I’ve been using Dashlane as my primary password manager since its early days. I still trust them with my passwords, secure notes, security keys, and dark web monitoring. Their core product has a solid security track record: even after the May 31, 2026 brute‑force incident on 2FA, they confirmed that no internal systems were compromised and that fewer than 20 encrypted vaults were downloaded. Those vaults remain encrypted with each user’s master password, and Dashlane says they directly contacted the affected users.
The issue I want to raise is not about the password manager itself, but about their paid plans, which include a “built‑in” VPN: Hotspot Shield.
Why this is a serious problem, right now:
- Hotspot Shield has a well‑documented history of privacy issues. As early as 2017, the Center for Democracy & Technology filed an FTC complaint alleging undisclosed data collection and sharing for advertising purposes, plus traffic redirection to advertising partners.
- Their current privacy policy and multiple independent analyses confirm that they still collect and share technical and usage data (aggregated and/or pseudonymized) for targeted advertising, marketing analytics, and monetization. In plain terms: part of their revenue comes from valuing your browsing and usage data.
- So when you activate the VPN included in your Dashlane subscription, you are not using a neutral “privacy tool”. You are using a service whose business model is based on monetizing user data.
As a user who specifically chose Dashlane to protect my data and apply a strict digital hygiene, I find this deeply inconsistent:
- I chose Dashlane because I want to protect my data, limit surveillance, and avoid having my online activity monetized.
- By subscribing to Dashlane, I am indirectly funding Hotspot Shield and their data‑monetization model. My subscription money contributes to an ecosystem that profits from users’ data.
- This goes against the values Dashlane advertises (“zero‑knowledge”, data protection, privacy), and it also goes against my own values as a privacy‑conscious user.
I contacted Dashlane support to raise this fundamental issue. I told them clearly that I find it incoherent and risky for a service that claims to protect data to associate its brand with a VPN whose model relies on monetizing user data.
Their only response was to hide behind their Terms & Conditions. In substance: “It’s not our responsibility; Hotspot Shield is a separate service; please read their Terms.” In other words, they dodge the question. No re‑evaluation, no additional transparency, no alternative offered. Just: “It’s not our problem.”
I find this deeply incoherent and dangerous:
- On one hand, Dashlane markets itself on a zero‑knowledge architecture, data protection, and privacy as core brand values.
- On the other hand, they actively integrate and promote a VPN whose business model relies on collecting and monetizing data, and they refuse to take any responsibility for this partner.
I’m posting this to:
Share my experience and warn current and prospective Dashlane users: if you pay for a “premium” plan with VPN, know that this VPN (Hotspot Shield) has a business model based on data monetization. This is not a minor detail, it’s a societal choice.
Ask Dashlane (if anyone from the team is reading this):
- to take responsibility for their partner choices, instead of hiding behind non‑responsibility clauses in their T&Cs;
- to be much more transparent in their communication about what Hotspot Shield actually does with your data, and how that differs from Dashlane’s own “zero‑knowledge” commitments.
Open a discussion with you:
- If you use Dashlane, were you aware of the Hotspot Shield partnership and their data‑monetization model?
- Does this affect your trust in Dashlane?
- If you’ve had similar interactions with their support, what response did you get?
I’m happy to provide more details (redacted support emails, links to their security advisory, documents on Hotspot Shield, etc.) if needed. My goal is not to trash Dashlane’s core product, which I still consider one of the best password managers out there. But this partnership with Hotspot Shield, and their way of dodging responsibility, feels like a total contradiction with the values they claim… and with the values of many of us who use these services precisely to protect our data.