#6 in Secrets & Key ManagementUpdated 2026-08

Passbolt

by Passbolt · Open source password and credential manager for teams

51.2 — BenchRank score out of 100

Homepage
Pricing page

Visit website See full Secrets & Key Management ranking

Overview

Passbolt is an open source password and credential manager for teams, handling passwords, TOTP codes, encrypted notes and custom fields. Secrets are encrypted on the user's device with an OpenPGP private key and shared through folders and groups with fine-grained permissions. It runs self-hosted or on Passbolt's European cloud, with browser extensions, mobile and desktop apps, a CLI and a JSON API.

Best for: Security-conscious IT teams that want a self-hosted, end-to-end encrypted password manager they control.
Pricing: Self-hosted Community Edition is free for unlimited users, Pro Edition is $4.9 per user per month billed annually with a 10-user minimum, and Enterprise Edition is quoted on request.
Runs on: iOSAndroidWindowsLinuxBrowser extensionSelf-hostedCLI

Strengths and trade-offs

Strengths

Open source under AGPL v3, including the paid editions
Free Community Edition with unlimited users and instances
Self-host via Docker, Helm, Linux packages or air-gapped
Secrets encrypted per user with an OpenPGP private key

Trade-offs

Pro Edition needs a minimum of 10 users and allows only one instance
SSO, LDAP provisioning, tags and activity logs are Pro-only features
Pro will not run without the subscription key file sent after purchase
Expired subscription means no further updates or vendor support

Pricing

Published plans from Passbolt’s own pricing page, in USD. Usage charges and add-ons may apply on top.

Passbolt pricing tiers, monthly and annual rates in USD
Plan	Monthly	Annual (per month)	Includes
Community Edition	—per user	—	Free forever with unlimited users and instances Password management, sharing and private/shared folders Users, groups and role-based access control Browser extensions, CLI and open API; community support
Pro Edition	—per user	$4.9	Everything in Community Edition, minimum 10 users, one instance LDAP provisioning and SSO with Microsoft, Google and OpenID Account recovery (escrow), tags and activity log VM appliance and next business day support
Enterprise Edition	Contact sales	—	Everything in Pro Edition, priced on quote High availability and disaster recovery consulting White glove migration and hosting, custom feature development 4 hour SLA phone and email support during business hours

How this score is made up

Each dimension is scored out of 100 and combined into the headline score using fixed weights.

MCP support: 0 out of 100
API quality: 0 out of 100
Documentation: 70 out of 100
Agent friendliness: 57 out of 100
Pricing transparency: 100 out of 100
Changelog: 100 out of 100
Marketing site structure: 90 out of 100
Operational trust: 70 out of 100

Measured, but not part of the score

Useful to know, but not a mark for or against the product — so these do not affect the ranking.

Openness: 65 out of 100
Maintenance: 100 out of 100

This doesn’t look right — report a problem with Passbolt’s score

Alternatives in Secrets & Key Management

Ranked 1
70.2 — BenchRank score out of 100
Infisical
Infisical · Secrets, certificate and privileged access management for developers
Best for: Engineering teams wanting secrets, certificates and privileged access managed on one platform
Ranked 2
65.5 — BenchRank score out of 100
Unkey
UnKey · API deployment, gateway and observability on one platform
Best for: Teams that want API deployment, key auth, rate limiting and logs from a single vendor
Ranked 3
59.5 — BenchRank score out of 100
Bitwarden
Bitwarden · Open source credential manager for people, AI agents and machines
Best for: Businesses wanting an open source, self-hostable password manager with SSO, SCIM and event logs