Passbolt

Passbolt is a password manager built for teams, with end-to-end encryption and user-owned secret keys. The Community Edition gives you password management, shared folders, browser extensions, mobile apps, CLI access, and 2FA. No user limits, no password limits.

Self-hosting runs on PHP with MySQL or PostgreSQL. Docker and VM appliance options are available. The setup is straightforward, and the security model is solid: regular third-party audits with published findings. Ongoing maintenance is light if you keep PHP and the database healthy.

Solo and small teams get a capable password manager for free. Once you need LDAP provisioning, SSO (Microsoft, Google, OpenID), or audit logging, you are looking at the Business tier at $4.90/user/month (minimum 10 users). That is a fair paywall. SSO and audit logs are enterprise features that cost real money to build.

The catch: the 10-user minimum on the Business plan means small teams pay $49/month even if they only have 3 people who need SSO. If that pricing math does not work, Vaultwarden covers similar ground with a lighter footprint.