Passbolt logo

Passbolt

Documentation and Password Management

Open Source
Free Tier
Paid Plans
E
Enterprise
Self-hosted
OpenMSP Score
57
44
Reddit Impact Score
Github Score
292M
5KStars
378Forks
28KCommits
GNU Affero General Public License v3.0License
Mar 12, 2026Last commit
Passbolt is an open source password manager specifically designed for teams and organizations, offering industry-leading security through end-to-end encryption and granular access controls. Built with a focus on collaboration, Passbolt enables secure password sharing with fine-grained permissions, real-time notifications, and comprehensive audit trails. The platform uses JSON API architecture and interoperable OpenPGP cryptography, ensuring each password is individually encrypted with unique user-generated private keys rather than relying solely on master passwords. This approach provides superior security against brute force attacks and ensures that compromise of one password does not affect others. Passbolt offers three deployment options: Community Edition (free self-hosted), Business Edition (self-hosted with premium features), and Cloud Edition (hosted in EU). Key features include native mobile and desktop applications, browser extensions for Chromium-based browsers and Firefox, TOTP generation, automated credential workflows, LDAP integration, and extensive API support for automation. Recent developments include $8M in seed funding (January 2025), enhanced mobile applications with biometric authentication and NFC Yubikey support, and planned enterprise features targeting Privileged Access Management (PAM) markets. The platform is particularly popular among privacy-conscious organizations and technical teams requiring complete control over their credential management infrastructure.
image media
1 / 2

Key Features

End-to-End Encryption

Uses OpenPGP encryption with unique public-private key architecture. Each password is encrypted individually with user's auto-generated private key, ensuring granular data privacy and security.

Team Collaboration

Designed for teams with granular sharing capabilities, inherited permissions, folder-based organization, and real-time notifications for secure password collaboration at scale.

Self-Hosted & Open Source

100% open source including paid versions, with self-hosting options for full data ownership and control. No vendor lock-in with complete transparency.

Advanced Security Features

Multi-factor authentication, account recovery, phishing protection with 3-letter tokens and color combinations, and comprehensive audit logging for compliance.

Pros and Cons

Pros

Strong Security Architecture

OpenPGP encryption with individual password encryption prevents cascade failures if one password is compromised. Public-private key architecture is superior to master password approaches.

True Open Source

Fully open source including paid versions, allowing code inspection and customization. No hidden proprietary components or vendor lock-in.

Team-Focused Design

Built specifically for team collaboration with granular permissions, folder sharing, and real-time notifications. Scales well for organizations.

Cons

Complex Setup

Self-hosting requires technical expertise for installation, configuration, and ongoing maintenance. Not suitable for non-technical users without IT support.

Limited Mobile Support

Mobile apps are premium-only features and browser-based cryptography limitations affect mobile experience. No Safari extension support.

Learning Curve

Team-focused interface can be overwhelming for individual users. Concepts like public-private keys and OpenPGP require understanding for optimal use.

Feature Comparison

Comments

No Comments Yet

Be the first to share your experience with Passbolt.