Passwork vs Keeper
Last updated October 2026
Looking for a European alternative to Keeper? Here's how Passwork compares, on EU hosting, GDPR and what it does.
Our pick for a European buyer: Passwork. We weight data residency, GDPR and EU jurisdiction above everything else — that is the constraint this directory exists to solve.
What it is
EU-hosted password and secrets manager for teams
Enterprise password, secrets and privileged access management platform.
Headquarters
🇪🇸 ES
🇺🇸 US · 2011
EU data residency
Yes, for all customers
Available on some plansEU data residency (Frankfurt, Ireland) available for enterprise customers on request.
DSGVO / GDPR
Yes
Yes
Certifications
ISO/IEC 27001:2022
ISO 27001, ISO 27017, ISO 27018, SOC 2 Type II, SOC 3, FIPS 140-3, PCI DSS
Price from
€3/user/mo
$2.00/user/mo
Free plan
No
No
Open Source
No
No
Ratings
Integrations
Active Directory, Microsoft Azure AD (Entra ID), LDAP, ALD Pro, SAML 2.0 SSO +15
SAML 2.0 SSO, SCIM, Active Directory, LDAP, GitHub Actions +9
Where each one wins
Passwork
Strengths
- +Self-hosted on-premises deployment with zero-knowledge encryption
- +Clean, intuitive Windows Explorer-like interface and folder hierarchy
- +Granular role-based access control (RBAC) and vault sharing permissions
- +Built-in shared TOTP authenticator token generation for team accounts
- +Fast, stable, and lightweight performance with reliable browser extensions
- +Responsive customer support with fast response times and technical helpfulness
- +API capabilities and LDAP/Active Directory synchronization for IT automation
- +Comprehensive activity audit logs and password versioning history
Limitations
- −No dedicated native desktop applications for offline use
- −Limited mobile apps with missing full-system autofill and restricted admin controls
- −Initial setup complexity for self-hosted infrastructure and enterprise configurations
Keeper
Strengths
- +Strong encryption and zero-knowledge architecture
- +Comprehensive feature set for enterprises
- +Reliable cross-platform performance
- +Responsive customer support
Limitations
- −Steep learning curve for advanced features
- −Pricing can be complex for large teams
- −Some users report occasional sync delays
- −Enterprise features require higher-tier plans
Data residency & compliance
Passwork
Keeper
EU data residency
Yes, for all customers
Available on some plansEU data residency (Frankfurt, Ireland) available for enterprise customers on request.
Transfer mechanism
Not required — data stays in the EU
EU-US Data Privacy Framework
Certifications
ISO/IEC 27001:2022
ISO 27001, ISO 27017, ISO 27018, SOC 2 Type II, SOC 3, FIPS 140-3, PCI DSS
Pricing
Passwork
- Standard €3 per user / month billed annuallyCore vault management · RBAC · Active Directory/LDAP integration
- Advanced €4.5 per user / month billed annuallyAll Standard features · API access · SAML SSO integration
- Enterprise On request Dedicated SLA · Full on-premise options · Clustering/failover support
- On-Premise (Small team) On request up to 10 usersSite license · 1 year of updates and support
- On-Premise (Start) On request up to 25 usersSite license · 1 year of updates and support
- On-Premise (Business) On request up to 50 usersSite license · 1 year of updates and support
- On-Premise (Premium) On request up to 100 usersSite license · 1 year of updates and support
- On-Premise (Enterprise) On request 100+ usersSite license · 1 year of updates and support
30-day free trial with full feature access, no credit card required.
Keeper
- Business Starter $2.00 per user/monthBilled annually · Basic admin controls · Secure password sharing
- Business $3.75 per user/monthBilled annually · Advanced reporting · RBAC and policy enforcement
- Enterprise On request per user/monthCustom pricing · EU data residency option · KeeperPAM add-on available
- KeeperPAM On request per user/monthPrivileged access management · Session recording · Tailored to organization
Pricing varies by source; confirm current rates with Keeper. Free 30-day trial available.
Features
Passwork
- Password & Vault Management
- Hierarchical vaults with folders and subfolders, Customizable password generator with complexity controls, Password history tracking, Custom fields, file attachments, and tagging
- Access Control & Permissions
- Granular role-based access control (RBAC), Fine-tuned access rights for users and groups, Separation of admin rights from data access, Custom permission settings
- Secrets Management & DevOps
- Built-in Secrets Manager, Service accounts with granular access scopes and token lifetime policies, Passwork CLI and Docker container for CI/CD, Official Python connector library
- Security & Auditing
- Zero-Knowledge architecture with multi-level encryption (AES-256, PBKDF2, RSA), Two-factor authentication (2FA/TOTP), Password security dashboard for complexity and risk assessment, Detailed event logging and audit trails
- Client Applications & Usability
- Browser extensions for Chrome, Firefox, Edge, and Safari, Native desktop applications, Mobile apps for iOS and Android, Standalone Passwork Authenticator app
Keeper
- Vault & Credentials
- Encrypted storage for passwords, passkeys, files and secrets, Secure sharing with granular permissions, Cross-device sync and offline access, Auto-fill for web and mobile apps
- Administration & Access Control
- Central Admin Console for policy enforcement, Two-factor authentication (2FA) and MFA options, Team and role-based access management, Vault transfer and emergency access
- Secrets & DevOps
- Secrets Manager for infrastructure credentials and API keys, Automated credential rotation, CI/CD pipeline integration, Developer tools (CLI, SDKs, VS Code)
- Privileged Access
- KeeperPAM for privileged session management, Secure remote access (RDP, SSH, VNC, databases), Session recording and audit trails, Just-in-time (JIT) access
- Compliance & Auditing
- Audit logging and reporting, SIEM integration for security monitoring, HIPAA, GDPR and other regulatory compliance support, Customizable compliance reports