Alternatives / 1Password
Looking for an open source 1Password alternative? We compared 10 open source password managers, authenticators, and secrets managers by license, self-hosting, encryption, sharing, and pricing. They split into password managers for people and secrets managers for developers and infrastructure.
Written by Maxime DERAME
Last updated:
| Alternative | Best for | License |
|---|---|---|
| Bitwarden | Closest overall password manager | GPL-3.0 clients / AGPL-3.0 server |
| KeePassXC | Offline password manager | GPL-2.0 / GPL-3.0 |
| Passbolt | Team password sharing | AGPL-3.0 |
| Padloc | Encrypted passwords and documents | AGPL-3.0 |
| 2FAS | Authenticator and local password manager | GPL-3.0 (Auth) / BUSL-1.1 (Pass) |
| PearPass | Peer-to-peer local-first passwords | Apache-2.0 |
| Cozy | Personal cloud with password management | AGPL-3.0 |
| HashiCorp Vault | Enterprise secrets management | BSL-1.1 (Vault 1.15+) |
| Phase | Secrets and environment variables | MIT core / separate Enterprise licensing |
| Keyshade | Replacing .env files | MPL-2.0 |
We looked for open-source projects that overlap with 1Password: storing and sharing credentials securely, plus secrets management for teams. We verified each project's license, recent activity, stars, and self-hosting in its repository. 1Password covers both people and infrastructure, so we separate password managers from developer secrets managers and flag source-available and open-core licenses. See our methodology for the full criteria.
Bitwarden, KeePassXC, Passbolt, Padloc, 2FAS, and PearPass are password managers or authenticators for people and teams, with apps and browser extensions. HashiCorp Vault, Phase, and Keyshade manage secrets for applications and infrastructure. Cozy is a personal cloud that includes password management but is not a dedicated credential manager.
Bitwarden is the closest match: apps and browser extensions on every platform, secure sharing, organizations, passkeys, and official self-hosting. KeePassXC keeps an encrypted vault locally with no cloud, and Passbolt targets team credential sharing with granular permissions.
2FAS Authenticator, for Android, iOS, and browsers, is licensed under GPL-3.0. 2FAS Pass, its password manager, is licensed under the Business Source License 1.1 plus an end user license agreement, so it is source available rather than open source. Both are free and store data locally without an account.
KeePassXC is GPL-2.0 or GPL-3.0, Bitwarden clients are GPL-3.0 and its server is AGPL-3.0, and Passbolt, Padloc, and Cozy are AGPL-3.0. PearPass is Apache-2.0, Keyshade is MPL-2.0, and Phase is MIT with an enterprise license. HashiCorp Vault has been under the Business Source License 1.1 since version 1.15, so it is source available.
Padloc has had no commits since March 2025, so check it carefully before relying on it. Keyshade's last commit was in April 2026. Bitwarden, KeePassXC, Passbolt, 2FAS, Vault, and Phase were updated within days or weeks of this update.
1Password is a proprietary password manager sold by subscription, with closed-source apps and servers, so you rely on the company's audits and cloud. Open-source alternatives let you inspect and audit the code, self-host your vault, avoid per-seat pricing, and integrate secrets into developer workflows, at the cost of running infrastructure yourself and, in some cases, a less polished user experience.
| Alternative | Type | License | Self-hosted | Best for |
|---|---|---|---|---|
| HashiCorp Vault | Secrets manager | BSL-1.1 (1.15+) | Yes | Complex infrastructure |
| KeePassXC | Password manager | GPL-2.0 / GPL-3.0 | Local vault | Offline use |
| Bitwarden | Password manager | GPL-3.0 / AGPL-3.0 | Yes | Individuals and teams |
| Passbolt | Team password manager | AGPL-3.0 | Yes | Organizations |
| Padloc | Password manager | AGPL-3.0 | Yes | Passwords and documents |
| 2FAS | Authenticator and password manager | GPL-3.0 (Auth) / BUSL-1.1 (Pass) | Local-first | Privacy-focused users |
| Cozy | Personal cloud | AGPL-3.0 | Yes | Data sovereignty |
| Phase | Secrets manager | MIT core + Enterprise | Yes | Engineering teams |
| Keyshade | Secrets manager | MPL-2.0 | Unclear | Replacing .env files |
| PearPass | P2P password manager | Apache-2.0 | Local / P2P | Privacy-conscious users |
Want the closest overall 1Password alternative
Bitwarden offers apps and extensions on every platform, secure sharing, organizations, passkeys, and official self-hosting.
Want an offline password manager
KeePassXC keeps an encrypted vault locally with browser integration, passkeys, and TOTP, and no cloud.
Want team credential sharing
Passbolt focuses on secure credential sharing with granular permissions, end-to-end encryption, and audit logs.
Want an open-source authenticator
2FAS Authenticator is GPL-3.0, stores tokens locally with no account, and has apps for Android and iOS plus a browser extension.
Want peer-to-peer, no-cloud sync
PearPass stores encrypted data on your devices and syncs over peer-to-peer networking.
Want enterprise secrets management
Vault provides dynamic credentials, policy-based access, and audit logging, but it is source available under the Business Source License.
Want to replace .env files
Keyshade offers public key encryption, rotation, versioning, and role-based access for team secrets.