tech from europe

Passbolt

🇱🇺 LU · Free plan · paid from €4.50/user/mo

Open-source team password manager with end-to-end encryption

EU hostedGDPROpen sourceFree planISO 27001SOC 2 Type II
Passbolt is a Luxembourg-based open-source password manager for teams and enterprises. It offers client-side end-to-end encryption, granular credential sharing, RBAC, and audit logs. Cloud hosting is EU-only, with SOC 2 Type II and ISO 27001 certifications. A free self-hosted Community Edition is available.

Replaces

Passbolt is sought as a European alternative to:

Features

Credential & Secret Management

  • Secure storage of passwords, TOTP, and encrypted notes
  • Custom fields and secret history tracking
  • Password expiry policies

Collaboration & Access Control

  • Private and shared folder structures
  • Granular sharing permissions and tagging
  • Role-Based Access Control (RBAC) and user/group management

Security & Authentication

  • Per-user/per-secret end-to-end encryption (OpenPGP)
  • Zero-knowledge metadata mode
  • Multi-factor authentication (MFA/2FA) with Duo, YubiKey NFC, and TOTP
  • Anti-phishing token mechanism

Client Applications & Usability

  • Browser extensions (Chrome, Firefox, Edge, Brave)
  • Native desktop (Windows) and mobile apps (iOS, Android)
  • Command Line Interface (CLI) and offline vault mode
  • KDBX/CSV import and export

Administration & Compliance

  • Activity audit logs with SIEM/Syslog export
  • Self-registration with domain allowlists
  • Centralized account recovery (Escrow)
  • Server health checks

Pricing

Community Edition (Self-Hosted)
Free Unlimited users
  • Open-source (AGPLv3)
  • Self-hosted deployment
Pro Edition (Self-Hosted)
€4.50 per user / month, billed annually (min. 10 users)
  • Volume discounts above 100 users
  • Free trial on request
Enterprise Edition (Self-Hosted)
On request Custom annual subscription
  • High availability/disaster recovery consulting
  • Custom SLA and phone support
Cloud Business
€5 per user / month, billed monthly (min. 10 users)
  • Hosted in Google Cloud (Belgium, Germany)
  • 7-day free trial
Cloud Sovereign
€7 per user / month, billed annually (min. 10 users)
  • Hosted in Luxembourg (sovereign private data center)
  • Compliant with ISO 27001, GDPR, NIS2, DORA
Cloud Enterprise
On request Custom annual subscription
  • Isolated container deployments
  • 24/7 SOC monitoring and 4-hour SLA

Volume discounts apply for Pro Edition above 100 users. Custom pricing for Enterprise and Cloud Enterprise plans.

EU Trust Profile

What we verified against public sources, last checked 2026-09-25. Every point links to its evidence.

  • EU data residency

    All Passbolt Cloud customer workspace data and databases are hosted in Europe using Google Cloud Platform.

    Evidence →
  • European legal entity

    Passbolt SA is a Société Anonyme registered in Luxembourg (Trade Registry No. B211048).

    Evidence →
  • Data Processing Agreement (DPA)

    Public Data Processing Agreement for Passbolt Cloud Edition.

    Evidence →
  • Public sub-processor list

    Subprocessor list is included in Schedule 1 of the DPA.

    Evidence →
  • Trust center / security page

    Dedicated security and privacy pages outline Passbolt's security model and compliance posture.

    Evidence →
  • SOC 2

    SOC 2 Type II audit report available to customers on demand.

    Evidence →
  • Self-hosting available

    Self-hosted and air-gapped deployment options are documented.

    Evidence →
  • Open sourceGNU AGPLv3
    Evidence →
  • Documented data exportKDBX, CSV

    Export functionality for passwords and resources is documented.

    Evidence →
  • Local-language support

    Support is available in French as per the regulatory authority contact point.

    Evidence →

We list only what we could verify against a public source on the check date. A point that is absent was not established either way — it is not a finding against the vendor. The vendor's own information prevails.

Work at Passbolt?

This badge is free for every vendor we list and has no bearing on the order of any list. It is issued on the basis of a verified European headquarters (LU) and the compliance points we checked against public sources — the date on it is the date we last checked.

Passbolt — verified European company on tech-from-europe.euPassbolt — verified European company on tech-from-europe.eu

Embed code

<a href="https://tech-from-europe.eu/product/passbolt"><img src="https://tech-from-europe.eu/badge/passbolt.svg" alt="Passbolt — verified European company on tech-from-europe.eu" height="164"></a>

Plain HTML: an SVG served from our domain, with no JavaScript, no cookies and no tracking of your visitors. Add ?style=card for the wide variant, or swap .svg for .png where a CMS refuses SVG. Whether you nofollow the link is your call — we do not check.

Claiming the profile with a work email gets you the artwork as PNG, a form for correcting anything we got wrong, and a note whenever we re-check you.

Claim this profile →

Something wrong on this page? Write to hello@tech-from-europe.eu with a public link and we will re-check it.

Reviews

Recurring themes, synthesized from public reviews across portals.

What users value

  • Open-source architecture with full transparency and auditability
  • Self-hosting capability for complete data control behind own firewalls
  • Zero-knowledge, OpenPGP end-to-end encryption for client-side credential security
  • Granular team password sharing with intuitive role-based access control (RBAC)
  • Free Community Edition with full functionality for startups and budget-conscious teams
  • Lightweight and fast core web application performance
  • Responsive community forum and open developer support for feedback and bug fixes

Where users see room to improve

  • · Complex setup and deployment requiring DevOps and command-line skills
  • · Clunky browser extension with frequent session timeouts and re-login prompts
  • · Limited vault item types (focused on logins/passwords, lacking support for credit cards, secure notes, etc.)

Integrations

Microsoft Entra IDGoogle WorkspaceOpenID Connect (OIDC) IdPs (Keycloak, Okta)Microsoft AD FSPingOneSCIM 2.0 (Microsoft Entra ID, Okta)LDAP / LDAPS (Microsoft Active Directory, OpenLDAP)Duo SecurityYubiKey (WebAuthn/FIDO2, NFC)SMTP (OAuth for Microsoft Exchange Online)Syslog

Feature, pricing and integration details are based on web research (as of 2026-09-25), without guarantee, errors are possible. The vendor's website prevails.