Passbolt
🇱🇺 LU · Free plan · paid from €4.50/user/mo
Open-source team password manager with end-to-end encryption
Replaces
Passbolt is sought as a European alternative to:
Features
Credential & Secret Management
- Secure storage of passwords, TOTP, and encrypted notes
- Custom fields and secret history tracking
- Password expiry policies
Collaboration & Access Control
- Private and shared folder structures
- Granular sharing permissions and tagging
- Role-Based Access Control (RBAC) and user/group management
Security & Authentication
- Per-user/per-secret end-to-end encryption (OpenPGP)
- Zero-knowledge metadata mode
- Multi-factor authentication (MFA/2FA) with Duo, YubiKey NFC, and TOTP
- Anti-phishing token mechanism
Client Applications & Usability
- Browser extensions (Chrome, Firefox, Edge, Brave)
- Native desktop (Windows) and mobile apps (iOS, Android)
- Command Line Interface (CLI) and offline vault mode
- KDBX/CSV import and export
Administration & Compliance
- Activity audit logs with SIEM/Syslog export
- Self-registration with domain allowlists
- Centralized account recovery (Escrow)
- Server health checks
Pricing
- Open-source (AGPLv3)
- Self-hosted deployment
- Volume discounts above 100 users
- Free trial on request
- High availability/disaster recovery consulting
- Custom SLA and phone support
- Hosted in Google Cloud (Belgium, Germany)
- 7-day free trial
- Hosted in Luxembourg (sovereign private data center)
- Compliant with ISO 27001, GDPR, NIS2, DORA
- Isolated container deployments
- 24/7 SOC monitoring and 4-hour SLA
Volume discounts apply for Pro Edition above 100 users. Custom pricing for Enterprise and Cloud Enterprise plans.
EU Trust Profile
What we verified against public sources, last checked 2026-09-25. Every point links to its evidence.
- Evidence →EU data residency
All Passbolt Cloud customer workspace data and databases are hosted in Europe using Google Cloud Platform.
- Evidence →European legal entity
Passbolt SA is a Société Anonyme registered in Luxembourg (Trade Registry No. B211048).
- Evidence →Data Processing Agreement (DPA)
Public Data Processing Agreement for Passbolt Cloud Edition.
- Evidence →Public sub-processor list
Subprocessor list is included in Schedule 1 of the DPA.
- Evidence →Trust center / security page
Dedicated security and privacy pages outline Passbolt's security model and compliance posture.
- Evidence →SOC 2
SOC 2 Type II audit report available to customers on demand.
- Evidence →Self-hosting available
Self-hosted and air-gapped deployment options are documented.
- Evidence →Open sourceGNU AGPLv3
- Evidence →Documented data exportKDBX, CSV
Export functionality for passwords and resources is documented.
- Evidence →Local-language support
Support is available in French as per the regulatory authority contact point.
We list only what we could verify against a public source on the check date. A point that is absent was not established either way — it is not a finding against the vendor. The vendor's own information prevails.
Work at Passbolt?
This badge is free for every vendor we list and has no bearing on the order of any list. It is issued on the basis of a verified European headquarters (LU) and the compliance points we checked against public sources — the date on it is the date we last checked.
Embed code
<a href="https://tech-from-europe.eu/product/passbolt"><img src="https://tech-from-europe.eu/badge/passbolt.svg" alt="Passbolt — verified European company on tech-from-europe.eu" height="164"></a>Plain HTML: an SVG served from our domain, with no JavaScript, no cookies and no tracking of your visitors. Add ?style=card for the wide variant, or swap .svg for .png where a CMS refuses SVG. Whether you nofollow the link is your call — we do not check.
Claiming the profile with a work email gets you the artwork as PNG, a form for correcting anything we got wrong, and a note whenever we re-check you.
Claim this profile →Something wrong on this page? Write to hello@tech-from-europe.eu with a public link and we will re-check it.
Reviews
Recurring themes, synthesized from public reviews across portals.
What users value
- Open-source architecture with full transparency and auditability
- Self-hosting capability for complete data control behind own firewalls
- Zero-knowledge, OpenPGP end-to-end encryption for client-side credential security
- Granular team password sharing with intuitive role-based access control (RBAC)
- Free Community Edition with full functionality for startups and budget-conscious teams
- Lightweight and fast core web application performance
- Responsive community forum and open developer support for feedback and bug fixes
Where users see room to improve
- · Complex setup and deployment requiring DevOps and command-line skills
- · Clunky browser extension with frequent session timeouts and re-login prompts
- · Limited vault item types (focused on logins/passwords, lacking support for credit cards, secure notes, etc.)
Integrations
Feature, pricing and integration details are based on web research (as of 2026-09-25), without guarantee, errors are possible. The vendor's website prevails.