Alternatives / Keeper
Looking for an open source Keeper alternative? We compared 11 open source password managers and secrets managers by license, self-hosting, encryption, collaboration, and pricing. They split into password managers for people and secrets managers for developers and infrastructure.
Written by Maxime DERAME
Last updated:
| Alternative | Best for | License |
|---|---|---|
| Bitwarden | Open-source password manager for individuals and teams | GPL-3.0 clients / AGPL-3.0 server |
| KeePassXC | Offline password manager | GPL-2.0 / GPL-3.0 |
| Passbolt | Team password sharing | AGPL-3.0 |
| Padloc | Encrypted passwords and documents | AGPL-3.0 |
| PearPass | Peer-to-peer local-first passwords | Apache-2.0 |
| Cozy | Personal cloud with password management | AGPL-3.0 |
| HashiCorp Vault | Enterprise secrets management | BSL-1.1 (Vault 1.15+) |
| Infisical | Developer secret management | MIT core + EE |
| Phase | Secrets and environment variables | MIT core / separate Enterprise licensing |
| Keyshade | Replacing .env files | MPL-2.0 |
| Shelve | Environment variables across projects | Apache-2.0 |
We looked for open-source projects that overlap with Keeper: storing and sharing credentials securely, plus secrets management for teams. We verified each project's license, recent activity, stars, and self-hosting in its GitHub repository. Keeper covers both people and infrastructure, so we separate password managers from developer secrets managers and flag source-available and open-core licenses. See our methodology for the full criteria.
Bitwarden, KeePassXC, Passbolt, Padloc, and PearPass are password managers for people and teams, with autofill and browser extensions. HashiCorp Vault, Infisical, Phase, Keyshade, and Shelve manage secrets for applications, CI/CD, and infrastructure. Cozy is a personal cloud that includes password management but is not a dedicated credential manager.
Bitwarden is the closest match: apps and browser extensions on every platform, secure sharing, organizations, passkeys, and official self-hosting. Passbolt targets team credential sharing with granular permissions, and KeePassXC keeps an encrypted vault locally with no cloud.
KeePassXC is GPL-2.0 or GPL-3.0, Bitwarden clients are GPL-3.0 and its server is AGPL-3.0, and Passbolt, Padloc, and Cozy are AGPL-3.0. Phase and Infisical are MIT with enterprise directories under separate licenses, so they are open core. Shelve is Apache-2.0, Keyshade is MPL-2.0, and PearPass is Apache-2.0. HashiCorp Vault is licensed under the Business Source License 1.1 since version 1.15, so it is source available rather than open source.
HashiCorp Vault is the enterprise standard with dynamic credentials, policies, and audit logging. Infisical offers centralized, versioned secrets with CI/CD integrations. Phase, Keyshade, and Shelve focus on environment variables, replacing .env files with runtime injection, rotation, and team access controls.
Padloc has had no commits since March 2025, so check it carefully before relying on it. Keyshade's last commit was in April 2026. Bitwarden, KeePassXC, Passbolt, Infisical, Vault, and Phase were updated within days or weeks of this update.
Keeper is a proprietary password manager and secrets platform sold by subscription, with its server code closed. Open-source alternatives let you inspect and audit the code, self-host your vault, avoid per-seat pricing, and integrate secrets into developer workflows, at the cost of running infrastructure yourself and, in some cases, fewer enterprise compliance features.
| Alternative | Type | License | Self-hosted | Best for |
|---|---|---|---|---|
| HashiCorp Vault | Secrets manager | BSL-1.1 (1.15+) | Yes | Complex infrastructure |
| Infisical | Secrets manager | MIT core + EE | Yes | Development teams |
| KeePassXC | Password manager | GPL-2.0 / GPL-3.0 | Local vault | Offline use |
| Bitwarden | Password manager | GPL-3.0 / AGPL-3.0 | Yes | Individuals and teams |
| Passbolt | Team password manager | AGPL-3.0 | Yes | Organizations |
| Padloc | Password manager | AGPL-3.0 | Yes | Passwords and documents |
| Cozy | Personal cloud | AGPL-3.0 | Yes | Data sovereignty |
| Phase | Secrets manager | MIT core + Enterprise | Yes | Engineering teams |
| Keyshade | Secrets manager | MPL-2.0 | Unclear | Replacing .env files |
| PearPass | P2P password manager | Apache-2.0 | Local / P2P | Privacy-conscious users |
| Shelve | Environment manager | Apache-2.0 | Yes | Multi-project teams |
Want the closest overall Keeper alternative
Bitwarden offers apps and extensions on every platform, secure sharing, organizations, passkeys, and official self-hosting.
Want an offline password manager
KeePassXC keeps an encrypted vault locally with browser integration, passkeys, and TOTP, and no cloud.
Want team credential sharing
Passbolt focuses on secure credential sharing with granular permissions, end-to-end encryption, and audit logs.
Want peer-to-peer, no-cloud sync
PearPass stores encrypted data on your devices and syncs over peer-to-peer networking.
Want enterprise secrets management
Vault provides dynamic credentials, policy-based access, and audit logging, but it is source available under the Business Source License.
Want developer secrets with CI/CD integration
Infisical provides centralized, versioned secrets with access controls and CI/CD and Kubernetes integrations.
Want to replace .env files
Keyshade offers public key encryption, rotation, versioning, and role-based access for team secrets.
Want environment variables managed across projects
Shelve provides environment and secret management with a CLI, monorepo support, and a GitHub integration.