The files are AES-encrypted and are stored locally, then synced with Dashlane servers upon login for synchronization purposes.
user's password data and files
Any stored data is always encrypted into an indecipherable string of random letters, numbers, and symbols, which is stored locally and also on Dashlane servers for synchronization purposes. However, for your protection, as well as our own, we never store your Master Password or any of its derivatives on our servers at any time.
Source: Dashlane’s Patented Security Architecture
In the folders contained AES-encrypted files that contained passwords
and login info, sharing rights details, purchase histories, and more. These
files are synced with Dashlane servers upon login (provided there is internet access). In particular, we found that the file localSettings.aes contains the device authentication. Note that this device authentication is NOT tied to the computer itself; for example, if this folder was copied onto another computer, that computer could log into the account without prior verification.
Source: Security Analysis of Dashlane (May 2016)
Location on macOS:
$ sudo lsof -p $(pgrep -d, Dashlane) | grep -w $USER/Library
/Users/USER/Library/Application Support/CloudDocs/session/containers/com.apple.Preview.plist
/Users/USER/Library/Saved Application State/com.dashlane.Dashlane.savedState/window_1.data
/Users/USER/Library/Saved Application State/com.dashlane.Dashlane.savedState/data.data
/Users/USER/Library/Saved Application State/com.dashlane.Dashlane.savedState/windows.plist
/Users/USER/Library/Caches/com.dashlane.Dashlane/Cache.db
/Users/USER/Library/Saved Application State/com.dashlane.Dashlane.savedState/window_9.data
/Users/USER/Library/Caches/com.dashlane.DashlaneAgent/Cache.db-shm
/Users/USER/Library/Caches/com.dashlane.DashlaneAgent/Cache.db
/Users/USER/Library/Caches/com.dashlane.DashlaneAgent/Cache.db-wal
/Users/USER/Library/Caches/com.dashlane.DashlaneAgent/Cache.db-shm
/Users/USER/Library/Caches/com.dashlane.DashlanePluginService/Cache.db-shm
/Users/USER/Library/Caches/com.dashlane.DashlanePluginService/Cache.db
/Users/USER/Library/Caches/com.dashlane.DashlanePluginService/Cache.db-wal
/Users/USER/Library/Caches/com.dashlane.DashlanePluginService/Cache.db-shm
master password
Your master password is your private key to unlocking Dashlane. No one knows it but you, not even Dashlane, and it’s not stored anywhere on your computer or our servers.
Source: Dashlane Security
All essential user data is encrypted using AES-256 with a
key that derives from the user’s master password, and neither the master
password nor the key is stored locally or on Dashlane’s servers. As a result, the security of AES ensures that it is infeasible to obtain a user’s sensitive information without knowledge of their master password.
Source: Security Analysis of Dashlane (May 2016)