Passbolt
🇱🇺 LU · Free plan · paid from €4.50/user/mo
4.6/5· 50 reviews across 3 portals
Open-source team password manager with end-to-end encryption
Replaces
Passbolt is sought as a European alternative to:
Features
Credential & Secret Management
- Secure storage of passwords, TOTP, and encrypted notes
- Custom fields and secret history tracking
- Password expiry policies
Collaboration & Access Control
- Private and shared folder structures
- Granular sharing permissions and tagging
- Role-Based Access Control (RBAC) and user/group management
Security & Authentication
- Per-user/per-secret end-to-end encryption (OpenPGP)
- Zero-knowledge metadata mode
- Multi-factor authentication (MFA/2FA) with Duo, YubiKey NFC, and TOTP
- Anti-phishing token mechanism
Client Applications & Usability
- Browser extensions (Chrome, Firefox, Edge, Brave)
- Native desktop (Windows) and mobile apps (iOS, Android)
- Command Line Interface (CLI) and offline vault mode
- KDBX/CSV import and export
Administration & Compliance
- Activity audit logs with SIEM/Syslog export
- Self-registration with domain allowlists
- Centralized account recovery (Escrow)
- Server health checks
Pricing
- Open-source (AGPLv3)
- Self-hosted deployment
- Volume discounts above 100 users
- Free trial on request
- High availability/disaster recovery consulting
- Custom SLA and phone support
- Hosted in Google Cloud (Belgium, Germany)
- 7-day free trial
- Hosted in Luxembourg (sovereign private data center)
- Compliant with ISO 27001, GDPR, NIS2, DORA
- Isolated container deployments
- 24/7 SOC monitoring and 4-hour SLA
Volume discounts apply for Pro Edition above 100 users. Custom pricing for Enterprise and Cloud Enterprise plans.
EU Trust Profile
What we verified against public sources, last checked 2026-09-25. Every point links to its evidence.
- Evidence →EU data residency
All Passbolt Cloud customer workspace data and databases are hosted in Europe using Google Cloud Platform.
- Evidence →European legal entity
Passbolt SA is a Société Anonyme registered in Luxembourg (Trade Registry No. B211048).
- Evidence →Data Processing Agreement (DPA)
Public Data Processing Agreement for Passbolt Cloud Edition.
- Evidence →Public sub-processor list
Subprocessor list is included in Schedule 1 of the DPA.
- Evidence →Trust center / security page
Dedicated security and privacy pages outline Passbolt's security model and compliance posture.
- Evidence →SOC 2
SOC 2 Type II audit report available to customers on demand.
- Evidence →Self-hosting available
Self-hosted and air-gapped deployment options are documented.
- Evidence →Open sourceGNU AGPLv3
- Evidence →Documented data exportKDBX, CSV
Export functionality for passwords and resources is documented.
- Evidence →Local-language support
Support is available in French as per the regulatory authority contact point.
We list only what we could verify against a public source on the check date. A point that is absent was not established either way — it is not a finding against the vendor. The vendor's own information prevails.
Work at Passbolt?
This badge is free for every vendor we list and has no bearing on the order of any list. It is issued on the basis of a verified European headquarters (LU) and the compliance points we checked against public sources — the date on it is the date we last checked.
Embed code
<a href="https://tech-from-europe.eu/product/passbolt"><img src="https://tech-from-europe.eu/badge/passbolt.svg" alt="Passbolt — verified European company on tech-from-europe.eu" height="164"></a>Plain HTML: an SVG served from our domain, with no JavaScript, no cookies and no tracking of your visitors. Add ?style=card for the wide variant, or swap .svg for .png where a CMS refuses SVG. Whether you nofollow the link is your call — we do not check.
Claiming the profile with a work email gets you the artwork as PNG, a form for correcting anything we got wrong, and a note whenever we re-check you.
Claim this profile →Something wrong on this page? Write to hello@tech-from-europe.eu with a public link and we will re-check it.
Reviews
Recurring themes, synthesized from public reviews across portals.
What users value
- Open-source architecture with full transparency and auditability
- Self-hosting capability for complete data control behind own firewalls
- Zero-knowledge, OpenPGP end-to-end encryption for client-side credential security
- Granular team password sharing with intuitive role-based access control (RBAC)
- Free Community Edition with full functionality for startups and budget-conscious teams
- Lightweight and fast core web application performance
- Responsive community forum and open developer support for feedback and bug fixes
Where users see room to improve
- · Complex setup and deployment requiring DevOps and command-line skills
- · Clunky browser extension with frequent session timeouts and re-login prompts
- · Limited vault item types (focused on logins/passwords, lacking support for credit cards, secure notes, etc.)
Ratings across portals
Linked facts, we bring ratings from every portal together in one place.
Integrations
Passbolt: frequently asked questions
- How much does Passbolt cost?
- Passbolt has a free plan; paid plans start at €4.50/user/mo. Plans: Pro Edition (Self-Hosted) (€4.50/user/mo), Cloud Business (€5/user/mo), Cloud Sovereign (€7/user/mo). Volume discounts apply for Pro Edition above 100 users. Custom pricing for Enterprise and Cloud Enterprise plans.
- Which tools does Passbolt integrate with?
- Passbolt connects with Microsoft Entra ID, Google Workspace, OpenID Connect (OIDC) IdPs (Keycloak, Okta), Microsoft AD FS, PingOne, SCIM 2.0 (Microsoft Entra ID, Okta), LDAP / LDAPS (Microsoft Active Directory, OpenLDAP) and Duo Security, plus 3 more integrations we found.
- Where does Passbolt store its data?
- All Passbolt Cloud customer workspace data and databases are hosted in Europe using Google Cloud Platform. Public Data Processing Agreement for Passbolt Cloud Edition.
Other vendors in Password Management Software
- Psono🇩🇪Open-source password manager with zero-knowledge encryption for teams
- Proton Pass🇨🇭Open-source password manager with end-to-end encryption and dark web monitoring
- heylogin🇩🇪Passwordless team password manager with hardware-backed security
- Passwork🇪🇸EU-hosted password and secrets manager for teams
- Hypervault🇧🇪Belgian password manager and digital vault for teams
- NordPass🇱🇹Zero-knowledge password manager with EU hosting and breach scanning
- PassCamp🇱🇹Lithuanian team password manager with zero-knowledge encryption
- Padloc🇩🇪Open-source password manager with end-to-end encryption and EU hosting
- Uniqkey🇩🇰Business password and access management with EU-only hosting
Feature, pricing and integration details are based on web research (as of 2026-09-25), without guarantee, errors are possible. The vendor's website prevails.