Passbolt

Open source password manager for teams

Security & IT Password Management www.passbolt.com

Visit Website

Founded

2016

Starting Price

Free

About Passbolt

Passbolt is an open-source password and secrets management platform built for teams ranging from 5 to 5,000 members. It uses end-to-end encryption with a public-private key architecture, offering self-hosted or cloud-hosted deployment options. Based in Luxembourg, Passbolt is trusted by governments, defense agencies, and enterprises worldwide.

Pros & Cons

Pros

Fully open-source Community Edition with no user limits
End-to-end encryption with zero-knowledge architecture
Self-hosted option for complete data sovereignty
API-first design with CLI and SDK for DevOps workflows
European-based (Luxembourg) with GDPR compliance
Active open-source community with transparent security audits

Cons

Self-hosted deployment requires technical expertise
No native consumer/personal plan — designed for teams
Business plan requires minimum 10 users
Fewer browser integrations compared to 1Password or Bitwarden
Enterprise pricing requires contacting sales

Key Features

End-to-End Encryption

Uses public-private key architecture to ensure only authorized users can access credentials, with zero-knowledge security model.

Granular Sharing & Permissions

Share passwords and secrets with fine-grained, role-based access control for individuals and groups.

Self-Hosted or Cloud Deployment

Choose between self-hosting on your own infrastructure or using Passbolt's European cloud-hosted option for full data sovereignty.

LDAP & SSO Integration

Provision users via Active Directory or OpenLDAP, and enable Single Sign-On with Microsoft, Google, and OpenID providers.

Real-Time Audit Logs

Monitor all credential activity with detailed audit trails and real-time activity logs for compliance and security oversight.

API, CLI & SDK

API-centric design with command-line interface and SDK support for automation, scripting, and integration into DevOps workflows.

Multi-Factor Authentication

MFA enabled by default with support for TOTP and secret key authentication to add an extra layer of security.

Browser Extensions & Mobile Apps

Native extensions for major browsers plus mobile and desktop applications for seamless cross-platform access.

Account Recovery

Escrow-based account recovery system that lets organizations recover access without compromising encryption.

Password Expiry

Set automatic password expiration policies to enforce regular credential rotation across the organization.

Pricing

Community

Free

Unlimited users
Open source (AGPL v3)
Password management & sharing
Private and shared folders
Users and groups management
Browser extensions & CLI
Role-based access control
Password expiry
Community support

Business

$4.90/user/month

Everything in Community
Minimum 10 users
Tags management
LDAP provisioning
SSO with Microsoft, Google & OpenID
Account recovery
Activity log & audit changes
Next business day support

Enterprise

Everything in Business
Unlimited users & instances
High availability consulting
Disaster recovery consulting
Custom feature development
4-hour SLA support

Best For

IT Team Credential Management

Centralize and share infrastructure passwords, API keys, and service credentials across IT departments with granular access controls and audit logging.