European Password Manager Passwork Shares Codebase and Updates With FSTEC-Certified Russian Firm

Passwork Europe, a Spain-registered password manager used by public-sector and private organizations, is under scrutiny after OCCRP found technical and historical links to a Russian Passwork entity certified by Russian state agencies; researchers observed shared code origins, nearly identical release timelines, and overlapping deployment scripts. While the investigation found no evidence of malicious code or data compromise, experts warn that shared code and an opaque update pipeline — combined with Russian FSTEC/FSB certifications and potential source-code review — create a meaningful supply-chain and trust risk for customers managing highly sensitive credentials.