# Open-source alternatives for Password managers

> Open-source password managers and vaults you can audit, and often host yourself.

## Paid products
- [Open-source alternatives to 1Password](https://repoquarry.dev/alternatives/1password.md): Paid, cloud-hosted password manager (Individual, Families, Teams and Business plans) with browser autofill, sync across devices, shared vaults, built-in 2FA codes, passkeys and Watchtower breach alerts. Pricing: See pricing page.
- [Open-source alternatives to Dashlane Premium](https://repoquarry.dev/alternatives/dashlane.md): Dashlane sells password management with synchronization and security services. Alternatives cover specific vault and sharing tasks; the bundled VPN and complete monitoring services are not replaced. Pricing: See pricing page.
- [Open-source alternatives to Keeper](https://repoquarry.dev/alternatives/keeper.md): Keeper sells password management for teams and businesses. Listed alternatives cover vault and sharing work; KeeperPAM, privileged sessions and secrets infrastructure are separate jobs outside this comparison. Pricing: See pricing page.
- [Open-source alternatives to LastPass Premium and Families](https://repoquarry.dev/alternatives/lastpass.md): LastPass sells personal and family password management plans. These alternatives cover password storage or sharing, with different family administration and security services. Pricing: See pricing page.
- [Open-source alternatives to NordPass Premium](https://repoquarry.dev/alternatives/nordpass.md): NordPass offers paid password management and security tools. These alternatives focus on everyday vault access, with different synchronization and monitoring arrangements. Pricing: See pricing page.

## Top ranked projects
1. [Vaultwarden](https://repoquarry.dev/projects/vaultwarden.md): Lightweight Rust server compatible with the official Bitwarden apps and browser extensions, built for self-hosting on small machines. Commercial use: Partial.
2. [Bitwarden](https://repoquarry.dev/projects/bitwarden.md): Open-source password manager with browser, desktop, mobile and CLI clients; use the hosted service or self-host the official server with Docker. Commercial use: Partial.
3. [Ente Auth](https://repoquarry.dev/projects/ente-auth.md): Free, end-to-end encrypted 2FA (TOTP) code app for mobile and desktop with optional encrypted cloud sync; usable offline without an account. Commercial use: Partial.
4. [KeePassXC](https://repoquarry.dev/projects/keepassxc.md): Offline desktop password manager for Windows, macOS and Linux that stores your vault in an encrypted KeePass (KDBX) file you control. Commercial use: Partial.
5. [KeePassDX](https://repoquarry.dev/projects/keepassdx.md): Local password and passkey manager for Android that opens KeePass (KDBX) files, with autofill, TOTP codes and biometric unlock. Commercial use: Partial.
6. [Aegis Authenticator](https://repoquarry.dev/projects/aegis.md): Free, open-source Android app for 2FA (TOTP/HOTP) codes with an encrypted local vault and automatic encrypted backups. Commercial use: Partial.
7. [Passbolt](https://repoquarry.dev/projects/passbolt.md): Self-hosted password manager built for teams, with end-to-end encrypted sharing, browser extensions, mobile apps and a CLI. Commercial use: Partial.
8. [AliasVault](https://repoquarry.dev/projects/aliasvault.md): End-to-end encrypted password manager with built-in email aliases, TOTP and passkeys; self-host with Docker or use the hosted cloud. Commercial use: Partial.
9. [gopass](https://repoquarry.dev/projects/gopass.md): Command-line password manager for teams, a drop-in replacement for pass with GPG or age encryption and git-versioned shared stores. Commercial use: Confirmed.
10. [Keepass2Android](https://repoquarry.dev/projects/keepass2android.md): Android password manager for KeePass (KDBX) databases with built-in cloud storage sync, autofill and an offline-only variant. Commercial use: Partial.
11. [LessPass](https://repoquarry.dev/projects/lesspass.md): Stateless password generator that derives each site password from a master password, so there is no vault to store or sync. Commercial use: Partial.
12. [Teampass](https://repoquarry.dev/projects/teampass.md): Self-hosted PHP/MySQL password vault for teams with folder-level access control, per-user encryption keys, audit trail and a browser extension. Commercial use: Partial.
13. [2FAS Authenticator](https://repoquarry.dev/projects/2fas.md): Open-source 2FA (TOTP/HOTP) code app for Android and iOS, with a companion browser extension for sending codes to your browser. Commercial use: Partial.
14. [Proton Pass](https://repoquarry.dev/projects/proton-pass.md): End-to-end encrypted password manager from Proton with open-source GPL-3.0 clients; the sync service is Proton's cloud and cannot be self-hosted. Commercial use: Partial.
15. [Psono](https://repoquarry.dev/projects/psono.md): Self-hosted password manager for companies with client-side encryption, team sharing, browser extensions and mobile apps. Commercial use: Confirmed.
---
Source: RepoQuarry (https://repoquarry.dev/categories/password-managers). Data licence: CC BY 4.0. Quotes are from project documentation and belong to their authors.