Alternatives / Proton Pass
Looking for an open source Proton Pass alternative? We compared 8 open source password managers by license, self-hosting, sync, team features, and encryption. They range from offline vaults to self-hosted team servers, and several keep some features in commercial editions.
Written by Maxime DERAME
Last updated:
| Alternative | Best for | License |
|---|---|---|
| Vaultwarden | Lightweight self-hosted Bitwarden-compatible server | AGPL-3.0 |
| KeePassXC | Offline vault with your own sync | GPL-2.0 / GPL-3.0 |
| Bitwarden | Polished cloud or self-hosted manager (some code is source available) | GPL-3.0 clients / AGPL-3.0 server + Bitwarden License (bitwarden_license directory) |
| Passbolt | Team password management | AGPL-3.0 |
| TeamPass | Self-hosted team vault with folder permissions | GPL-3.0 |
| Padloc | End-to-end encrypted apps (development stalled) | AGPL-3.0 |
| PearPass | Peer-to-peer sync without cloud servers | Apache-2.0 |
| Psono | Self-hosted team vault with SAML and LDAP | Apache-2.0 |
We looked for open-source tools that overlap with Proton Pass's core: storing passwords and notes with end-to-end encryption, filling them in browsers and apps, and syncing across devices. We verified each project's license, recent activity, stars, and sync model in its repository. Proton Pass also offers email aliases, which none of these provide, so we note where each tool stores your data. See our methodology for the full criteria.
A self-hosted or offline vault means you handle backups, updates, TLS, and recovery. Losing the master password or the vault file can mean permanent loss of access. Run Vaultwarden or Passbolt behind HTTPS and keep tested backups.
Bitwarden is the closest for everyday personal and family use, with polished apps and browser extensions and a free tier, though some premium features need a paid plan. Vaultwarden is an unofficial, Rust-based server compatible with Bitwarden clients that runs on low-resource hardware, and KeePassXC is the standard offline option.
Vaultwarden is AGPL-3.0 and is not affiliated with Bitwarden, Inc. Bitwarden's server is AGPL-3.0 with a bitwarden_license directory under the separate Bitwarden License for enterprise features. KeePassXC and TeamPass are GPL, Passbolt, Padloc, and Pearpass are AGPL-3.0 or Apache-2.0, and Psono's server is Apache-2.0.
Passbolt, TeamPass, and Psono target teams, with sharing controls, folder-level permissions, audit logs, and for Psono SAML and LDAP. TeamPass's browser extension costs €49 a year, and Psono's business features are free for up to 10 users before paid SaaS plans.
Vaultwarden, KeePassXC, Bitwarden, Passbolt, TeamPass, Pearpass, and Psono had commits within weeks of this update. Padloc's last commit was in March 2025, so it appears stalled.
Proton Pass is a proprietary service tied to a Proton account, with the highest-tier features, such as more aliases and advanced vaults, on paid plans, and the vault stored on Proton's servers. Open-source alternatives let you host your own vault or keep it offline, inspect or audit the code, avoid a subscription, and choose how syncing works, at the cost of running or syncing the vault yourself.
Vaultwarden is an AGPL-3.0, Rust-based, unofficial server compatible with the Bitwarden client apps, designed for self-hosting on low-resource hardware. It is not affiliated with Bitwarden, Inc., and bugs should go to the Vaultwarden project. An HTTPS reverse proxy is recommended for the web vault.
Pricing: Free and open source.
Cross-platform password manager based on the KeePass database format. Keep the encrypted vault locally or synchronize it through storage of your choice; it supports browser integration, autofill, passkeys, TOTP, hardware keys, secure notes, and attachments.
Pricing: Free and open source; no subscription or required account.
Password manager with browser, web, desktop, and mobile clients, autofill, passkeys, secure notes, sharing, organizations, encrypted synchronization, and official self-hosting. Clients are GPL-3.0 and server code is AGPL-3.0.
Pricing: Free tier and paid plans; some advanced features require a subscription.
AGPL-3.0 Community Edition team password manager centered on secure credential sharing, granular access controls, end-to-end encryption, auditability, browser extensions, mobile apps, API, and CLI.
Pricing: Self-hosted Community Edition; commercial editions and enterprise features are also available.
AGPL-3.0 password manager with end-to-end encryption for passwords, secure notes, payment cards, documents, and other sensitive data. It includes cross-platform clients, browser integration, sharing, synchronization, and self-hosting.
Pricing: Open-source self-hosting; optional commercial licensing and hosted services may be available.
TeamPass is a GPL-3.0 self-hosted password manager for teams, with folder-level access control, governance tools, and encrypted storage. Its browser extension costs €49 a year, and its governance features can add complexity.
Pricing: Free to self-host; the browser extension is paid at €49 a year.
Apache-2.0 password and identity manager storing encrypted data on users' devices and synchronizing through Pear Runtime peer-to-peer networking. Desktop, mobile, browser extension, offline access, generator, and password health features are part of the project ecosystem; active development is currently paused.
Pricing: Open source; development is currently paused according to project repositories.
Psono is a self-hosted team password manager under Apache-2.0 with SAML and LDAP, audit logs, and an optional SaaS version. Business features are free for up to 10 users, and larger teams are directed to paid SaaS plans for SLAs.
Pricing: Free to self-host; paid SaaS plans for larger teams.
| Alternative | Type | License | Self-hosted | Best for |
|---|---|---|---|---|
| Vaultwarden | Server for Bitwarden clients | AGPL-3.0 | Yes | Self-hosted personal vaults |
| KeePassXC | Offline vault | GPL-2.0 / GPL-3.0 | Local files | Offline control |
| Bitwarden | Password manager | GPL-3.0 clients / AGPL-3.0 server + Bitwarden License | Yes | Families and teams |
| Passbolt | Team password manager | AGPL-3.0 | Yes | Teams and APIs |
| TeamPass | Team password manager | GPL-3.0 | Yes | Folder-level access |
| Padloc | Password manager | AGPL-3.0 | Yes | E2E encrypted apps |
| PearPass | Local-first manager | Apache-2.0 | Peer to peer | No cloud servers |
| Psono | Team password manager | Apache-2.0 | Yes | SAML and LDAP |
Want to self-host a vault for yourself or family
Vaultwarden is an AGPL-3.0 Bitwarden-compatible server that runs on low-resource hardware, but it is unofficial.
Want a fully offline vault
KeePassXC is an offline encrypted vault for Windows, macOS, and Linux with browser autofill and passkey support, and you arrange your own sync.
Want the most polished apps
Bitwarden has mature apps and extensions with free and paid plans, and some enterprise code under a separate license.
Need a team password manager
Passbolt offers team sharing controls, an API and CLI, and self-hosting under AGPL-3.0.
Want sync without any cloud server
Pearpass is a local-first Apache-2.0 manager with peer-to-peer sync, though devices must be available to each other.