Open-source Apple Passwords alternatives

KeePassXC is a modern, open-source password manager for Windows, macOS and Linux. It began as a community port of the Windows program KeePass Password Safe and is aimed at people with demanding requirements for managing sensitive personal data securely.

It stores usernames, passwords, URLs, attachments and notes in an encrypted file that works offline and can live anywhere, including private or public cloud storage that you sync yourself. Entries have custom titles and icons and are sorted into customizable groups, and a search function supports advanced patterns. A built-in password generator can create strings with any mix of characters or easy-to-remember passphrases, and topics mention YubiKey support.

The app is written in C++ and has a quick-start guide plus pre-compiled binaries on the downloads page. Its license is listed as 'Other' on GitHub, so confirm the terms for your use. Because there is no vendor account or server, it is a good fit for users who want local control of their password database instead of a hosted password service.

Bitwarden is a password manager, and this repository contains its server side: the APIs, database and other core infrastructure that all Bitwarden client applications connect to. The code is written in C# on .NET Core with ASP.NET Core, and the database layer is written in T-SQL for SQL Server.

The server can be developed, built, run and deployed on Windows, macOS and Linux. For deployment, the project provides Docker containers along with PowerShell and Bash scripts that bootstrap an installation, and the images are published on GitHub Container Registry. The services include Admin, API, Billing, Events, Identity, Notifications, SCIM and SSO components.

Organizations that want to keep their vaults on their own infrastructure can follow the on-premise install guide in the Bitwarden help center, which requires Docker and Docker Compose. Bitwarden also runs managed cloud clusters in the US and EU. The repository lists its license as 'Other', so check the license files for the exact terms.

MacPass is a native macOS client for KeePass databases in the kdbx format. It started as an attempt to provide a good-looking, feature-complete KeePass client for the Mac, and its author says no other native macOS client is fully open source. After a period with few updates, the maintainer says they hope to revive it.

Topics mention auto-type, kdbx and plugins. The README includes security notes: users should upgrade to version 0.8.2 or later, disable automatic plugin updates on older versions, and keep the default setting that refuses unsigned or wrongly signed plugins. Releases should be taken only from the official GitHub page, since an old website domain was dropped and the site now lives at macpass.app.

Pre-built releases and an unsigned continuous build are available on GitHub, and building from source needs Carthage and Xcode. MacPass is written in Objective-C, and the repository lists the license as Other, so check the licence file. It suits Mac users who keep their passwords in a KeePass-compatible file.

AliasVault is a privacy-focused password manager that also creates unique identities and random email aliases for each website you sign up to. Data is end-to-end encrypted, and the product includes its own email server with no third-party dependencies. It is released under the AGPL-3.0 license and describes itself as an independent, community-driven alternative to closed-source password managers.

You can use it as a responsive web app, through browser extensions for Chrome, Firefox, Edge, and Safari, and with native iOS and Android apps. The technology list includes Argon2id key derivation, the SRP authentication protocol, and a .NET Blazor client using WebAssembly, with a React front end for some parts.

The official cloud version runs at app.aliasvault.com, and self-hosting is supported with Docker on a 64-bit Linux server, with modest requirements of one vCPU, 1 GB of RAM, and 16 GB of disk. It suits privacy-conscious individuals and small teams who want to reduce tracking and spam by giving every site a separate email address.

Pass for iOS is an iPhone and iPad client for the Pass command line password manager. Pass stores each password as a GPG-encrypted file kept in a Git repository, and this app lets you view, copy, add and edit those entries from your phone while staying compatible with the desktop password store.

Entries are encrypted and decrypted with your PGP keys, and the app synchronizes with your own Git repository, so there is no vendor account or proprietary storage involved. It supports one-time password tokens for two-factor codes, offers AutoFill in Safari, Chrome and supported apps, supports YubiKey, and provides search and quick copy actions. It is available on the App Store as Pass - Password Store, with a TestFlight beta.

The app is written in Swift and licensed under MIT, and it can also be built from source with Xcode after building the GopenPGP library. Your secrets live in a repository you control, which suits people who already use the Pass ecosystem on Linux or macOS and want a compatible mobile client.

Strongbox is a native password manager for iOS and macOS built by independent developers. It works with open, portable file formats: Password Safe version 3 and the KeePass formats, including KDB and KDBX versions 3.1 and 4, so your vault is not locked into a proprietary database.

Entries and groups are encrypted using algorithms such as Twofish, Argon2d, ChaCha20, AES and Salsa20 along with SHA-256 hashing, HMACs and secure random generators, and file attachments can be stored in KeePass-format safes. YubiKey is supported. The app is written in Objective-C and distributed through the Apple App Store, and translations are managed through a separate MIT-licensed project called Babel, with volunteer translators credited in many languages.

The source code is licensed under AGPL-3.0, and the README explains ways to support development, including purchasing a subscription or lifetime license through the App Store. Your database files are stored where you choose, so no hosted service is required.

KeePassium is a password manager that reads and writes KeePass databases on iOS and macOS. The project calls itself a commercial open source app: the commercial side funds maintenance and premium support, while the open source side lets anyone audit the code and build the app themselves. It is aimed at people who want the KeePass ecosystem with a native Apple interface.

It synchronizes databases automatically through the system's own storage integration, so it does not ask for your cloud credentials, and works with iCloud Drive, Dropbox, OneDrive, Google Drive, Box, Nextcloud, SFTP and others. Password AutoFill is supported on iOS. Protection includes Face ID or Touch ID, passcodes, and customizable timeouts for the app, database and clipboard. It handles the kdbx4, kdbx3 and kdb formats with ChaCha20, Argon2, AES, Salsa20 and Twofish, and supports TOTP codes including Steam TOTP, YubiKey challenge-response, attachments, custom fields and custom icons.

Several databases can be used and switched between, and there are no ads. The code is written in Swift, and the repository metadata lists the license as Other, so read the license file for exact terms. The README has a section on whether the app is free; check the vendor for current pricing.

Padloc is a password and secure data manager aimed at both individuals and teams who want an open-source alternative to closed commercial password managers. It emphasizes simplicity and security, built around end-to-end encryption so that stored data is protected even from the server operator.

The project is organized as several packages: a core logic library, web-based UI components, a backend server, a progressive web app client, a desktop app built with Electron, mobile apps built with Cordova, a cross-platform native app built with Tauri, and a browser extension, along with a localization package for translations. This split lets different front ends share the same core encryption and data logic.

Setting up a local instance for testing requires installing and configuring at least the server and a web client, which the README describes as quick to do, while guides for running a production deployment and building distributable desktop and mobile apps are still being written. Padloc is written in JavaScript and TypeScript and released under the AGPL-3.0 license, making it self-hostable.