Passbolt

Overview

Passbolt is a team-oriented, open-source password manager built on OpenPGP, founded in 2017 and based in Luxembourg. It emphasizes granular sharing, API and CLI access, and self-hosting, and is popular with engineering and DevOps teams that want credentials managed like infrastructure.

What it is good at

Granular, per-resource sharing and a genuine API and CLI make it scriptable and a natural fit for technical teams and automation. The OpenPGP foundation means end-to-end encryption with keys users control, the community edition is free to self-host, and the open codebase is inspectable. SSO and LDAP arrive in the paid editions for organizations that need them.

Where it falls short

The OpenPGP key model adds setup and onboarding complexity that non-technical users find unfamiliar, and consumer polish is not the goal. Mobile and offline experiences trail mainstream managers, and getting SSO or directory sync requires moving to the paid Pro or cloud tiers rather than the free community edition.

Pricing

Free open-source community edition; paid Pro (self-hosted) and cloud tiers add SSO, LDAP, and support. Model the tier you need with the TCO calculator.

Best for, and who should look elsewhere

Choose Passbolt when an engineering or DevOps team wants open-source, scriptable, granular credential sharing it can self-host. For a friendlier all-rounder see Bitwarden; for a lightweight server see Vaultwarden; for another self-hosted open option see Psono.

Bottom line

A strong open-source, team-first password manager for technical organizations comfortable with OpenPGP. Look elsewhere if you need a turnkey consumer manager or want to avoid running and maintaining your own server.