RoboForm Review

Password manager known for handling complex form-filling — long-running product, AES-256, supports unlimited passwords.

RoboForm has been around for more than two decades, and its reputation still rests on form-filling. Where many rivals treat autofill as a checkbox feature, RoboForm built its product around it, and the Identity data sets handle messy address and credit-card forms with a hit rate that reviewers at Tom's Guide and G2 still rate near the top of the category.

For households that spend a lot of time at checkout pages, that legacy strength is the main reason to consider the product. Pricing is the other obvious draw. The Everywhere plan runs $29.88 a year for an individual and $47.76 for a five-user Family plan, which puts it roughly a quarter below Keeper's equivalent tiers.

Breach monitoring for up to five email addresses is bundled into every paid plan rather than sold as an add-on, and the Business tier supports SCIM provisioning with Okta, OneLogin and Microsoft Entra ID, plus an Active Directory Connector and CSV bulk import. For small and mid-sized teams that need directory integration without paying enterprise rates, the value is real.

The security story is more uneven. PCWorld's review highlights that RoboForm ships with 100,000 PBKDF2-SHA256 iterations by default, against 600,000 at Bitwarden and 650,000 at 1Password. The setting can be raised manually after setup, but defaults matter, and a 6x gap on a key-stretching parameter is not the kind of detail you want to leave to the user.

Clipboard contents are not cleared automatically in the desktop or web clients either, which undercuts the set-and-forget appeal that the rest of the product is selling. For larger organisations the gaps widen. RoboForm cannot act as a SAML identity provider itself, custom session length is not exposed, self-hosting is not offered and the admin reporting is thin.

Reviewers also note that bulk onboarding and offboarding tools lag the larger enterprise platforms, and search across very large shared vaults can be inadequate. The Windows desktop app feels dated next to newer competitors, and a July 2025 authentication update introduced extra steps that some long-term users disliked.

Our read is that RoboForm fits a specific shape of buyer well. Individuals and small teams who value autofill quality, want bundled breach monitoring, and care about price more than the latest interface trends will find it competent and inexpensive. Security-conscious users who want strong defaults out of the box, or enterprises that need full IdP and reporting capability, will probably look elsewhere.