TeamPass

TeamPass at a glance

TeamPass is an open-source, self-hosted collaborative password manager built for teams to share credentials with fine-grained access control. TeamPass ships regular releases plus security fixes; as a system holding an organization's shared secrets, hardening and prompt patching are non-negotiable.

For admins TeamPass is maximally security-critical: it stores team credentials, so keep it current, behind TLS, and never exposed unprotected. Being PHP-based, keep the underlying PHP and database supported, and apply security releases immediately, since a password manager is a top-value target. Updates can include database changes — back up the database and the encryption keys first (losing the keys means losing access to the stored secrets). Enforce strong authentication and consider restricting access to trusted networks. After updating, verify that login, decryption and sharing work. Guard the backups as carefully as the live system. Track releases closely; patchletter surfaces new TeamPass versions so security fixes land at once.