Passbolt
Luxembourg password manager designed around team sharing, self-hostable from day one.
- Based in
Luxembourg
- Source & hosting
- Open source · Self-hostable
Business overview
Passbolt is an open-source password and credential manager built around teams. Sharing rests on OpenPGP rather than a shared vault key: every user holds a private key generated on their own device, each secret is encrypted separately for each person allowed to read it, and the server stores ciphertext it cannot decrypt. Browser extensions, native desktop and mobile apps and a CLI work against the same JSON API, with permissions set per password or per folder and access revocable down to the cryptographic level.
The paid editions stay open source under AGPLv3. Community Edition is free with unlimited users and instances; Pro costs $4.90 per user per month billed annually (ten users minimum, volume discounts after 100) and adds LDAP provisioning, SSO with Microsoft, Google, OpenID or AD FS, SCIM, account recovery through escrow, activity logging and next-business-day support; Enterprise adds high-availability and disaster-recovery consulting and a four-hour SLA. The site reports 50,000+ organisations using it, naming Bosch, GLS, the French interior ministry, Humboldt-Universitat zu Berlin, TU Graz and CTIE in Luxembourg.
Passbolt SA is based at 9 Avenue du Blues, L-4368 Belvaux, Luxembourg. The project started inside a digital agency in 2011, the first stable open-source release arrived in 2016, commercial subscriptions began in 2018 and a hosted cloud option in 2019; the cloud runs in Europe. Deployment is self-hosted by design — Docker Compose, a Helm chart or distro packages for Debian, Ubuntu, Red Hat and openSUSE — and can run air-gapped. Client, server and extensions are audited by third parties several times a year with reports published; the company holds SOC 2 Type II and is a member of the FIDO Alliance.
Value proposition
Each secret is encrypted for the individual users allowed to read it and the private keys never leave their devices, so revoking someone actually removes their access - the server holds nothing it could decrypt for the person you removed.
Nobody has claimed this listing yet — it is maintained by the directory. Claim it if you work on it.
Use Passbolt instead of
Each of these has its own page, with every option filed against it.
Reviews
From people who have actually run it. Passbolt can respond publicly; it cannot edit or remove a review.
Your review is live. Submitting again will replace it.
That did not go through — a star rating, a comment and an email address are all required.
No reviews of Passbolt yet. If you have used it, yours would be the first.
Review Passbolt
One rating and a sentence is enough. Your email is never shown on the page.
Write a review
Appears in
Also from
Luxembourg
All 2 from Luxembourg →New in the registry, monthly
What was added to the registry, and which categories finally have a credible option.
You're on the list. Nothing else needed.
That address did not look right — try again.
Work on Passbolt?
Claim the listing to post updates, add screenshots and link press coverage.
Claim this listingSponsored
Paid placements, labelled. They do not affect how anything is ranked or written.
Similar to Passbolt
Same category, or replacing the same product.
Psono
Security & PrivacyGermany
German self-hosted password manager with granular sharing for ops teams.
instead of LastPass, Bitwarden
Cryptomator
Security & PrivacyGermany
Client-side vaults for the files you still keep in somebody else’s cloud.
instead of Boxcryptor
Proton VPN
Security & PrivacySwitzerland
Swiss VPN with open-source clients on every platform and audited no-logs claims.
instead of ExpressVPN
Ghostery
Security & PrivacyGermany
German tracker blocker with a private search front-end attached.
instead of AdBlock Plus
Mullvad VPN
Security & PrivacySweden
Gothenburg VPN that issues you an account number instead of an identity, and still takes cash.
instead of ExpressVPN, NordVPN
Bitdefender
Security & PrivacyRomania
Bucharest vendor whose detection engine is licensed across half the industry.
instead of Norton, CrowdStrike
Something wrong on this page? Send a correction.