Passbolt

Passbolt is an open source password manager built for teams and organizations. It stores passwords in a shared vault on your own server, lets teams securely share credentials, and is designed as a collaborative alternative to tools like 1Password Teams — with per-user access control, roles, and easy user management.

Yes. Passbolt is designed to be self-hosted on your own server (packaged as Docker, and for Linux/VPS, with community and pro editions). Since the vault lives on your infrastructure, you keep full control and ownership of your team's credentials rather than storing them in a third-party cloud.

Passbolt uses end-to-end encryption with public/private key pairs so passwords are decrypted only on each user's device. This lets teams share passwords, folders, and resources with fine-grained controls, assign user roles (admin/user), set access policies and password policies, and manage everything from an admin console. It also keeps an audit/activity log of who accessed what.

Passbolt is an API-first, browser-extension-based password manager. Users interact with it primarily through the Passbolt browser extension integrated with your own instance, with support for desktop and mobile clients. Administrators can invite users by email and enable two-factor authentication (TOTP, etc.) for stronger login security.

Passbolt has a fully open source community edition (AGPL-3.0) that covers core team password management, plus paid Pro and Enterprise editions that add features like AD/LDAP or SSO integration, MFA policies, and priority support. For many small-to-mid teams the community edition is enough to get started.