passoword
An end-to-end encrypted password manager you can host yourself.
Pre-release. Not ready for everyday use yet, and the protocol has not been audited.Latest release v0.0.16, 1 October 2026.
Passoword keeps logins, card details, notes and files in encrypted vaults that sync across your devices. Everything is encrypted on your device before it leaves it. The server only stores encrypted data and never holds the key.
Two things unlock an account: the password you remember and a setup code you receive once when you sign up. Neither is ever sent to the server, so a copy of the database on its own reveals nothing about the contents of a vault.
Features
- Devices
- Vaults stay in sync across your devices. A lost device can be switched off on its own.
- Sharing
- Share a whole vault with someone and revoke access later.
- Automation
- A command-line tool and scoped keys let scripts and CI jobs read a single vault.
- Second factor
- Optional hardware security key or passkey.
What the server holds
The hosted service stores the first list. The second never leaves your device.
Kept on the server
- Your saved passwords, stored locked. The server has no way to open them.
- The key to your vault, also locked, and it only opens with your password and setup code.
- Your email address, locked under a separate key, used for sign-up and alerts.
- The list of your devices, so a new phone can be recognised and an old one switched off.
Never leaves your device
- Your master password, never stored, never sent. If you forget it, nobody can look it up.
- Your setup code, given once when you sign up. Keep it somewhere safe and separate.
- The unlock key, built on your device each time you unlock, then thrown away.
Platforms
- Linux desktop
- .deb, .rpm and AppImage packages
- Browser extensions
- Chrome and Firefox
- Web
- Web app for the hosted and self-hosted service
- Command line
- passoword read, inject and run for scripts and CI
- iOS and Android
- In development
- Server
- Self-host with Docker Compose and PostgreSQL. No licence check, nothing phones home.
Plans
Plans for the hosted service. These are the planned prices and they may still change. Encryption works the same on every plan, and self-hosting is free.
| Plan | Price | Includes |
|---|---|---|
| Free | €0 | Unlimited passwords on every device you own. Share with one person. |
| Personal | €20 a year | Everything in Free, 1 GiB of files, share with anyone. |
| Family | €36 a year | Up to five people, 1 GiB of files each, separate private vaults. |
| Business | €40 a seat a year | Billed per person, 10 GiB of files each. No SSO yet. |
Prices in euro, VAT excluded.
Recent releases
- Extension: Correct Firefox popup sizing and Chrome key parsing
- Extension: Preserve login fields and clarify popup navigation
- Adapter: Upsert items by reference
- Charts: Render a push store for External Secrets PushSecrets
Details
- License
- AGPL-3.0
- Language
- Rust
- Bug reports
- Issue tracker
- Security issues
- Report privately
- Design documents
- Protocol, Threat model