Passbolt review (2026): features, pros and cons, and what to check before you buy
An open-source, OpenPGP-based password manager for teams that can be self-hosted or run as a hosted service.
Our take for buyers
Passbolt is an open-source, OpenPGP-based password manager for teams, available self-hosted or as a hosted service. Secrets are encrypted per user, and the code is fully open source. The vendor is registered in Luxembourg, which appeals to EU organizations. G2 shows a 4.3 rating from 15 reviews, so public review volume is small. Pro adds LDAP provisioning, SSO and an activity log.
It suits technical teams that want to self-host and audit the code. It is a weaker fit for non-technical teams that need effortless onboarding, and for buyers who need a published data-residency statement for the hosted service. Reviewers like easy password sharing in teams but report a flaky browser extension.
Pros
- Easy password sharing in teams.
- Open source and auditable.
Cons
- First-time user onboarding is hard.
- Browser extension can be flaky.
- Best for
- Technical teams that want to self-host and audit the code.
- Starting price
- $4.90 per user per month (Pro, billed annually, min 10 users)
- G2 rating
- 4.3 (15 reviews)
What is Passbolt?
An open-source, OpenPGP-based password manager for teams that can be self-hosted or run as a hosted service. Technical teams who want to audit the code and host it themselves are the intended users, with a free Community edition. Pro adds LDAP provisioning, SSO and activity logs, from $4.90 per user monthly for at least 10 users. Non-technical staff may struggle with first-time onboarding. Passbolt is based in Luxembourg.
Category: Business Password Managers
Passbolt key features
| Criterion | What we found |
|---|---|
| Shared vaults and permissions | Per-secret OpenPGP encryption for each authorized user; folder and group sharing. |
| SSO and directory sync | Pro: LDAP (AD/OpenLDAP) provisioning and SSO via Microsoft, Google, OpenID; SCIM and AD FS listed as Pro features but checkmarks not confirmed. |
| Admin console and reporting | Pro: activity log of changes; log export to syslog listed (plan not confirmed) |
| Encryption and security record | OpenPGP, secrets encrypted per user, fully open source; Cure53 audits through 2026; SOC 2 Type II (2021) |
| Pricing model | Free Community, per-user Pro with 10 user minimum, custom Enterprise. |
| Target company size | SMB to enterprise, technical teams. |
Passbolt plans and pricing
| Plan | Price | Unit | Notes |
|---|---|---|---|
| Community | Free | unlimited users | Open source AGPLv3, community support |
| Pro | $4.90 | per user per month, billed annually | Min 10 users, volume discount after 100 users, limited to 1 instance |
| Enterprise | Custom quote | HA/DR consulting, 4-hour SLA phone and email support |
Pro runs on a subscription key emailed after purchase; adding users needs a new key from sales. Expired Pro keeps running without updates or support.
Who should shortlist Passbolt
A strong fit for
- Technical teams that want to self-host and audit the code.
- EU organizations that value Luxembourg-registered vendor and open source.
A weak fit for
- Non-technical teams that need effortless onboarding.
- Buyers needing a published data-residency statement for the hosted service.
Passbolt alternatives
BitwardenBudget-conscious teams: $4 per user per month for Teams.
Keeper SecurityRegulated or government-adjacent buyers needing FedRAMP, FIPS 140-3 or HIPAA alignment.
1PasswordSmall teams of up to 20 via the Starter Pack.
NordPassCost-focused SMBs on Google Workspace.
Proton PassPrivacy-first teams in Europe.
DashlaneSmall and mid-size teams that want a polished employee-facing app.
Security, admin and compliance
Passbolt lists SOC 2 Type II, dated 2021, with the report on request, and says it has Cure53 audits through 2026. The code is fully open source. SSO via Microsoft, Google and OpenID and an activity log are Pro features, while SCIM and AD FS are listed as Pro but not confirmed. Hosted data location is not stated, though you can self-host anywhere. A DPA is not published. Contract terms are annual, and custom terms are not reviewed under EUR 20K per year.
- SAML SSO
- Pro (Microsoft, Google, OpenID); AD FS listed as Pro, unconfirmed.
- SCIM provisioning
- Listed as Pro feature, unconfirmed.
- Audit logs
- Pro activity log.
- Data residency
- Self-host anywhere; hosted location not stated; vendor registered in Luxembourg.
- Certifications
- SOC 2 Type II (2021, report on request), Cure53 audits.
Contract and buying terms
- Contract
- Billed annually; no custom terms review under EUR 20K per year.
- Implementation
- Self-hosting via script, Docker, VM or source.
- Support
- Community; Pro next business day (Mon 9AM to Fri 6PM CET); Enterprise 4-hour SLA phone and email.
- Starting price
- $4.90 per user per month (Pro, billed annually, min 10 users)
- Pricing model
- Per user.
- Free plan or trial
- Free plan.
What to test in a Passbolt demo or trial
Install the Community edition first, using the script, Docker, VM or source options, and time how long a non-technical colleague takes to onboard, because first-time onboarding is a common complaint. Test per-secret sharing with folders and groups, then the browser extension on every browser you support, since reviewers call it flaky. Pro features to test include LDAP provisioning, SSO via Microsoft, Google or OpenID, and the activity log. Ask the vendor to confirm SCIM, AD FS and syslog log export, which are listed but whose plans are not confirmed.
Questions to ask Passbolt before you sign
These are the points Passbolt's public pages leave open. Get the answers in writing before procurement signs off.
- Can we sign your standard DPA without changes?
- What will the price be at renewal, and is the increase capped?
Things to know before a demo
- Pro requires 10 users minimum and a subscription key; adding users means contacting sales.
- Passbolt does not review custom terms for contracts under EUR 20K per year.
- Lapsed Pro keeps working but loses updates and support.
- SOC 2 Type II dates from 2021 per its security page.
Passbolt FAQ
What is Passbolt used for?
Technical teams who want to audit the code and host it themselves are the intended users, with a free Community edition. Pro adds LDAP provisioning, SSO and activity logs, from $4.90 per user monthly for at least 10 users. Non-technical staff may struggle with first-time onboarding. It suits technical teams that want to self-host and audit the code.
Does Passbolt support SSO?
Yes, on Pro, with SSO via Microsoft, Google and OpenID, plus LDAP provisioning. AD FS and SCIM are listed as Pro features, but ask the vendor to confirm them before relying on them.
Where is Passbolt data stored?
If you self-host, anywhere you choose. For the hosted service the location is not stated, and the vendor is registered in Luxembourg, so ask for a written data-residency statement.
Does Passbolt have security audits?
Passbolt lists Cure53 audits through 2026 and a SOC 2 Type II report from 2021, available on request. Ask whether a newer report exists.
Vendor profile
- Headquarters
- Luxembourg.
Sources
Every fact on this page comes from Passbolt's own pricing, product or documentation pages, G2 and company records, checked on October 24, 2026. Unknown values are left out instead of estimated.