Open-source Bitdefender SecurePass alternatives

Vaultwarden is a Rust server that reimplements the Bitwarden Client API as an alternative to the official service, and it works with the official Bitwarden clients. It was formerly known as bitwarden_rs and is released under the AGPL-3.0 license. It is aimed at people who self-host and find the official server too heavy to run themselves.

The project implements most of the Bitwarden Client API, including personal vaults, Send, attachments, website icons and personal API keys, as well as organizations, with collections, shared passwords, member roles, groups, event logs and policies. Multi-factor authentication covers authenticator apps, email, FIDO2 WebAuthn, YubiKey and Duo, and emergency access is supported. An admin backend and a modified web vault client are included.

Vaultwarden is distributed as a Docker image and the code is on GitHub. The project is unofficial, and its maintainers ask users to report problems to them rather than to Bitwarden's official support channels. It suits individuals, families and small teams who want to host their own password manager while keeping the familiar Bitwarden apps and browser extensions.

KeePassXC is a modern, open-source password manager for Windows, macOS and Linux. It began as a community port of the Windows program KeePass Password Safe and is aimed at people with demanding requirements for managing sensitive personal data securely.

It stores usernames, passwords, URLs, attachments and notes in an encrypted file that works offline and can live anywhere, including private or public cloud storage that you sync yourself. Entries have custom titles and icons and are sorted into customizable groups, and a search function supports advanced patterns. A built-in password generator can create strings with any mix of characters or easy-to-remember passphrases, and topics mention YubiKey support.

The app is written in C++ and has a quick-start guide plus pre-compiled binaries on the downloads page. Its license is listed as 'Other' on GitHub, so confirm the terms for your use. Because there is no vendor account or server, it is a good fit for users who want local control of their password database instead of a hosted password service.

Bitwarden is a password manager, and this repository contains its server side: the APIs, database and other core infrastructure that all Bitwarden client applications connect to. The code is written in C# on .NET Core with ASP.NET Core, and the database layer is written in T-SQL for SQL Server.

The server can be developed, built, run and deployed on Windows, macOS and Linux. For deployment, the project provides Docker containers along with PowerShell and Bash scripts that bootstrap an installation, and the images are published on GitHub Container Registry. The services include Admin, API, Billing, Events, Identity, Notifications, SCIM and SSO components.

Organizations that want to keep their vaults on their own infrastructure can follow the on-premise install guide in the Bitwarden help center, which requires Docker and Docker Compose. Bitwarden also runs managed cloud clusters in the US and EU. The repository lists its license as 'Other', so check the license files for the exact terms.

KeePassDX is a password safe for Android that edits encrypted data kept in a single file in KeePass format and fills in forms securely. It is a local manager, so your credentials live in a database locked with a master key, a keyfile or both, and you only need to remember one master password.

Features include passkeys for authentication with local storage of private keys, biometric unlocking, one-time password management for HOTP and TOTP, autofill, a Magikeyboard for entering fields, creation of encrypted database files, entries organized in group trees, dynamic templates, entry history and Material Design themes. It supports kdb and kdbx files, versions 1 to 4, with AES, Twofish, ChaCha20 and Argon2, and is compatible with KeePass, KeePassXC and KeeWeb.

KeePassDX is described as open source and ad-free, written natively in Kotlin, Java, JNI and C, and licensed under GPL-3.0. Because the file is yours, you choose how to sync it between devices. It suits Android users who want a private password manager that stays interoperable with desktop KeePass tools.

Keepass2Android is a password manager app for Android that reads the same database format as KeePass 2.x, the well-known Windows password safe. You keep your credentials in an encrypted database file that you control, instead of handing them to a vendor-run service, and open it on your phone with the app.

The project aims at simple synchronization between devices, so a database edited on a desktop KeePass client can be used on Android and vice versa. It is built on the .NET stack and distributed through the Google Play Store, where it is published by an individual developer. Its repository tags it with the keepass and password-manager topics.

Keepass2Android is licensed under GPL-3.0. Because the database is a file you hold yourself, it fits people who already use KeePass on other platforms or who want a password manager without a hosted account. There is no vendor-operated cloud service for it.

AliasVault is a privacy-focused password manager that also creates unique identities and random email aliases for each website you sign up to. Data is end-to-end encrypted, and the product includes its own email server with no third-party dependencies. It is released under the AGPL-3.0 license and describes itself as an independent, community-driven alternative to closed-source password managers.

You can use it as a responsive web app, through browser extensions for Chrome, Firefox, Edge, and Safari, and with native iOS and Android apps. The technology list includes Argon2id key derivation, the SRP authentication protocol, and a .NET Blazor client using WebAssembly, with a React front end for some parts.

The official cloud version runs at app.aliasvault.com, and self-hosting is supported with Docker on a 64-bit Linux server, with modest requirements of one vCPU, 1 GB of RAM, and 16 GB of disk. It suits privacy-conscious individuals and small teams who want to reduce tracking and spam by giving every site a separate email address.

This repository contains the source code for the Proton Pass Android application. Proton Pass is a password manager from Proton, and the app is published on Google Play, with the code opened under the GPL so that users and researchers can inspect how it works.

The topics highlight end-to-end encryption, and the app is used together with a Proton account and Proton's hosted service rather than a server you run yourself. The repository documents how to build the app locally in BUILD.md and how to contribute in CONTRIBUTING.md, and invites help with translations through a blog post.

The code and data files are licensed under version 3 or later of the GNU General Public License. The app is written in Kotlin for Android, and because it is the client side of a hosted product, it is mostly relevant to people who want to audit, build or contribute to the Android client.

Strongbox is a native password manager for iOS and macOS built by independent developers. It works with open, portable file formats: Password Safe version 3 and the KeePass formats, including KDB and KDBX versions 3.1 and 4, so your vault is not locked into a proprietary database.

Entries and groups are encrypted using algorithms such as Twofish, Argon2d, ChaCha20, AES and Salsa20 along with SHA-256 hashing, HMACs and secure random generators, and file attachments can be stored in KeePass-format safes. YubiKey is supported. The app is written in Objective-C and distributed through the Apple App Store, and translations are managed through a separate MIT-licensed project called Babel, with volunteer translators credited in many languages.

The source code is licensed under AGPL-3.0, and the README explains ways to support development, including purchasing a subscription or lifetime license through the App Store. Your database files are stored where you choose, so no hosted service is required.

KeePassium is a password manager that reads and writes KeePass databases on iOS and macOS. The project calls itself a commercial open source app: the commercial side funds maintenance and premium support, while the open source side lets anyone audit the code and build the app themselves. It is aimed at people who want the KeePass ecosystem with a native Apple interface.

It synchronizes databases automatically through the system's own storage integration, so it does not ask for your cloud credentials, and works with iCloud Drive, Dropbox, OneDrive, Google Drive, Box, Nextcloud, SFTP and others. Password AutoFill is supported on iOS. Protection includes Face ID or Touch ID, passcodes, and customizable timeouts for the app, database and clipboard. It handles the kdbx4, kdbx3 and kdb formats with ChaCha20, Argon2, AES, Salsa20 and Twofish, and supports TOTP codes including Steam TOTP, YubiKey challenge-response, attachments, custom fields and custom icons.

Several databases can be used and switched between, and there are no ads. The code is written in Swift, and the repository metadata lists the license as Other, so read the license file for exact terms. The README has a section on whether the app is free; check the vendor for current pricing.

Padloc is a password and secure data manager aimed at both individuals and teams who want an open-source alternative to closed commercial password managers. It emphasizes simplicity and security, built around end-to-end encryption so that stored data is protected even from the server operator.

The project is organized as several packages: a core logic library, web-based UI components, a backend server, a progressive web app client, a desktop app built with Electron, mobile apps built with Cordova, a cross-platform native app built with Tauri, and a browser extension, along with a localization package for translations. This split lets different front ends share the same core encryption and data logic.

Setting up a local instance for testing requires installing and configuring at least the server and a web client, which the README describes as quick to do, while guides for running a production deployment and building distributable desktop and mobile apps are still being written. Padloc is written in JavaScript and TypeScript and released under the AGPL-3.0 license, making it self-hostable.