AliasVault
Privacy-first password manager with built-in email aliasing. Fully encrypted and self-hostable.
AliasVault is a privacy-first, open-source password manager with built-in email aliasing. It helps you protect your identity online by generating unique passwords and alternate email addresses for every service you use.
All data is encrypted end-to-end on your device using your master password, which never leaves your device. Even the cloud-hosted version operates on a zero-knowledge architecture, meaning only you can access your credentials and aliases.
Key Features
- Password management with secure generation and autofill via browser extension
- Email aliasing with a built-in email server for receiving messages directly inside AliasVault
- End-to-end encryption using modern cryptographic standards (Argon2id, SRP)
- Self-hosting support via Docker for full data sovereignty
- Cross-platform clients including web, browser extension, and mobile apps
AliasVault is licensed under AGPL-3.0 and is actively developed with a growing community.
Categories:
Tags:
Build with:
Frequently Asked Questions
What is AliasVault?
AliasVault is a privacy-first password and email alias manager. Beyond storing passwords, it lets you create unique identities, strong passwords, and random email aliases for every website you use — all fully end-to-end encrypted and synced across devices. It's independent, open source, self-hostable, and community-driven.
Can I self-host AliasVault?
Yes. AliasVault self-hosts with Docker via two methods: a managed install script (recommended for a fresh VPS, handles automatic HTTPS via Let's Encrypt and guided updates) or a single all-in-one container for existing Docker/NAS setups where you bring your own reverse proxy and TLS. Both run the same software, just with different levels of automation.
What makes email aliases different from a normal password manager?
AliasVault has a built-in email server, so you can generate virtual email addresses for each identity and receive + read emails straight inside the app — no third-party email service required. This protects your primary inbox from spam and tracking while keeping everything encrypted. In self-hosted setups you can use your own custom domain for aliases.
Is AliasVault end-to-end encrypted and free?
Yes. Your data is encrypted on your local device before it's backed up online, and your master password is never sent to the server — only you can see inside your vault. AliasVault is free and open source (AGPL-3.0) with source code on GitHub for audit. It's entirely self-funded and independent; optional premium cloud features may support development, but the core is free by design.
What features and platforms does it support?
AliasVault includes a built-in TOTP authenticator, a password/passkey generator, passkeys, full offline mode with local editing and automatic conflict-merged sync, importing from other password managers, and multi-language support (14+ languages). Clients include web, browser extensions (Chrome, Firefox, Edge, Safari, Brave) with autofill, and native iOS and Android apps.
Repository details
Updated 8/12/2026, 5:00:45 PM
View RepositoryRepository activity
Sponsor AliasVault
Sponsor AliasVault on Buy Me A Coffee
https://buymeacoffee.com/lanedirtSponsor AliasVault on OpenCollective
https://opencollective.com/aliasvaultCompare AliasVault with
Similar open source alternatives
KeePassXC
KeePassXC is a cross-platform, community-driven port of KeePass Password Safe. Store credentials locally in an encrypted database, with no cloud required.
1Password
Vaultwarden
Vaultwarden is an unofficial, Bitwarden-compatible server written in Rust. Self-host your password vault with low resource use and full client compatibility.
1Password
Passbolt
Open-source, security-first password manager designed for teams. End-to-end encryption, granular access control, and self-hostable.
1Password
Bitwarden
Bitwarden infrastructure/backend (API, database, Docker, etc).
1Password


