Best open-source alternatives to 1Password

Vaultwarden is a self-hosted alternative server for the Bitwarden Client API, implemented in Rust and designed to work with the official Bitwarden desktop, mobile, and browser clients. It is aimed at users who want Bitwarden-compatible password management without running the official, more resource-intensive service. The project provides a broad set of Bitwarden features, including personal vault functionality, Send, attachments, organization support, two-factor authentication, emergency access, and an admin backend. It is typically deployed using container images, with Docker and Docker Compose examples provided, and the README recommends HTTPS and a reverse proxy for proper operation of the web vault. The project is positioned for individuals, families, and small organizations managing their own data.

Bitwarden Server is the backend project for Bitwarden’s client ecosystem. It contains the APIs, database, and supporting infrastructure used by Bitwarden applications, and is intended for developers and operators who need to build, run, or deploy the self-hosted server components. The project is implemented in C# on .NET Core with ASP.NET Core, and its database layer uses T-SQL/SQL Server. The README emphasizes cross-platform development and deployment on Windows, macOS, and Linux, and it provides Docker-based deployment scripts for both Unix-like systems and Windows. The repository also points contributors to separate server setup and contributing documentation for build instructions and workflow guidance.

2FAuth is a self-hosted web application for people who want to manage their two-factor authentication accounts outside of a phone-centric authenticator app. It is aimed at users who prefer to keep OTP secrets in a standalone database that can be backed up and restored, and at those who want a cleaner workflow for generating security codes on both desktop and mobile devices. The application lets a single user store 2FA accounts, organize them into groups, and generate HOTP, TOTP, and Steam Guard codes. It also supports importing accounts from several common authenticator formats, scanning QR codes, and adding entries manually. Security-focused features include optional encryption of stored sensitive data, security key sign-in, and automatic logout after inactivity.

AliasVault is an open-source password manager and email aliasing platform focused on privacy and self-hosting. It is designed for people who want to create unique identities, generate strong passwords, and use randomized email aliases for different websites while keeping sensitive data end-to-end encrypted. The project provides both a hosted cloud service and a self-hosted deployment path. Its ecosystem includes a responsive web app, browser extensions for autofill, native mobile apps, and a built-in email server. The README emphasizes zero-knowledge security, automatic migrations, and frequent incremental releases, suggesting it is aimed at individuals and teams who want a modern alternative to traditional password managers.

TeamPass is an on-premise collaborative password manager intended for teams and organizations that need to store and share credentials under their own control. The README positions it as a self-hosted solution with both a traditional PHP/MySQL installation path and an official Docker deployment option. It is aimed at administrators who want flexibility in how it is deployed and maintained. The project documents its runtime requirements, supports LDAP/AD authentication, and provides a REST API for integration. The README also notes optional components such as Redis, APCu, and a WebSocket daemon for real-time synchronization, suggesting it is designed for more advanced or high-availability environments.

This project is a backend for a personal management system designed to help one person keep track of many kinds of personal information in one place. The README frames it as similar in spirit to a CMS or CRM, but focused on private data management rather than business workflows. It includes modules for goals, notes, contacts, passwords, health, schedules, issues, travel planning, payments, shopping, job tracking, images, files, video, and reports. It is aimed at someone who wants a self-hosted, highly customizable system that can be extended with additional modules. The author emphasizes running it on a terminal or Raspberry Pi 24/7 on a home network, ideally without internet access, which suggests a local personal information hub rather than a cloud service. The backend is presented as part of a larger application with a separate frontend and online documentation, and a demo instance is publicly available.

Passbolt is an open source password manager designed for teams and organizations. It focuses on secure collaboration around credentials and secrets, providing centralized storage, organization, sharing, and auditing rather than a single-user vault experience. The project emphasizes security and privacy as core product traits. Its model uses user-owned secret keys and end-to-end encryption, and the README states that it is audited multiple times annually with public findings. Passbolt can be deployed on a self-hosted server and offers clients across browsers, mobile devices, CLI, and a desktop app preview, making it suitable for operational teams that need access from multiple platforms.

Zero-TOTP is a time-based one-time password client designed to store authenticator codes securely and make them accessible from multiple platforms. It is aimed at users who want to keep TOTP vaults encrypted with a zero-knowledge approach, so the service provider cannot read the data and only the user can decrypt it with a passphrase. The project is centered on a web app, with additional iOS and CLI clients mentioned in the README, and it also offers a rescue web frontend for vault recovery. It supports self-hosting through Docker-based deployment and emphasizes data availability through replication to multiple locations, including Google Drive and a local machine. The documentation also covers encryption and self-hosting details.