You searched a paid product

Open-source alternatives to 1Password

1Password does 6 jobs: password vault with autofill, vault sync across devices, family and team password sharing, two-factor (TOTP) codes, passkey storage, breach and weak-password alerts (Watchtower). Most projects replace one or two of them, so pick the job you actually need.

Quick answer

Facts checked 15 Oct 2026

Open-source alternatives to 1Password that run locally, allow commercial use and need no paid API include gopass (password vault with autofill, vault sync across devices and family and team password sharing; MIT). None of the 17 projects we track covers all 6 1Password jobs, so most people combine two or more.

17 projects

2FAS Authenticator

twofas/2fas-android

★ 1.5k active 9d ago

Open-source 2FA (TOTP/HOTP) code app for Android and iOS, with a companion browser extension for sending codes to your browser.

Replaces Two-factor (TOTP) codes (partly) Not: password vault with autofill, vault sync across devices, family and team password sharing, passkey storage, breach and weak-password alerts (Watchtower)

Runs locally: Confirmed: Yes
Commercial use: Partial: Conditions · GPL-3.0-only
Paid services: Confirmed: None required
Hardware: Confirmed: CPU works
Setup: Confirmed: Easy

Compare 8 of 8 facts sourced · checked 1d ago GitHub ↗ View details

Aegis Authenticator

beemdevelopment/Aegis

★ 13k active 5w ago

Free, open-source Android app for 2FA (TOTP/HOTP) codes with an encrypted local vault and automatic encrypted backups.

Replaces Two-factor (TOTP) codes (partly) Not: password vault with autofill, vault sync across devices, family and team password sharing, passkey storage, breach and weak-password alerts (Watchtower)

Runs locally: Confirmed: Yes
Commercial use: Partial: Conditions · GPL-3.0-only
Paid services: Confirmed: None required
Hardware: Confirmed: CPU works
Setup: Confirmed: Easy

Compare 8 of 8 facts sourced · checked 1d ago GitHub ↗ View details

AliasVault

aliasvault/aliasvault

★ 3.3k active 1d ago

End-to-end encrypted password manager with built-in email aliases, TOTP and passkeys; self-host with Docker or use the hosted cloud.

Replaces Password vault with autofill + Vault sync across devices + Two-factor (TOTP) codes + Passkey storage (partly) Not: family and team password sharing, breach and weak-password alerts (Watchtower)

Runs locally: Confirmed: Yes
Commercial use: Partial: Conditions · AGPL-3.0-only
Paid services: Confirmed: None required
Hardware: Confirmed: CPU works
Setup: Confirmed: Medium

Compare 8 of 8 facts sourced · checked 1d ago GitHub ↗ View details

Bitwarden

bitwarden/server

★ 20k active today

Open-source password manager with browser, desktop, mobile and CLI clients; use the hosted service or self-host the official server with Docker.

Replaces Password vault with autofill + Vault sync across devices + Family and team password sharing (partly) Not: two-factor (TOTP) codes, passkey storage, breach and weak-password alerts (Watchtower)

Runs locally: Confirmed: Yes
Commercial use: Partial: Conditions · AGPL-3.0-only
Paid services: Partial: Optional only
Hardware: Confirmed: CPU works
Setup: Confirmed: Medium

Compare 8 of 8 facts sourced · checked 1d ago GitHub ↗ View details

Ente Auth

ente/ente

★ 29k active today

Free, end-to-end encrypted 2FA (TOTP) code app for mobile and desktop with optional encrypted cloud sync; usable offline without an account.

Replaces Two-factor (TOTP) codes Not: password vault with autofill, family and team password sharing, passkey storage, breach and weak-password alerts (Watchtower)

Runs locally: Confirmed: Yes
Commercial use: Partial: Conditions · AGPL-3.0-only
Paid services: Confirmed: None required
Hardware: Unknown: Unknown
Setup: Confirmed: Easy

Compare 7 of 8 facts sourced · checked 1d ago GitHub ↗ View details

gopass

gopasspw/gopass

★ 7.3k active 1d ago

Command-line password manager for teams, a drop-in replacement for pass with GPG or age encryption and git-versioned shared stores.

Runs locally: Confirmed: Yes
Commercial use: Confirmed: Yes · MIT
Paid services: Confirmed: None required
Hardware: Unknown: Unknown
Setup: Confirmed: Easy

Compare 7 of 8 facts sourced · checked 1d ago GitHub ↗ View details

Keepass2Android

PhilippC/keepass2android

★ 6.3k active 1d ago

Android password manager for KeePass (KDBX) databases with built-in cloud storage sync, autofill and an offline-only variant.

Replaces Password vault with autofill + Vault sync across devices (partly) Not: family and team password sharing, two-factor (TOTP) codes, passkey storage, breach and weak-password alerts (Watchtower)

Runs locally: Confirmed: Yes
Commercial use: Partial: Conditions · GPL-3.0-only
Paid services: Confirmed: None required
Hardware: Unknown: Unknown
Setup: Confirmed: Easy

Compare 7 of 8 facts sourced · checked 1d ago GitHub ↗ View details

KeePassDX

Kunzisoft/KeePassDX

★ 7.5k active 6d ago

Local password and passkey manager for Android that opens KeePass (KDBX) files, with autofill, TOTP codes and biometric unlock.

Replaces Password vault with autofill + Two-factor (TOTP) codes + Passkey storage (partly) Not: vault sync across devices, family and team password sharing, breach and weak-password alerts (Watchtower)

Runs locally: Confirmed: Yes
Commercial use: Partial: Conditions · GPL-3.0-only
Paid services: Confirmed: None required
Hardware: Confirmed: CPU works
Setup: Confirmed: Easy

Compare 8 of 8 facts sourced · checked 1d ago GitHub ↗ View details

KeePassium

keepassium/KeePassium

★ 1.7k active 4mo ago

KeePass-compatible password manager for iPhone, iPad and Mac with Password AutoFill and database sync through the iOS Files providers.

Replaces Password vault with autofill + Vault sync across devices + Two-factor (TOTP) codes (partly) Not: family and team password sharing, passkey storage, breach and weak-password alerts (Watchtower)

Runs locally: Confirmed: Yes
Commercial use: Partial: Conditions · GPL-3.0-only
Paid services: Partial: Optional only
Hardware: Unknown: Unknown
Setup: Confirmed: Easy

Compare 7 of 8 facts sourced · checked 1d ago GitHub ↗ View details

KeePassXC

keepassxreboot/keepassxc

★ 29k active today

Offline desktop password manager for Windows, macOS and Linux that stores your vault in an encrypted KeePass (KDBX) file you control.

Replaces Password vault with autofill + Two-factor (TOTP) codes + Passkey storage + Breach and weak-password alerts (Watchtower) (partly) Not: vault sync across devices, family and team password sharing

Runs locally: Confirmed: Yes
Commercial use: Partial: Conditions · GPL-2.0-only OR GPL-3.0-only
Paid services: Confirmed: None required
Hardware: Unknown: Unknown
Setup: Confirmed: Easy

Compare 7 of 8 facts sourced · checked 1d ago GitHub ↗ View details

LessPass

lesspass/lesspass

★ 6.1k active 2d ago

Stateless password generator that derives each site password from a master password, so there is no vault to store or sync.

Replaces Password vault with autofill (partly) Not: vault sync across devices, family and team password sharing, two-factor (TOTP) codes, passkey storage, breach and weak-password alerts (Watchtower)

Runs locally: Confirmed: Yes
Commercial use: Partial: Conditions · GPL-3.0-only
Paid services: Confirmed: None required
Hardware: Unknown: Unknown
Setup: Confirmed: Easy

Compare 7 of 8 facts sourced · checked 1d ago GitHub ↗ View details

pass (password-store)

zx2c4/password-store

★ 758 active 16mo ago

The standard Unix command-line password manager; each password is a GPG-encrypted file in a folder you can version and sync with git.

Runs locally: Confirmed: Yes
Commercial use: Partial: Conditions · GPL-2.0-or-later
Paid services: Confirmed: None required
Hardware: Unknown: Unknown
Setup: Confirmed: Easy

Compare 7 of 8 facts sourced · checked 1d ago GitHub ↗ View details

Passbolt

passbolt/passbolt_api

★ 6.2k active 8d ago

Self-hosted password manager built for teams, with end-to-end encrypted sharing, browser extensions, mobile apps and a CLI.

Runs locally: Confirmed: Yes
Commercial use: Partial: Conditions · AGPL-3.0-only
Paid services: Partial: Optional only
Hardware: Confirmed: CPU works
Setup: Confirmed: Medium

Compare 8 of 8 facts sourced · checked 1d ago GitHub ↗ View details

Proton Pass

protonpass/android-pass

★ 797 active 1d ago

End-to-end encrypted password manager from Proton with open-source GPL-3.0 clients; the sync service is Proton's cloud and cannot be self-hosted.

Runs locally: No: No
Commercial use: Partial: Conditions · GPL-3.0-or-later
Paid services: No: Required
Hardware: Unknown: Unknown
Setup: Confirmed: Easy

Compare 7 of 8 facts sourced · checked 1d ago GitHub ↗ View details

Psono

psono/psono-server

★ 109 active 3d ago

Self-hosted password manager for companies with client-side encryption, team sharing, browser extensions and mobile apps.

Runs locally: Confirmed: Yes
Commercial use: Confirmed: Yes · Apache-2.0
Paid services: Partial: Optional only
Hardware: Confirmed: CPU works
Setup: Confirmed: Medium

Compare 8 of 8 facts sourced · checked 1d ago GitHub ↗ View details

Teampass

nilsteampassnet/TeamPass

★ 1.8k active today

Self-hosted PHP/MySQL password vault for teams with folder-level access control, per-user encryption keys, audit trail and a browser extension.

Replaces Password vault with autofill + Family and team password sharing (partly) Not: vault sync across devices, two-factor (TOTP) codes, passkey storage, breach and weak-password alerts (Watchtower)

Runs locally: Confirmed: Yes
Commercial use: Partial: Conditions · GPL-3.0-only
Paid services: Confirmed: None required
Hardware: Confirmed: CPU works
Setup: Confirmed: Medium

Compare 8 of 8 facts sourced · checked 1d ago GitHub ↗ View details

Vaultwarden

dani-garcia/vaultwarden

★ 69k active 5d ago

Lightweight Rust server compatible with the official Bitwarden apps and browser extensions, built for self-hosting on small machines.

Runs locally: Confirmed: Yes
Commercial use: Partial: Conditions · AGPL-3.0-only
Paid services: Confirmed: None required
Hardware: Confirmed: CPU works
Setup: Confirmed: Medium

Compare 8 of 8 facts sourced · checked 1d ago GitHub ↗ View details

Common questions about 1Password alternatives

Is there a free, open-source alternative to 1Password?

Yes. AliasVault, KeePassXC, Vaultwarden, Bitwarden and KeePassDX are free to download and run on your own computer without paid API keys. Each covers only part of what 1Password does, so check which job you need.

Can I do password vault with autofill locally without a 1Password subscription?

Yes, with Vaultwarden (AGPL-3.0-only), Bitwarden (AGPL-3.0-only) and KeePassDX (GPL-3.0-only). Check the hardware notes and licence conditions on each page before you start.

Can I do vault sync across devices locally without a 1Password subscription?

Yes, with Vaultwarden (AGPL-3.0-only), Bitwarden (AGPL-3.0-only) and Passbolt (AGPL-3.0-only). Check the hardware notes and licence conditions on each page before you start.

Which 1Password alternatives can I use commercially?

Confirmed: gopass and Psono. With conditions: 2FAS Authenticator, Aegis Authenticator, AliasVault, Bitwarden, Ente Auth, Keepass2Android, KeePassDX, KeePassium, KeePassXC, LessPass, pass (password-store), Passbolt, Proton Pass, Teampass and Vaultwarden. This is not legal advice; read each licence.

Does any open-source project replace all of 1Password?

Not as of 2026-10-15. Password vault with autofill, vault sync across devices, family and team password sharing, two-factor (TOTP) codes, passkey storage and breach and weak-password alerts (Watchtower) are covered by different projects.

Open-source alternatives to 1Password

Quick answer

Your requirements

17 projects

2FAS Authenticator

Aegis Authenticator

AliasVault

Bitwarden

Ente Auth

gopass

Keepass2Android

KeePassDX

KeePassium

KeePassXC

LessPass

pass (password-store)

Passbolt

Proton Pass

Psono

Teampass

Vaultwarden

Common questions about 1Password alternatives

Cookie preferences