Open source password & secret management. Any business, any size.

Passbolt is an open source credential platform built-first for security-conscious IT teams, yet simple enough for company-wide adoption. A sovereign, adaptable solution that delivers for a team of 5, or an organisation of 5000.

Bosch

Ministère de l'intérieur

GLS

Humboldt-Universität zu Berlin

TU Graz

ZIT-RLP

Hochschule Ruhr West

Information Services

CTIE

Passbolt enables teams of all sizes to granularly share all types of credentials so that they can confidently scale operations.

Passbolt is fully end-to-end encrypted and ensures password sharing security thanks to its unique public-private key architecture.

Passbolt is open source all the way, even the paid version. No bullshit.

Illustration for visibility & control

Organize passwords in personal or shared folders. Add tags, comments and descriptions. Retrieve what you need in a click.

Share one or several credentials instantly with granular permissions. Get notified of updates in real time.

Passbolt ships with native mobile and desktop apps for optimal ease of use.

Passbolt is API centric and can be used through CLI or SDKs.

Private keys provide an extra layer of security, allowing only key holders with the passphrase to access and decrypt data, while also ensuring a cryptographically-backed audit trail.

Enhances security by ensuring that the private key, generated and stored on the user's device, never passes through the server, maintaining data confidentiality.

Provides a default two-factor authentication by design, requiring both a private key and a passphrase. Plus, it also supports additional MFA layers for even more robust authentication.

Protects against brute force attacks by encrypting each password with a user’s auto-generated, unguessable private key - unlike legacy password managers that rely solely on the user's master password.

On top of a private key and passphrase, Passbolt uses a 3-letter token and color combination, as well as URL matching, to protect against phishing.

Passbolt encrypts each password individually for granular, containerised data privacy, ensuring that the compromise of one password does not affect others.

Passbolt is built on top of a JSON API and uses interoperable cryptography (OpenPGP). All operations can be run from any server using our CLI or SDKs.

Passbolt offers an account recovery feature, allowing users to regain access with admin approval, and provides organisation-wide policies for account recovery preferences.

curl -LO "https://download.passbolt.com/ce/docker/docker-compose-ce.yaml"

curl -LO "https://github.com/passbolt/passbolt_docker/releases/latest/download/docker-compose-ce-SHA512SUM.txt"

sha512sum -c docker-compose-ce-SHA512SUM.txt && echo "Checksum OK" || (echo "Bad checksum. Aborting" && rm -f docker-compose-ce.yaml)

docker compose -f docker-compose-ce.yaml up -d

helm repo add passbolt "https://download.passbolt.com/charts/passbolt"

helm install mypassbolt passbolt/passbolt

curl -LO "https://download.passbolt.com/ce/installer/passbolt-repo-setup.ce.sh"

curl -LO "https://github.com/passbolt/passbolt-dep-scripts/releases/latest/download/passbolt-ce-SHA512SUM.txt"

sha512sum -c passbolt-ce-SHA512SUM.txt && sudo bash ./passbolt-repo-setup.ce.sh || echo "Bad checksum. Aborting" && rm -f passbolt-repo-setup.ce.sh

sudo apt install passbolt-ce-server

curl -LO "https://download.passbolt.com/ce/installer/passbolt-repo-setup.ce.sh"

curl -LO "https://github.com/passbolt/passbolt-dep-scripts/releases/latest/download/passbolt-ce-SHA512SUM.txt"

sha512sum -c passbolt-ce-SHA512SUM.txt && sudo bash ./passbolt-repo-setup.ce.sh || echo "Bad checksum. Aborting" && rm -f passbolt-repo-setup.ce.sh

sudo apt install passbolt-ce-server

curl -LO "https://download.passbolt.com/ce/installer/passbolt-repo-setup.ce.sh"

curl -LO "https://github.com/passbolt/passbolt-dep-scripts/releases/latest/download/passbolt-ce-SHA512SUM.txt"

sha512sum -c passbolt-ce-SHA512SUM.txt && sudo bash ./passbolt-repo-setup.ce.sh || echo "Bad checksum. Aborting" && rm -f passbolt-repo-setup.ce.sh

sudo dnf install passbolt-ce-server

sudo /usr/local/bin/passbolt-configure

curl -LO "https://download.passbolt.com/ce/installer/passbolt-repo-setup.ce.sh"

curl -LO "https://github.com/passbolt/passbolt-dep-scripts/releases/latest/download/passbolt-ce-SHA512SUM.txt"

sha512sum -c passbolt-ce-SHA512SUM.txt && sudo bash ./passbolt-repo-setup.ce.sh || echo "Bad checksum. Aborting" && rm -f passbolt-repo-setup.ce.sh

sudo zypper install passbolt-ce-server

sudo /usr/local/bin/passbolt-configure

Passbolt 5.13: One open source codebase for Community and Pro Editions

Passbolt 5.13 unifies Community and Pro on one open source codebase, making it easy to switch editions with a subscription key without complex migration steps.

Passbolt Completes GDPR Audit and Appoints DPO

Passbolt completed an independent GDPR audit and appointed Examin SAS as DPO, strengthening privacy governance, accountability, and data protection.

What we learned from SCIM security audit

Sharing key security lessons from the recent SCIM audit. These codebase patterns can happen to anyone, regardless of language or framework.