Passbolt

Passbolt at a glance

Passbolt is an open-source, self-hostable password manager built for teams, with a focus on sharing credentials securely. Passbolt ships regular releases plus security fixes; as a system holding an organization's shared secrets, hardening and prompt patching are non-negotiable.

For admins Passbolt is maximally security-critical: it stores team credentials, so keep it current, behind TLS, and never exposed unprotected. Its model uses OpenPGP keys per user — protect the server and the users' private keys, and follow the hardening guide closely. Updates run database migrations — back up the database and the server's GPG keys first, and read the release notes. Apply security releases immediately. Enforce strong authentication and consider restricting access to trusted networks. After updating, verify that login, decryption and sharing work. The browser extension and clients update alongside. Track releases closely; patchletter surfaces new Passbolt versions so security fixes land at once.