Open-source Devolutions alternatives

Bitwarden is a password manager, and this repository contains its server side: the APIs, database and other core infrastructure that all Bitwarden client applications connect to. The code is written in C# on .NET Core with ASP.NET Core, and the database layer is written in T-SQL for SQL Server.

The server can be developed, built, run and deployed on Windows, macOS and Linux. For deployment, the project provides Docker containers along with PowerShell and Bash scripts that bootstrap an installation, and the images are published on GitHub Container Registry. The services include Admin, API, Billing, Events, Identity, Notifications, SCIM and SSO components.

Organizations that want to keep their vaults on their own infrastructure can follow the on-premise install guide in the Bitwarden help center, which requires Docker and Docker Compose. Bitwarden also runs managed cloud clusters in the US and EU. The repository lists its license as 'Other', so check the license files for the exact terms.

Passbolt is an open-source password manager built for teams. It lets organizations gather, structure and share passwords and other secrets, and its security model relies on secret keys owned by each user together with end-to-end encryption. The vendor says the product is audited several times a year and that the findings are made public.

The repository holds the JSON API of the Community Edition, written in PHP on CakePHP. Users work through clients: browser extensions, mobile apps, a command-line tool and a desktop app. Teams can share credentials and audit access, with policies aimed at power users. The README includes guidance for running the server natively on your own machine.

Passbolt Community Edition is licensed under AGPL-3.0. The vendor also offers paid Pro and cloud-hosted options, which suit organizations that prefer managed hosting or extra features. It fits teams, from small startups to larger IT departments, that want shared credential management they can host and inspect themselves.

sysPass is a self-hosted, web-based password manager written in PHP and designed for both business and personal use. It stores credentials centrally and lets teams share them according to permissions, which suits system administrators who manage many accounts for servers and services.

Security features include AES-256 encryption in CTR mode, RSA for sending passwords from forms, and two-factor authentication. Administration covers users, groups and profiles with up to 29 access levels, and logins can use MySQL, OpenLDAP or Active Directory authentication. Accounts can carry tags, custom fields, public links, history and favorites, and can be marked private.

Further functions include email and in-app activity notifications, an event log, a multilingual interface and a JSON-RPC API for integrations. sysPass is published under GPL-3.0, with installation documentation at doc.syspass.org and a Docker image on Docker Hub. It runs on your own PHP server and database.