Open-source Norton Password Manager alternatives

KeePassXC is a modern, open-source password manager for Windows, macOS and Linux. It began as a community port of the Windows program KeePass Password Safe and is aimed at people with demanding requirements for managing sensitive personal data securely.

It stores usernames, passwords, URLs, attachments and notes in an encrypted file that works offline and can live anywhere, including private or public cloud storage that you sync yourself. Entries have custom titles and icons and are sorted into customizable groups, and a search function supports advanced patterns. A built-in password generator can create strings with any mix of characters or easy-to-remember passphrases, and topics mention YubiKey support.

The app is written in C++ and has a quick-start guide plus pre-compiled binaries on the downloads page. Its license is listed as 'Other' on GitHub, so confirm the terms for your use. Because there is no vendor account or server, it is a good fit for users who want local control of their password database instead of a hosted password service.

KeePassDX is a password safe for Android that edits encrypted data kept in a single file in KeePass format and fills in forms securely. It is a local manager, so your credentials live in a database locked with a master key, a keyfile or both, and you only need to remember one master password.

Features include passkeys for authentication with local storage of private keys, biometric unlocking, one-time password management for HOTP and TOTP, autofill, a Magikeyboard for entering fields, creation of encrypted database files, entries organized in group trees, dynamic templates, entry history and Material Design themes. It supports kdb and kdbx files, versions 1 to 4, with AES, Twofish, ChaCha20 and Argon2, and is compatible with KeePass, KeePassXC and KeeWeb.

KeePassDX is described as open source and ad-free, written natively in Kotlin, Java, JNI and C, and licensed under GPL-3.0. Because the file is yours, you choose how to sync it between devices. It suits Android users who want a private password manager that stays interoperable with desktop KeePass tools.

NodeWarden is a server that is compatible with the Bitwarden clients and runs serverlessly on Cloudflare Workers, with data kept in Cloudflare D1 and R2. It lets you operate your own password vault backend inside your Cloudflare account without managing a traditional server, and it keeps end-to-end encryption and a zero-knowledge model.

The README includes a feature comparison with the official Bitwarden server. It includes the original web vault interface, TOTP with steam:// support, an installable offline-capable PWA, passkey login and API keys, among other features. The code is TypeScript with a Preact interface. The authors state that the project is for learning and discussion, that users should back up their vault regularly, and that it is not affiliated with Bitwarden.

The license appears as 'Other' on GitHub, so check the terms. NodeWarden is self-hosted on your own Cloudflare account. It suits technically comfortable users who want a low-maintenance Bitwarden-compatible vault and accept the risks of an unofficial implementation.

AliasVault is a privacy-focused password manager that also creates unique identities and random email aliases for each website you sign up to. Data is end-to-end encrypted, and the product includes its own email server with no third-party dependencies. It is released under the AGPL-3.0 license and describes itself as an independent, community-driven alternative to closed-source password managers.

You can use it as a responsive web app, through browser extensions for Chrome, Firefox, Edge, and Safari, and with native iOS and Android apps. The technology list includes Argon2id key derivation, the SRP authentication protocol, and a .NET Blazor client using WebAssembly, with a React front end for some parts.

The official cloud version runs at app.aliasvault.com, and self-hosting is supported with Docker on a 64-bit Linux server, with modest requirements of one vCPU, 1 GB of RAM, and 16 GB of disk. It suits privacy-conscious individuals and small teams who want to reduce tracking and spam by giving every site a separate email address.

AuthPass is an open-source password manager built with Flutter that runs on mobile, desktop, and the web. It is compatible with KeePass 2.x databases in both KDBX 3 and KDBX 4 formats, so you can open existing KeePass files and keep control of the file where your credentials are stored. It is released under the GPL-3.0 license.

Apps are distributed through the Mac App Store, Google Play, the iOS App Store, the Snap Store and Flathub for Linux, and the Microsoft Store for Windows, and there is also a browser version. The project invites contributions such as translations, documentation, reviews, and code, and uses a forum and Discord channel for coordination.

Since it relies on the KDBX file format rather than a proprietary vault, AuthPass suits people who want a cross-platform KeePass-compatible client with a modern interface. It is a client application, so there is no central server to host.

KeeWeb is a password manager that runs in a web browser or as a desktop application and works with kdbx database files created by KeePass, KeePassXC, and other compatible tools. You can open existing vaults or create new ones to store credentials. It supports Linux, Windows, and macOS and is built on Electron and JavaScript. The input lists its license only as other.

The README includes a thorough self-hosting guide using Docker and Docker Compose, with Traefik integration covering labels, dynamic and static configuration, certificate resolvers, entry points, a Cloudflare variant, and an Authentik integration. Other sections cover environment variables, volumes, Dropbox support, and building from source on each platform using Grunt or npm.

Because vault files stay in the standard kdbx format, users are not locked into the app. KeeWeb suits individuals and teams that already use KeePass and want a friendlier interface, or who want to host a web-based vault viewer on their own domain.

Strongbox is a native password manager for iOS and macOS built by independent developers. It works with open, portable file formats: Password Safe version 3 and the KeePass formats, including KDB and KDBX versions 3.1 and 4, so your vault is not locked into a proprietary database.

Entries and groups are encrypted using algorithms such as Twofish, Argon2d, ChaCha20, AES and Salsa20 along with SHA-256 hashing, HMACs and secure random generators, and file attachments can be stored in KeePass-format safes. YubiKey is supported. The app is written in Objective-C and distributed through the Apple App Store, and translations are managed through a separate MIT-licensed project called Babel, with volunteer translators credited in many languages.

The source code is licensed under AGPL-3.0, and the README explains ways to support development, including purchasing a subscription or lifetime license through the App Store. Your database files are stored where you choose, so no hosted service is required.

Padloc is a password and secure data manager aimed at both individuals and teams who want an open-source alternative to closed commercial password managers. It emphasizes simplicity and security, built around end-to-end encryption so that stored data is protected even from the server operator.

The project is organized as several packages: a core logic library, web-based UI components, a backend server, a progressive web app client, a desktop app built with Electron, mobile apps built with Cordova, a cross-platform native app built with Tauri, and a browser extension, along with a localization package for translations. This split lets different front ends share the same core encryption and data logic.

Setting up a local instance for testing requires installing and configuring at least the server and a web client, which the README describes as quick to do, while guides for running a production deployment and building distributable desktop and mobile apps are still being written. Padloc is written in JavaScript and TypeScript and released under the AGPL-3.0 license, making it self-hostable.