Passbolt
Open source password manager for teams
Founded
2016
Starting Price
Free
Category
Security & IT
Last updated March 11, 2026
About Passbolt
Passbolt is an open-source password and secrets management platform built for teams ranging from 5 to 5,000 members. It uses end-to-end encryption with a public-private key architecture, offering self-hosted or cloud-hosted deployment options. Based in Luxembourg, Passbolt is trusted by governments, defense agencies, and enterprises worldwide.
Pros & Cons
Pros
- Fully open-source Community Edition with no user limits
- End-to-end encryption with zero-knowledge architecture
- Self-hosted option for complete data sovereignty
- API-first design with CLI and SDK for DevOps workflows
- European-based (Luxembourg) with GDPR compliance
Key Features
End-to-End Encryption
Uses public-private key architecture to ensure only authorized users can access credentials, with zero-knowledge security model.
Granular Sharing & Permissions
Share passwords and secrets with fine-grained, role-based access control for individuals and groups.
Self-Hosted or Cloud Deployment
Choose between self-hosting on your own infrastructure or using Passbolt's European cloud-hosted option for full data sovereignty.
LDAP & SSO Integration
Provision users via Active Directory or OpenLDAP, and enable Single Sign-On with Microsoft, Google, and OpenID providers.
Real-Time Audit Logs
Monitor all credential activity with detailed audit trails and real-time activity logs for compliance and security oversight.
API, CLI & SDK
API-centric design with command-line interface and SDK support for automation, scripting, and integration into DevOps workflows.
Multi-Factor Authentication
MFA enabled by default with support for TOTP and secret key authentication to add an extra layer of security.
Pricing
Community
Free
- Unlimited users
- Open source (AGPL v3)
- Password management & sharing
- Private and shared folders
- Users and groups management
Best For
IT Team Credential Management
Centralize and share infrastructure passwords, API keys, and service credentials across IT departments with granular access controls and audit logging.
DevOps Secrets Management
Integrate with CI/CD pipelines and automation scripts via the API and CLI to securely manage secrets without hardcoding credentials.
Regulated Industry Compliance
Meet compliance requirements in government, defense, healthcare, and finance with self-hosted deployment and audit trails.
Agency & MSP Password Sharing
Digital agencies and managed service providers can securely share client credentials across distributed teams.
