Passbolt

✓ Verified FOSSAGPL-3.0

Top open-source alternative to 1Password

Passbolt is a security-audited open-source password manager designed specifically for engineering and enterprise teams, using end-to-end OpenPGP encryption, RBAC sharing, and CLI/browser extensions.

Tech StackPHP, CakePHP, OpenPGP, MariaDB

Self-Host DifficultyEasy

License ModelAGPL-3.0

GitHub Repositorypassbolt/passbolt_api

Recommended VPS & Hardware Sizing

Estimated Hosting: $4 - $6/mo (e.g. Hetzner CX22 or DigitalOcean)

Min RAM:1 GB

Rec RAM:2 GB

Compute:1 vCPU

Disk Space:10 GB SSD

Passbolt vs 1Password Comparison Matrix

Evaluation Criteria	Passbolt (Open Source)	1Password (Proprietary)
Subscription Model	100% Free Self-Hosted (Unlimited Users)	1Password Per-Seat / Usage Billing
Data Sovereignty	100% On-Premise / Your Own VPS	Stored on 1Password Proprietary Cloud
Source Code Audit	Open-Source (AGPL-3.0)	Closed-Source Proprietary Blackbox

INTERACTIVE TCO MODELEstimated Rate: $6/user/mo

Financial Impact: Migrating from 1Password to Self-Hosted Passbolt

Detailed Stack Calculator →

Active Team Members / Seats: 25 Users

5 Users (Early Startup)50 Users (Scaleup)200 Users (Enterprise Org)

1Password (Cloud SaaS)Per-Seat Tax

$1,800per year ($150/mo)

3-Year Spend:$5,400

* Excludes enterprise SSO add-ons & usage overages

Passbolt (Self-Hosted)Zero Per-Seat Fee

$120per year ($10/mo Linux VPS)

3-Year Compute:$360

* Commodity Hetzner / DigitalOcean compute instance

Cumulative 3-Year ROI+$5,040Net savings across 36 months (93% reduction)

Annual Free Cash:+$1,680/yr

Need C-Level Buy-In? Generate an instant ROI proposal memo to present to your CTO or CFO.

HEAD-TO-HEAD BATTLES // SIDE-BY-SIDE AUDIT

Compare Passbolt Head-to-Head

Custom Comparison Engine →

★ PRIMARY REPLACEMENTFOSS vs SaaS

Passboltvs

1Password

Comprehensive benchmark comparing Passbolt against proprietary 1Password licensing and features.

View Full Battle Report→

SecurityPEER BENCHMARK

Keycloakvs

Authentik

RedHat Enterprise IAM vs Modern Python/Go Identity Provider

Inspect Comparison→

SecurityPEER BENCHMARK

Vaultwardenvs

1Password

Bitwarden-Compatible Lightweight Rust Server vs 1Password SaaS

Inspect Comparison→

SecurityPEER BENCHMARK

Infisicalvs

HashiCorp Vault

Developer-First Secret Management & Sync vs Complex Enterprise HSM Vault

Inspect Comparison→

SecurityPEER BENCHMARK

Headscalevs

Tailscale

Self-Hosted Control Server vs Tailscale Cloud Coordination Service

Inspect Comparison→

SecurityPEER BENCHMARK

Headscalevs

NetBird

Lightweight Headscale Coordination vs Full-Featured Zero-Trust Network

Inspect Comparison→

Core Capabilities & Features

✓100% End-to-End OpenPGP Encryption

✓Granular Team Role-Based Access Control

✓Browser Extensions & Mobile Apps

✓Full Security Audit Trail

Self-Host Passbolt with Docker Compose

Tweak configuration ports, secrets, and volumes live. Download or copy your ready-to-run container file:

1-Click Docker Compose Generator

Generate production-ready container definitions with customizable ports and volumes.

Select Open-Source Project:

PassboltAGPL-3.0

OpenPGP-backed open-source team password manager for agile & DevOps teams

Difficulty: Easy6,160 ⭐

Configure Parameters

Host Port (PORT)

Public Base URL (APP_URL)

Application Secret Key (SECRET_KEY)

docker-compose.passbolt.yml

version: "3.8"
services:
  passbolt:
    image: passbolt/passbolt:latest-ce
    container_name: passbolt
    restart: unless-stopped
    ports:
      - "${PORT:-443}:443"
    environment:
      APP_URL: "${APP_URL:-http://localhost:443}"
      SECRET_KEY: "${SECRET_KEY:-ossmatrix_prod_secret_2026}"
    volumes:
      - passbolt_data:/data

volumes:
  passbolt_data:

Frequently Asked Questions: Self-Hosting Passbolt

How do I self-host Passbolt using Docker Compose?

You can deploy Passbolt (passbolt/passbolt_api) on any Linux server by copying the docker-compose.yml template on this page, configuring your desired host port and persistent volume directory, and running 'docker compose up -d'.

How does Passbolt compare to 1Password?

Passbolt is an open-source, self-hosted alternative to 1Password built with PHP, CakePHP, OpenPGP, MariaDB. Unlike 1Password ($4.99 - $7.99 / user / month), Passbolt has zero per-user licensing fees and keeps 100% of your data on your own infrastructure.

What are the minimum VPS RAM and CPU requirements for Passbolt?

For production self-hosting (Easy difficulty tier), we recommend at least 2 GB RAM (minimum 1 GB), 1 vCPU, and 10 GB SSD storage, which typically costs $4 - $6/mo (e.g. Hetzner CX22 or DigitalOcean).

Is Passbolt free for commercial business use under the AGPL-3.0 license?

Yes. Distributed under the AGPL-3.0 license, Passbolt can be self-hosted internally by businesses and engineering teams of any size without per-seat royalties.

README INTEGRATION // REPO EMBED

Embed Official Passbolt Badge in GitHub README

Served locally from OSSMatrix with Cloudflare global edge caching. Real-time verified alternative status, zero third-party dependencies, sub-5ms load time.

Live Preview:

Markdown Embed (GitHub / GitLab)

[![OSSMatrix Alternative](https://ossmatrix.com/api/badge/passbolt)](https://ossmatrix.com/project/passbolt)

HTML Embed (Docs / Landing Pages)

<a href="https://ossmatrix.com/project/passbolt" target="_blank" rel="noopener noreferrer"><img src="https://ossmatrix.com/api/badge/passbolt" alt="Passbolt on OSSMatrix" /></a>

SIMILAR REPOSITORIES // PEER COMPARISON