Vaultwarden
Password ManagersLightweight Bitwarden-compatible password server
Replaces 1Password, LastPass
Best Encrypted Password Managers for self-hosting
The 35 best Encrypted password managers you can self-host, ranked by community traction.
HashiCorp Vault
Password ManagersSecrets management and data protection for infrastructure
Replaces AWS Secrets Manager, Azure Key Vault
Infisical
Password ManagersOpen-source secrets management platform for developers
Replaces AWS Secrets Manager, Doppler
KeePassXC
Password ManagersCross-platform offline KeePass password manager
Replaces LastPass, 1Password
Mozilla SOPS
Password ManagersEncrypt secrets in config files for version control
Replaces AWS Secrets Manager, HashiCorp Vault
Bitwarden
Password ManagersOpen-source password manager you can self-host
Replaces 1Password, LastPass
KeeWeb
Password ManagersWeb-based client for KeePass databases
Replaces LastPass, 1Password
git-crypt
Password ManagersTransparent file encryption for secrets stored in git
Replaces HashiCorp Vault, AWS Secrets Manager
OpenBao
Password ManagersOpen-source secrets management forked from Vault
Replaces AWS Secrets Manager, HashiCorp Vault
KeePassDX
Password ManagersMaterial design KeePass client for Android
Replaces 1Password, LastPass
gopass
Password ManagersTeam-oriented password manager compatible with pass
Replaces 1Password, LastPass
Passbolt
Password ManagersOpen-source password manager built for teams
Replaces 1Password, LastPass
pass
Password ManagersThe standard Unix password manager built on GPG and git
Replaces 1Password, LastPass
AliasVault
Password ManagersEnd-to-end encrypted password and email alias manager
Replaces 1Password, SimpleLogin
Yopass
Password ManagersSecurely share secrets with encrypted one-time links
Replaces 1Password, Doppler
One-Time Secret
Password ManagersShare sensitive credentials with self-destructing links
Replaces 1Password, Doppler
Padloc
Password ManagersModern open-source password manager
Replaces 1Password, LastPass
TeamPass
Password ManagersCollaborative password manager for teams
Replaces LastPass, 1Password
KeePassium
Password ManagersKeePass-compatible password manager for iOS and macOS
Replaces 1Password, LastPass
pass-otp
Password ManagersOne-time-password extension for the pass manager
Replaces Authy, 1Password
Knox
Password ManagersService for storing and rotating application secrets
Replaces HashiCorp Vault, AWS Secrets Manager
Browserpass
Password ManagersBrowser extension front-end for the pass manager
Replaces LastPass extension, 1Password extension
KeePass
Password ManagersOriginal free and open-source password manager
Replaces 1Password, LastPass
sysPass
Password ManagersWeb-based password manager for teams and businesses
Replaces 1Password Teams, Keeper
Clipperz
Password ManagersBrowser-based open-source encrypted password manager
Replaces 1Password, LastPass
Psono
Password ManagersSelf-hosted password manager for teams
Replaces 1Password, LastPass
pass-tomb
Password ManagersEncrypted storage extension for the pass manager
Replaces 1Password, KeePass
Password Gorilla
Password ManagersCross-platform password vault compatible with Password Safe
Replaces LastPass, Password Safe
Nextcloud Passwords
Password ManagersEncrypted password manager app for Nextcloud servers
Replaces LastPass, Bitwarden
Passky Server
Password ManagersSimple, lightweight and open-source password manager backend
Replaces LastPass, Bitwarden
Passit
Password ManagersSelf-hosted password manager with browser extensions
Replaces LastPass, 1Password
Spectre
Password ManagersStateless password manager that derives passwords on demand
Replaces 1Password, LastPass
Pass Audit
Password ManagersSecurity auditing extension for the pass manager
Replaces 1Password Watchtower, Bitwarden Reports
Gopass JSONAPI
Password ManagersNative messaging bridge for the gopass manager
Replaces 1Password CLI, Bitwarden CLI
Psono Client
Password ManagersBrowser and web client for the Psono password server
Replaces LastPass, 1Password
No apps match these filters.
At a glance
| App | Deploy effort | Difficulty | Min. RAM | License | ★ Stars |
|---|---|---|---|---|---|
| Vaultwarden | ≈5-minute setup | Easy | 128 MB | AGPL-3.0 | 69,006 |
| HashiCorp Vault | Under-an-hour setup | Hard | 256 MB | BUSL-1.1 | 36,388 |
| Infisical | Under-an-hour setup | Medium | 512 MB | MIT | 29,746 |
| KeePassXC | Read-the-docs project | Easy | 128 MB | GPL-3.0 | 29,214 |
| Mozilla SOPS | Read-the-docs project | Medium | 64 MB | MPL-2.0 | 23,379 |
| Bitwarden | Under-an-hour setup | Medium | 2,048 MB | AGPL-3.0 | 20,290 |
| KeeWeb | ≈5-minute setup | Easy | 128 MB | MIT | 13,013 |
| git-crypt | Read-the-docs project | Easy | 32 MB | GPL-3.0 | 9,954 |
| OpenBao | Under-an-hour setup | Hard | 256 MB | MPL-2.0 | 8,428 |
| KeePassDX | Read-the-docs project | Easy | 64 MB | GPL-3.0 | 7,470 |
Quick picks
- Most adopted: Vaultwarden (69,006 GitHub stars).
- Lightest footprint: git-crypt (from 32 MB RAM, against 2,048 MB for the heaviest here).
- Fastest to deploy: Vaultwarden (verified single-container compose).
- Licensing: 11 of 35 use GPL-3.0; check the rest individually if you plan to modify and redistribute.
Every option here is open-source and self-hostable, tagged Encrypted within the password managers category. Deploy effort is graded from published container recipes, not vendor claims — see the methodology.