Passbolt is an open source password manager designed for teams. Built around OpenPGP end-to-end encryption, it lets IT, DevOps and engineering teams securely store, share and manage credentials and secrets on their own infrastructure. Whether you self-host it behind your firewall straight from a Raspberry Pi or a high-availability cluster, you stay in full control of your data.
Key Features
End-to-end encryption — secrets are encrypted on the client side with OpenPGP and can only be decrypted by authorised users, not the server
Granular sharing — share passwords, folders and groups with fine-grained permissions based on roles and the principle of least privilege
Users and groups — organise team access with users, groups and role-based access control (RBAC)
TOTP management — store 2FA codes securely alongside logins
Browser integration — quick-access autofill and auto-suggest via browser extensions for Chrome, Firefox and Edge
Self-hosted — deploy on your own server, docker container, VM or in an air-gapped environment with no internet dependency
Import and export — bring credentials in and out using kdbx and CSV formats
Auditing and reporting — activity logs and password health checks to track who has access to what
Why Use Passbolt?
If your team has outgrown shared KeePass files but you don’t want to hand your secrets to a commercial cloud vault, Passbolt gives you a self-hosted, fully auditable credential platform. The entire codebase is open source — even the paid editions are AGPL v3 — so you can always audit it yourself.
Use Cases
Centralising shared IT, DevOps and database credentials for a team
Enforcing least-privilege access with role-based controls and granular folder sharing
Deploying a sovereign credential platform on-premises or in an air-gapped network
Managing on-call and emergency access to production systems
Platform
Linux · macOS · Windows · Android · iOS · Web (self-hosted server) · Browser extensions (Chrome, Firefox, Edge)
Licence
GNU AGPL v3 (open source, even the commercial editions)
OPNsense is an open-source, FreeBSD-based firewall and routing platform developed by Deciso, designed as a comprehensive network security solution for home, small business, and enterprise environments. It combines the feature set of expensive commercial firewalls with the transparency of open-source software, offering a stateful firewall, intrusion detection and prevention, VPN connectivity, web filtering, traffic shaping, […]