Passbolt - Open source password manager for teams by passbolt

Passbolt is an open source password manager designed for collaboration. Securely create, manage and monitor your passwords. Share them instantly with your team.

4.4 (57 reviews)

26,654 Users

You'll need Firefox to use this extension

Download Firefox and get the extension

Download file

About this extension

Passbolt is an open source password manager designed for collaboration. You can securely generate, store, manage and monitor your team credentials.

Get access to all of your logins and passwords from multiple browsers or even your mobile phone. Create strong random passwords, thanks to the fully customizable password generator, and share them instantly with your team.

Passbolt is built on top of an open API made for developers and agile teams. Passbolt is extensible and yet usable by everyone. No technical knowledge is required to use it.

This is why Passbolt is trusted by small businesses, as well as government offices, regulated industries, and privacy-conscious organizations:

Boost collaboration & productivity:
- Easily share one password, or a folder with a single user or a group of users;
- Use personal or shared tags to identify passwords and secrets;
- Give specific access rights to a user or group;
- Get detailed reporting on access & change history.

Security by design. Audited and certified:
- True end-to-end encryption;
- Interoperable cryptography based on OpenPGP;
- Full control your own encryption key;
- Access revocation that actually works;
- Regularly audited by independent auditors.

Made in Europe.  Privacy by default:
- Host it in our cloud, located in Europe;
- Or self-host it for full data ownership;
- No tracker, no strings attached.

Passbolt source code comes under an AGPL license (yes even the commercial version) and is publicly available. You are free to audit it, contribute to it, or redistribute it.

This add-on is required to use the software, in order to provide advanced security features as well as functionality such as password auto filling on web pages.

Get started now:
https://www.passbolt.com/cloud/signup

Check out the source code:
https://github.com/passbolt

Rated 4.4 by 57 reviewers

Release notes for 5.3.2

Passbolt v5.3.2 is a security release designed to strengthen the security posture of your organization. It introduces a
clipboard flushing feature and addresses issues related to encrypted metadata.

The new clipboard flush timer lets you copy secrets just long enough to use them; clipboard data is automatically cleared
when the countdown (30s) expires, significantly reducing the risk of accidental exposure or leaks from forgotten clipboard content.

This update also resolves several encrypted metadata issues, moving the feature closer to general availability.
Organizations can now enable encrypted metadata even if users have imported their own more complex keys
(e.g. keys that were set to expire at some point), streamlining adoption for advanced users. Admin changes are smoother
too: if the original metadata-enabling administrator leaves, newly invited users will still receive the metadata key automatically,
removing the need for manual distribution. Lastly, users who owned shared resources using the new encrypted metadata format can now be deleted without issue, as ownership transfer is now handled correctly during the deletion process.

A big thank you to all testers who helped refine these features. If you’re new to any of them, we welcome your feedback on the community forum or through your usual support channels!

[5.3.2] - 2025-07-16

Added

PB-25265 Flush clipboard strategy
PB-43095 Display the metadata issue in the HealthCheck served by the UI
PB-43403 Search resources should take into account available custom fields information in the web application
PB-43474 As LU I should be able to clear the search field with a button

Fixed

PB-43916 Fix hitting the key enter on the search fields
PB-43996 Users should access encrypted metadata section of the administration guide on the help site when clicking on the documentation CTA from the sidebar

Maintenance

PB-43491 The resource activities should use a service worker service to request the service worker
PB-43496 The user should be notified if an error occurs while displaying additional resource activities
PB-43501 Cover ActionLogService API service and rename class as per naming convention
PB-43502 Move logic of ActionLogModel into FindActionLogService
PB-43506 Move logic of event passbolt.actionlogs.find-all-for into its dedicated Controller
PB-43738 Create DeleteUserService to call the userService deleteDryRun
PB-43739 Create DeleteDryRunUserController to call the DeleteUserService
PB-43750 An unexpected error should be displayed on delete user
PB-43904 Add a service to request or send data CommentsServiceWorkerService
PB-43907 Add tests for commentService API service and rename the service class as per naming convention
PB-43938 Create a GetOrFindMetadataKeysSettingsController to retrieve the metadata keys settings
...

Required permissions: