August 2026 maps 1password.ca to Canada and Canadian dollars, 1password.com to the United States, and 1password.eu to the European Union.
Comparison
Verdicts use the digital services rubric, not the grocery score. A Canada region on a foreign cloud is not a Canadian operator. Notes about PIPEDA or the US CLOUD Act are not legal advice.
| Name | Ownership / parent | HQ | Data residency | Infrastructure | Pricing | Best for | Verdict |
|---|---|---|---|---|---|---|---|
| 1Password | Privacy notice: AgileBits Inc., doing business as 1Password, is a Canadian company. Outside investors were not described on that notice, so ownership beyond the Canadian company is unverified. | Toronto. Privacy office: 4711 Yonge St, 10th Floor, Toronto, Ontario, M2N 6K8. | Canada if you create the account on 1password.ca. United States on 1password.com. European Union on 1password.eu. A shared item is stored in the EU while it is shared. | Hosted in the region you choose. The privacy notice does not say 1Password owns the data centre, and it describes other companies and affiliates as part of how the service runs. The specific cloud vendor is not named on the pages we used. | Paid membership. Billing currency follows the region: CAD on .ca, USD on .com, EUR on .eu, according to the regions article. | A Canadian company’s vault, if you create it on 1password.ca and you can live with the sharing exception. | Canadian company, region is a choiceConfidence: High |
| Bitwarden | Bitwarden, Inc., incorporated in Delaware. The impressum says 8bit Solutions LLC is wholly owned by Bitwarden, Inc. Not a Canadian company. | 1 N. Calle Cesar Chavez, Suite 102, Santa Barbara, CA 93103, USA. | The data-storage article says the Microsoft Azure cloud in the US or the EU. The privacy policy says information is primarily stored in the European Economic Area and the United States. Canada is not a listed vault region. | Microsoft Azure. Bitwarden says it does not run its own server infrastructure. Self-hosting on hardware you control is a separate option they document. | Bitwarden publishes free and paid plans. Confirm the current price on their site. We did not copy a dollar figure. | An open-source manager on Azure, or a self-hosted copy, if a US company is acceptable. | Not a Canadian optionConfidence: High |
| Proton Pass | Part of Proton. Controlling shareholder is the Proton Foundation in Geneva. Not Canadian. | Geneva, Switzerland. | Proton describes Swiss jurisdiction. Pass is not described as stored in Canada. | Proton’s own service in Switzerland. | Proton offers a free account and paid plans across its apps. Confirm Pass pricing on Proton’s site. | A password manager from the same Swiss company as Proton Mail, if that is what you already use. | Not a Canadian optionConfidence: High |
| KeePassXC | No company hosts the vault. KeePassXC is free software under the GPLv3, published by the KeePassXC project. | Not a hosted service. There is no vendor headquarters to score. | The encrypted database is a file on your device, or wherever you put that file. Nothing is stored on KeePassXC servers. The project says no data is stored on remote servers. | Your own disk. If you place the file in Google Drive or Sync.com, that host’s residency applies to the file, not to KeePassXC. | Free. No subscription. | People who do not want any company to hold the vault. | No company hosts the dataConfidence: High |
Where there is no true Canadian option
There is a Canadian company. There is not a verified Canadian-owned password manager that also says it runs its own data centre. 1Password’s privacy notice does not name the company that owns the servers. It does say secure data stays in the region you picked, except that an item you share is stored in the EU for as long as it is shared.
Bitwarden is a Delaware company in Santa Barbara and says vault data sits in Microsoft Azure in the US or the EU. Proton Pass is part of Swiss Proton. KeePassXC stores an encrypted file on your own device and has no cloud operator. None of those three is a Canadian host.
Choosing 1password.ca is a one-time region choice. 1Password says data is not moved for you. Changing region means a new account and a manual copy. Investor ownership beyond “Canadian company” was not stated on the privacy notice, so it is unverified here.
Questions
Does a 1Password account on 1password.com store data in Canada?
No. 1Password’s regions article says 1password.com hosts secure data in the United States and bills in US dollars. Canada is the 1password.ca region. Data is not moved between regions for you.
Are shared 1Password items still in Canada?
The privacy notice says that if you use item sharing, that shared data is stored in the EU while it is shared. The rest of the vault follows the region you chose.
Is Bitwarden Canadian because some blogs say it has Canadian operations?
Not on Bitwarden’s own pages. The company is incorporated in Delaware, the address is Santa Barbara, and the vault regions it documents are US and EU on Azure.
Is this legal advice about the CLOUD Act or PIPEDA?
No. The table records what each company publishes about ownership and where data sits. It does not say which statute would win in a dispute.
Sources
Primary pages opened for this check. Company marketing claims are cited as the company’s own words.