Passbolt vs Keeper
Last updated October 2026
Looking for a European alternative to Keeper? Here's how Passbolt compares, on EU hosting, GDPR and what it does.
Our pick for a European buyer: Passbolt. We weight data residency, GDPR and EU jurisdiction above everything else — that is the constraint this directory exists to solve.
What it is
Open-source team password manager with end-to-end encryption
Enterprise password, secrets and privileged access management platform.
Headquarters
🇱🇺 LU
🇺🇸 US · 2011
EU data residency
Yes, for all customers
Available on some plansEU data residency (Frankfurt, Ireland) available for enterprise customers on request.
DSGVO / GDPR
Yes
Yes
Certifications
SOC 2 Type II
ISO 27001, ISO 27017, ISO 27018, SOC 2 Type II, SOC 3, FIPS 140-3, PCI DSS
Price from
€4.50/user/mo
$2.00/user/mo
Free plan
Yes
No
Open Source
Yes
No
Integrations
Microsoft Entra ID, Google Workspace, OpenID Connect (OIDC) IdPs (Keycloak, Okta), Microsoft AD FS, PingOne +6
SAML 2.0 SSO, SCIM, Active Directory, LDAP, GitHub Actions +9
Where each one wins
Passbolt
Strengths
- +Open-source architecture with full transparency and auditability
- +Self-hosting capability for complete data control behind own firewalls
- +Zero-knowledge, OpenPGP end-to-end encryption for client-side credential security
- +Granular team password sharing with intuitive role-based access control (RBAC)
- +Free Community Edition with full functionality for startups and budget-conscious teams
- +Lightweight and fast core web application performance
- +Responsive community forum and open developer support for feedback and bug fixes
Limitations
- −Complex setup and deployment requiring DevOps and command-line skills
- −Clunky browser extension with frequent session timeouts and re-login prompts
- −Limited vault item types (focused on logins/passwords, lacking support for credit cards, secure notes, etc.)
Keeper
Strengths
- +Strong encryption and zero-knowledge architecture
- +Comprehensive feature set for enterprises
- +Reliable cross-platform performance
- +Responsive customer support
Limitations
- −Steep learning curve for advanced features
- −Pricing can be complex for large teams
- −Some users report occasional sync delays
- −Enterprise features require higher-tier plans
Data residency & compliance
Passbolt
Keeper
EU data residency
Yes, for all customers
Available on some plansEU data residency (Frankfurt, Ireland) available for enterprise customers on request.
Transfer mechanism
Not required — data stays in the EU
EU-US Data Privacy Framework
Certifications
SOC 2 Type II
ISO 27001, ISO 27017, ISO 27018, SOC 2 Type II, SOC 3, FIPS 140-3, PCI DSS
Pricing
Passbolt
- Community Edition (Self-Hosted) Free Unlimited usersOpen-source (AGPLv3) · Self-hosted deployment
- Pro Edition (Self-Hosted) €4.50 per user / month, billed annually (min. 10 users)Volume discounts above 100 users · Free trial on request
- Enterprise Edition (Self-Hosted) On request Custom annual subscriptionHigh availability/disaster recovery consulting · Custom SLA and phone support
- Cloud Business €5 per user / month, billed monthly (min. 10 users)Hosted in Google Cloud (Belgium, Germany) · 7-day free trial
- Cloud Sovereign €7 per user / month, billed annually (min. 10 users)Hosted in Luxembourg (sovereign private data center) · Compliant with ISO 27001, GDPR, NIS2, DORA
- Cloud Enterprise On request Custom annual subscriptionIsolated container deployments · 24/7 SOC monitoring and 4-hour SLA
Volume discounts apply for Pro Edition above 100 users. Custom pricing for Enterprise and Cloud Enterprise plans.
Keeper
- Business Starter $2.00 per user/monthBilled annually · Basic admin controls · Secure password sharing
- Business $3.75 per user/monthBilled annually · Advanced reporting · RBAC and policy enforcement
- Enterprise On request per user/monthCustom pricing · EU data residency option · KeeperPAM add-on available
- KeeperPAM On request per user/monthPrivileged access management · Session recording · Tailored to organization
Pricing varies by source; confirm current rates with Keeper. Free 30-day trial available.
Features
Passbolt
- Credential & Secret Management
- Secure storage of passwords, TOTP, and encrypted notes, Custom fields and secret history tracking, Password expiry policies
- Collaboration & Access Control
- Private and shared folder structures, Granular sharing permissions and tagging, Role-Based Access Control (RBAC) and user/group management
- Security & Authentication
- Per-user/per-secret end-to-end encryption (OpenPGP), Zero-knowledge metadata mode, Multi-factor authentication (MFA/2FA) with Duo, YubiKey NFC, and TOTP, Anti-phishing token mechanism
- Client Applications & Usability
- Browser extensions (Chrome, Firefox, Edge, Brave), Native desktop (Windows) and mobile apps (iOS, Android), Command Line Interface (CLI) and offline vault mode, KDBX/CSV import and export
- Administration & Compliance
- Activity audit logs with SIEM/Syslog export, Self-registration with domain allowlists, Centralized account recovery (Escrow), Server health checks
Keeper
- Vault & Credentials
- Encrypted storage for passwords, passkeys, files and secrets, Secure sharing with granular permissions, Cross-device sync and offline access, Auto-fill for web and mobile apps
- Administration & Access Control
- Central Admin Console for policy enforcement, Two-factor authentication (2FA) and MFA options, Team and role-based access management, Vault transfer and emergency access
- Secrets & DevOps
- Secrets Manager for infrastructure credentials and API keys, Automated credential rotation, CI/CD pipeline integration, Developer tools (CLI, SDKs, VS Code)
- Privileged Access
- KeeperPAM for privileged session management, Secure remote access (RDP, SSH, VNC, databases), Session recording and audit trails, Just-in-time (JIT) access
- Compliance & Auditing
- Audit logging and reporting, SIEM integration for security monitoring, HIPAA, GDPR and other regulatory compliance support, Customizable compliance reports