Passbolt

Passbolt lets an organization centralize, organize and share passwords and secrets without the spreadsheet or the shared login everyone half trusts. Its security model puts secret keys in the hands of users and encrypts end to end, so the server never holds anything readable.

The project is audited several times a year and publishes the findings, which is worth stating plainly because few password managers do. Passbolt is headquartered in Luxembourg inside the European Union, collects no personal data or telemetry, and can be deployed in an air-gapped environment.

Access happens from wherever the team already works.

• Browser extensions: Chrome, Firefox and Edge, covering Brave, Opera, Vivaldi and other Chromium browsers.
• Mobile apps: native clients published on the App Store and Google Play.
• Command line: a Go based CLI tool handles scripted access.
• Desktop: a Windows application exists in pre-alpha and is not finished.
• Sharing policies: credentials are shared and audited under policies built for power users.

Self-hosting is documented for Docker, Kubernetes and native installs on Ubuntu, Debian, RedHat, Fedora, openSUSE, Rocky Linux, AlmaLinux, Oracle Linux, CentOS and Raspberry Pi, plus AWS and DigitalOcean. The code is AGPL version 3, though the Passbolt name is a registered trademark held back from that license. A community edition, a paid pro edition and a hosted cloud sit side by side.