Passbolt Password Manager

Passbolt SA is a European company based in Luxembourg, founded in 2016, that develops Passbolt, an open source password and credential manager for teams. It addresses the problem of shared credentials being kept in chat, spreadsheets or unmanaged tools.

Passbolt encrypts every password individually with OpenPGP, keeps private keys on user devices and offers browser extensions, desktop and mobile apps. It can be self-hosted, including air-gapped networks, or used as Passbolt Cloud in Europe, with API, CLI and SDKs for secret retrieval. Named customers include Bosch and public bodies in France and Luxembourg.

• Password management: Auto-fill, auto-save and password generation in browser, desktop and mobile apps.
• Per-password encryption: Each secret is encrypted with OpenPGP and private keys stay on user devices.
• Access control: Fine-grained permissions, just-in-time access and fast revocation.
• Provisioning and SSO: Automated user and group provisioning with SSO and MFA via YubiKey, Duo and TOTP.
• Secret management: Retrieval and rotation of machine secrets through API, CLI and SDKs.
• Audit trail: Real-time activity monitoring with exportable logs.

An IT team at a Vietnamese software or outsourcing firm can share server and SaaS credentials by project with revocation at offboarding. A bank or public agency needing air-gapped hosting can run Passbolt on-premises. DevOps teams can pull secrets into CI/CD pipelines through the CLI.

Open source code that can be audited, with independent third-party audits several times a year. Self-hosted or cloud deployment lets a company keep data in its chosen region. Group sharing, SSO and audit trails give administrators control over who holds which credential. Recovery with admin approval reduces lockouts.

Credential theft remains a common route into company systems, and small teams in Vietnam and Southeast Asia often still share passwords through chat or spreadsheets. Open source and self-hosted password managers appeal to organisations with data residency or sovereignty concerns.

Passbolt SA is headquartered in Belvaux, Luxembourg, founded 2016. In 2026 it completed a GDPR audit and appointed a DPO (July) and entered the CSPN certification process (June). Paid editions are also open source.