Alternatives / Enpass
Looking for an open source Enpass alternative? We compared 8 open source password managers by license, sync, and maintenance. KeePassXC is the offline option, Bitwarden and Vaultwarden are server-based, and Passbolt and TeamPass target teams.
Written by Maxime DERAME
Last updated:
| Alternative | Best for | License |
|---|---|---|
| Vaultwarden | Lightweight Bitwarden-compatible server (unofficial) | AGPL-3.0 |
| KeePassXC | Offline password manager | GPL-2.0 / GPL-3.0 |
| Bitwarden | Cross-platform cloud or self-hosted | GPL-3.0 clients / AGPL-3.0 server |
| Passbolt | Team manager with audit logs | AGPL-3.0 |
| Padloc | End-to-end encrypted storage | AGPL-3.0 |
| TeamPass | Self-hosted team manager | GPL-3.0 |
| PearPass | Local-first with peer-to-peer sync | Apache-2.0 |
| Psono | Team manager with SAML and LDAP | Apache-2.0 |
We looked for open-source password managers that store credentials securely like Enpass. We verified each project's license, recent activity, stars, and self-hosting in its repository. See our methodology for the full criteria.
KeePassXC is an offline manager for Windows, macOS, and Linux with browser autofill and passkey support, with the database as a local file you sync yourself. Bitwarden is a cross-platform manager with a free tier, and Vaultwarden is an unofficial lightweight server compatible with Bitwarden clients.
Passbolt is a security-focused team manager with audit logs and an API. TeamPass is a self-hosted team manager maintained since 2009 with folder-level access control, and Psono is a team manager with SAML and LDAP.
PearPass is a local-first manager with peer-to-peer sync and no cloud servers. Padloc offers end-to-end encrypted storage but relies on cloud synchronization.
Vaultwarden is unofficial and unaffiliated with Bitwarden, Inc. Bitwarden's 2FA and file attachments require Premium at $10 per year. TeamPass's browser extension is paid from 49 euros per year.
Vaultwarden, Passbolt, and Padloc are AGPL-3.0. Bitwarden's server is AGPL-3.0 and clients are GPL-3.0. KeePassXC is GPL-2.0 or 3.0. TeamPass is GPL-3.0. Psono's server and PearPass are Apache-2.0.
Most had commits within weeks of this update.
Enpass is a proprietary manager that stores vaults locally with optional sync. Open-source managers let you audit the code and often self-host sync, but experience and support vary.
Vaultwarden is an AGPL-3.0, Rust-based, unofficial server compatible with the Bitwarden client apps, designed for self-hosting on low-resource hardware. It is not affiliated with Bitwarden, Inc., and bugs should go to the Vaultwarden project. An HTTPS reverse proxy is recommended for the web vault.
Pricing: Free and open source.
Cross-platform password manager based on the KeePass database format. Keep the encrypted vault locally or synchronize it through storage of your choice; it supports browser integration, autofill, passkeys, TOTP, hardware keys, secure notes, and attachments.
Pricing: Free and open source; no subscription or required account.
Password manager with browser, web, desktop, and mobile clients, autofill, passkeys, secure notes, sharing, organizations, encrypted synchronization, and official self-hosting. Clients are GPL-3.0 and server code is AGPL-3.0.
Pricing: Free tier and paid plans; some advanced features require a subscription.
AGPL-3.0 Community Edition team password manager centered on secure credential sharing, granular access controls, end-to-end encryption, auditability, browser extensions, mobile apps, API, and CLI.
Pricing: Self-hosted Community Edition; commercial editions and enterprise features are also available.
AGPL-3.0 password manager with end-to-end encryption for passwords, secure notes, payment cards, documents, and other sensitive data. It includes cross-platform clients, browser integration, sharing, synchronization, and self-hosting.
Pricing: Open-source self-hosting; optional commercial licensing and hosted services may be available.
TeamPass is a GPL-3.0 self-hosted password manager for teams, with folder-level access control, governance tools, and encrypted storage. Its browser extension costs €49 a year, and its governance features can add complexity.
Pricing: Free to self-host; the browser extension is paid at €49 a year.
Apache-2.0 password and identity manager storing encrypted data on users' devices and synchronizing through Pear Runtime peer-to-peer networking. Desktop, mobile, browser extension, offline access, generator, and password health features are part of the project ecosystem; active development is currently paused.
Pricing: Open source; development is currently paused according to project repositories.
Psono is a self-hosted team password manager under Apache-2.0 with SAML and LDAP, audit logs, and an optional SaaS version. Business features are free for up to 10 users, and larger teams are directed to paid SaaS plans for SLAs.
Pricing: Free to self-host; paid SaaS plans for larger teams.
| Alternative | Type | License | Self-hosted | Best for |
|---|---|---|---|---|
| Vaultwarden | Password server | AGPL-3.0 | Yes | Self-hosted sync |
| KeePassXC | Password manager | GPL-2.0 / GPL-3.0 | Local | Closest to Enpass |
| Bitwarden | Password manager | AGPL-3.0 server / GPL-3.0 clients | Yes | Families and teams |
| Passbolt | Team password manager | AGPL-3.0 | Yes | Security teams |
| Padloc | Password manager | AGPL-3.0 | Cloud sync | Cross-device storage |
| TeamPass | Team password manager | GPL-3.0 | Yes | Long-running teams |
| PearPass | Password manager | Apache-2.0 | No server | No-cloud setups |
| Psono | Team password manager | Apache-2.0 (server) | Yes | Enterprise compliance |
Want offline control of your vault
KeePassXC stores the database as a local file with autofill and passkeys.
Want sync with official apps
Bitwarden has end-to-end encryption and a free tier.
Want lightweight self-hosted sync
Vaultwarden works with Bitwarden clients, but is unofficial.
Run a team vault
Passbolt has audit logs, an API, and a CLI.