About Passbolt
Passbolt is an open-source password and secret management platform designed for teams. It delivers end-to-end encryption with a public-private key architecture and can be deployed on-prem or in the Europe-hosted Passbolt Cloud. Built for agile and DevOps teams, it scales from small teams to large organizations while providing secure sharing, auditability, and granular access controls.
What Passbolt offers
- End-to-end encryption with a public-private key architecture (OpenPGP)
- Granular sharing with fine-grained permissions and principle of least privilege (PoLP) / Just-In-Time access (JIT)
- Personal and shared folders with tags, comments, and descriptions
- API-centric with CLI/SDKs for automation, CI/CD secret management, and secret retrieval
- On-premises or Europe-hosted cloud hosting with data encryption at rest and in transit
- SSO with Microsoft/Google and MFA support; account recovery with admin approval
- Native mobile and desktop apps; browser integration and in-form autofill
- Open-source (AGPL) with public audit reports; auditable activity logs
- TotP management and encrypted notes; supports plugins and integrations
- Comprehensive hosting options (self-hosted Pro, Cloud, and Enterprise) with SOC 2 Type II and ISO 27001 compliance
What sets Passbolt apart
- Open source and auditable: Passbolt’s source code is open and auditable, with independent third-party audits.
- Security-first and privacy-centric: end-to-end encryption, private keys stored on user devices, and MFA protections.
- European focus: Made in Europe with privacy-by-default and EU-hosted options for data sovereignty.
- Flexible hosting: deploy on-premises or in an EU cloud, with strong governance controls and configurable policies.
- Designed for teams: granular sharing, JIT access, SSO, and audit trails tailored for agile, DevOps, and IT teams.