# Open-source alternatives to 1Password

> Open-source alternatives to 1Password that run locally, allow commercial use and need no paid API include gopass (password vault with autofill, vault sync across devices and family and team password sharing; MIT). None of the 17 projects we track covers all 6 1Password jobs, so most people combine two or more.

1Password: Paid, cloud-hosted password manager (Individual, Families, Teams and Business plans) with browser autofill, sync across devices, shared vaults, built-in 2FA codes, passkeys and Watchtower breach alerts. Pricing: See pricing page (checked 2026-10-15). Facts checked 2026-10-15.

## Projects

| Project | Jobs | Runs locally | Commercial use | Paid services | Hardware |
|---|---|---|---|---|---|
| [Vaultwarden](https://repoquarry.dev/projects/vaultwarden) | password-vault-autofill, cross-device-vault-sync, shared-vaults | Self-hosted server (container); clients are the official Bitwarden apps | Yes under AGPL-3.0; modified versions offered over a network must publish source | None required | Runs on amd64 and ARM, including Raspberry Pi; RAM needs not documented |
| [Bitwarden](https://repoquarry.dev/projects/bitwarden) | password-vault-autofill, cross-device-vault-sync, shared-vaults | Self-hosted server (Docker) or Bitwarden cloud; desktop, browser, mobile and CLI clients | Core is usable commercially under AGPL/GPL; code in bitwarden\_license folders is under Bitwarden's commercial licence | Self-hosting needs a free installation id and key from bitwarden.com; paid plans unlock extra features | Server minimum x64 1.4 GHz, 2 GB RAM, 12 GB disk (4 GB RAM, 25 GB recommended) |
| [Ente Auth](https://repoquarry.dev/projects/ente-auth) | totp-codes, cross-device-vault-sync | Yes, offline app; optional sync via Ente cloud or a self-hosted Ente server | Yes under AGPL-3.0; network copyleft applies to modified servers | None; Ente Auth is free | Not documented |
| [KeePassXC](https://repoquarry.dev/projects/keepassxc) | password-vault-autofill, totp-codes, passkey-storage, breach-alerts | Yes, offline desktop app; vault is a local encrypted file | Free to use at work; GPL conditions apply if you distribute modified versions | None; no account or server | Not documented |
| [KeePassDX](https://repoquarry.dev/projects/keepassdx) | password-vault-autofill, totp-codes, passkey-storage | Yes, local Android app with an encrypted database file | Free to use; GPL conditions apply if you distribute modified versions | None; the donation-backed Pro build only adds visual styles | Android 4.4 or newer (minSdk 19) |
| [Aegis Authenticator](https://repoquarry.dev/projects/aegis) | totp-codes | Yes, local Android app; no account or server | Free to use; GPL conditions apply if you distribute modified versions | None | Android 6.0 or newer (minSdk 23) |
| [Passbolt](https://repoquarry.dev/projects/passbolt) | password-vault-autofill, cross-device-vault-sync, shared-vaults | Self-hosted server (Linux packages, Docker, Helm) or Passbolt Cloud | Yes under AGPL-3.0; the Passbolt trademark is not licensed | None required for Community Edition; Pro and Cloud editions are paid | 2 CPU cores and 2 GB RAM recommended; needs SMTP and NTP |
| [AliasVault](https://repoquarry.dev/projects/aliasvault) | password-vault-autofill, cross-device-vault-sync, totp-codes, passkey-storage | Self-hosted (Docker) or official cloud at app.aliasvault.com | Yes under AGPL-3.0; trademarks not licensed | None required when self-hosted | 1 vCPU, 1 GB RAM, 5 GB free disk (16 GB recommended) |
| [gopass](https://repoquarry.dev/projects/gopass) | password-vault-autofill, cross-device-vault-sync, shared-vaults | Yes, local command-line tool; works fully offline | Yes, MIT | None | Not documented |
| [Keepass2Android](https://repoquarry.dev/projects/keepass2android) | password-vault-autofill, cross-device-vault-sync | Yes, local Android app; database file stored locally or in your own cloud storage | Free to use; GPL conditions apply if you distribute modified versions | None; donations are voluntary | Not documented |
| [LessPass](https://repoquarry.dev/projects/lesspass) | password-vault-autofill | Yes; extension, CLI and mobile app compute passwords locally; optional self-hosted profile server | Free to use; GPL conditions apply if you distribute modified versions | None | Not documented |
| [Teampass](https://repoquarry.dev/projects/teampass) | password-vault-autofill, shared-vaults | Self-hosted web app (PHP/MySQL or Docker) | Yes, including commercially; derivative works must stay GPL-3.0 | None | Small server is enough (Raspberry Pi or small VPS); needs PHP 8.2+ and MySQL 5.7+/MariaDB 10.7+ |
| [2FAS Authenticator](https://repoquarry.dev/projects/2fas) | totp-codes | Yes, local mobile app | Free to use; GPL conditions apply to modified versions; graphics not licensed | None required; donations optional | Android 9 or newer (minSdk 28); iOS requirements not checked |
| [Proton Pass](https://repoquarry.dev/projects/proton-pass) | password-vault-autofill, cross-device-vault-sync | No, cloud service only; open-source clients run on your devices but sync to Proton's servers | Client code is GPL-3.0; the service itself is governed by Proton's terms | Requires a Proton account and Proton's servers; free and paid plans | Not documented |
| [Psono](https://repoquarry.dev/projects/psono) | password-vault-autofill, cross-device-vault-sync, shared-vaults | Self-hosted (Docker) or SaaS | Yes, Apache-2.0 server; Enterprise Edition features are separately licensed | None required; business features free up to 10 users, Enterprise Edition paid beyond that | Under 100 users, server VM with 1 CPU and 1 GB RAM plus a database VM with 1 CPU and 1.5 GB RAM |
| [KeePassium](https://repoquarry.dev/projects/keepassium) | password-vault-autofill, cross-device-vault-sync, totp-codes | Yes, local app; database file synced through your own storage provider | Free to use; GPL conditions apply to forks, and the authors ask that forks not go on the App Store | Free; optional premium subscription for convenience features | Not documented in the README (AutoFill needs iOS 12+) |
| [pass (password-store)](https://repoquarry.dev/projects/pass) | password-vault-autofill, cross-device-vault-sync | Yes, local command-line tool | Free to use at work; GPL conditions apply if you distribute modified versions | None | Not documented (shell script; needs bash, GnuPG2, git) |

## Common questions

### Is there a free, open-source alternative to 1Password?

Yes. AliasVault, KeePassXC, Vaultwarden, Bitwarden and KeePassDX are free to download and run on your own computer without paid API keys. Each covers only part of what 1Password does, so check which job you need.

### Can I do password vault with autofill locally without a 1Password subscription?

Yes, with Vaultwarden (AGPL-3.0-only), Bitwarden (AGPL-3.0-only) and KeePassDX (GPL-3.0-only). Check the hardware notes and licence conditions on each page before you start.

### Can I do vault sync across devices locally without a 1Password subscription?

Yes, with Vaultwarden (AGPL-3.0-only), Bitwarden (AGPL-3.0-only) and Passbolt (AGPL-3.0-only). Check the hardware notes and licence conditions on each page before you start.

### Which 1Password alternatives can I use commercially?

Confirmed: gopass and Psono. With conditions: 2FAS Authenticator, Aegis Authenticator, AliasVault, Bitwarden, Ente Auth, Keepass2Android, KeePassDX, KeePassium, KeePassXC, LessPass, pass (password-store), Passbolt, Proton Pass, Teampass and Vaultwarden. This is not legal advice; read each licence.

### Does any open-source project replace all of 1Password?

Not as of 2026-10-15. Password vault with autofill, vault sync across devices, family and team password sharing, two-factor (TOTP) codes, passkey storage and breach and weak-password alerts (Watchtower) are covered by different projects.

---
Source: RepoQuarry (https://repoquarry.dev/alternatives/1password). Data licence: CC BY 4.0. Quotes are from project documentation and belong to their authors.