

It comes with a web interface, native clients for Windows, macOS, Linux, Android, and iOS, browser integrations for every major browser, and a command line interface.Īs with Passbolt, Bitwarden comes with some basic, free, features, and an extended feature set for premium users. Bitwardenīitwarden is another open source password manager that can be used as both a SaaS cloud service, or installed as a self-hosted service. But you need to do a little work to get database synchronization across devices working. Examples are KeePass2Android on Android, and Strongbox on iOS. But because KeePassXC uses the KDBX database format, other people have implemented compatible clients for both operating systems. There are no official KeePassXC apps for Android and iOS. One solution is to use a cloud-based file service, like Dropbox or Nextcloud. If that is something you need, you’ll have to facilitate it yourself. What KeePassXC is missing, though, is a built-in mechanism for synchronizing the database between multiple devices. On the more advanced side, KeePassXC features an SSH agent integration, and a command line interface.

KeePassXC also comes with a password generator, auto-type for automagically filling in login forms, 2FA support with TOTP generation (including Steam Guard), and browser integration through the KeyPassXC-Browser extension.

More advanced users can use a key file, a YubiKey challenge, or any combination of the three.

The database can be secured with a password. You can store usernames, passwords, notes and other information in an encrypted database. The password manager has all the features you’d except. But that KeePassXC doesn’t require the user to run any server software, makes it very easy to get up and running quickly. In this day and age, that might sound old fashioned. It’s not a web-based password manager, but an application that you download and install on your computer. KeePassXC, on the other hand, is in active development. The most recent KeePass release was back in 2016. I can’t use KeePass because it’s Windows only, and KeePassX hasn’t been in active development in quite a while. KeePassXC is an open source community fork of KeePassX, which is a cross-platform port of KeePass for Windows. All the screenshots I’ve found has an “alpha”-tag slapped to them, and several of the premium features are not yet implemented. I’m also not sure how mature Passbolt is. You’ll still have to purchase a subscription, which, as far as I can tell, will cost you the same as using the cloud-based version. But self-hosting doesn’t mean you get all the features. Passbolt can be used both as a SaaS cloud-service, or it can be self-hosted on your own server. Those features, and more, are only available in the paid premium version, starting at €19 per month. You’ll miss out on features like the admin panel, and multi-factor authentication. There’s a free community edition with unlimited users, but the features in the community edition are limited. Passbolt is primarily designed for teams and not individuals, which makes it rather pricey. The password manager features passwords sharing, filters, search, comments, user management, e-mail notifications, support for the KDBX database format, and browser integration. Passbolt describes itself as “free, open source, self-hosted, extensible”. While there are a lot of different password managers available, only a few of them are open source and supports self-hosting. The open source and self-hosting criteria limit the number of possible password managers. The password manager has to have an accompanying browser extension to make using it with a browser as user friendly as possible.Backing up the password manager’s database has to be hassle free.It has to be possible to synchronize the password manager’s database across multiple devices.This means that I can install and run it on my own server or computer. It has to be possible to self-host the password manager.The password manager has to work on the operating systems I use frequently: Windows, macOS, Linux, and Android.If it’s good enough, and the price is fair, I’d gladly pay for it. The password manager doesn’t have to be free as in beer ( gratis).There are no restrictions on how the password manager can be used. It has to be free as in speech ( libre).Open source code means that everyone can audit the code and make sure nothing fishy is going on. The password manager has to be open source.What is the best password manager is, of course, subjective. What is a Password Manager? covers the “what”, and Why Should I Use a Password Manager? covers the “why”. If you’re not sure what a password manager is, or why you should use one, I recommend you read two of my previous posts.
