Passbolt

Passbolt is an open-source, self-hosted password manager specifically designed for teams and organizations to centralize, organize, and share secrets and credentials. The software is deployed as a server application and accessed via web interfaces, browser extensions, and mobile apps, allowing organizations to maintain full ownership of their sensitive data.

The system focuses on a security-first approach to credential management. It allows organizations to maintain complete control over their data by hosting the server on their own infrastructure, including the option for deployment in air-gapped environments where internet access is restricted. Users interact with the vault through a variety of clients, including a dedicated CLI tool for technical workflows and extensions for Chromium-based browsers such as Chrome, Brave, Opera, and Vivaldi.

Key features

• End-to-end encryption for all stored secrets
• User-owned secret keys to ensure data privacy
• Secure sharing and auditing of credentials among team members
• Support for air-gapped environment deployments
• Browser extensions for Chromium-based browsers
• Dedicated mobile applications for on-the-go access
• Command line interface for automated credential management
• Publicly available security audit findings

Built with PHP and the CakePHP framework, Passbolt is designed for organizational use where collaboration and privacy are priorities. The architecture ensures that the server does not collect personal data or telemetry, aligning with EU privacy standards as the project is headquartered in Luxembourg. It provides a structured way for power users to implement policies for sharing and managing access to sensitive information across a company, ensuring that credential access is audited and controlled.

Passbolt is a privacy-centric tool for teams that require a transparent, audited, and self-managed solution for secret storage. It is intended for organizations that need to balance the need for team collaboration with strict security requirements.