Open-source Proton Pass alternatives

KeePassXC is a modern, open-source password manager for Windows, macOS and Linux. It began as a community port of the Windows program KeePass Password Safe and is aimed at people with demanding requirements for managing sensitive personal data securely.

It stores usernames, passwords, URLs, attachments and notes in an encrypted file that works offline and can live anywhere, including private or public cloud storage that you sync yourself. Entries have custom titles and icons and are sorted into customizable groups, and a search function supports advanced patterns. A built-in password generator can create strings with any mix of characters or easy-to-remember passphrases, and topics mention YubiKey support.

The app is written in C++ and has a quick-start guide plus pre-compiled binaries on the downloads page. Its license is listed as 'Other' on GitHub, so confirm the terms for your use. Because there is no vendor account or server, it is a good fit for users who want local control of their password database instead of a hosted password service.

KeePassDX is a password safe for Android that edits encrypted data kept in a single file in KeePass format and fills in forms securely. It is a local manager, so your credentials live in a database locked with a master key, a keyfile or both, and you only need to remember one master password.

Features include passkeys for authentication with local storage of private keys, biometric unlocking, one-time password management for HOTP and TOTP, autofill, a Magikeyboard for entering fields, creation of encrypted database files, entries organized in group trees, dynamic templates, entry history and Material Design themes. It supports kdb and kdbx files, versions 1 to 4, with AES, Twofish, ChaCha20 and Argon2, and is compatible with KeePass, KeePassXC and KeeWeb.

KeePassDX is described as open source and ad-free, written natively in Kotlin, Java, JNI and C, and licensed under GPL-3.0. Because the file is yours, you choose how to sync it between devices. It suits Android users who want a private password manager that stays interoperable with desktop KeePass tools.

NodeWarden is a server that is compatible with the Bitwarden clients and runs serverlessly on Cloudflare Workers, with data kept in Cloudflare D1 and R2. It lets you operate your own password vault backend inside your Cloudflare account without managing a traditional server, and it keeps end-to-end encryption and a zero-knowledge model.

The README includes a feature comparison with the official Bitwarden server. It includes the original web vault interface, TOTP with steam:// support, an installable offline-capable PWA, passkey login and API keys, among other features. The code is TypeScript with a Preact interface. The authors state that the project is for learning and discussion, that users should back up their vault regularly, and that it is not affiliated with Bitwarden.

The license appears as 'Other' on GitHub, so check the terms. NodeWarden is self-hosted on your own Cloudflare account. It suits technically comfortable users who want a low-maintenance Bitwarden-compatible vault and accept the risks of an unofficial implementation.

AliasVault is a privacy-focused password manager that also creates unique identities and random email aliases for each website you sign up to. Data is end-to-end encrypted, and the product includes its own email server with no third-party dependencies. It is released under the AGPL-3.0 license and describes itself as an independent, community-driven alternative to closed-source password managers.

You can use it as a responsive web app, through browser extensions for Chrome, Firefox, Edge, and Safari, and with native iOS and Android apps. The technology list includes Argon2id key derivation, the SRP authentication protocol, and a .NET Blazor client using WebAssembly, with a React front end for some parts.

The official cloud version runs at app.aliasvault.com, and self-hosting is supported with Docker on a 64-bit Linux server, with modest requirements of one vCPU, 1 GB of RAM, and 16 GB of disk. It suits privacy-conscious individuals and small teams who want to reduce tracking and spam by giving every site a separate email address.

AuthPass is an open-source password manager built with Flutter that runs on mobile, desktop, and the web. It is compatible with KeePass 2.x databases in both KDBX 3 and KDBX 4 formats, so you can open existing KeePass files and keep control of the file where your credentials are stored. It is released under the GPL-3.0 license.

Apps are distributed through the Mac App Store, Google Play, the iOS App Store, the Snap Store and Flathub for Linux, and the Microsoft Store for Windows, and there is also a browser version. The project invites contributions such as translations, documentation, reviews, and code, and uses a forum and Discord channel for coordination.

Since it relies on the KDBX file format rather than a proprietary vault, AuthPass suits people who want a cross-platform KeePass-compatible client with a modern interface. It is a client application, so there is no central server to host.

KeePassium is a password manager that reads and writes KeePass databases on iOS and macOS. The project calls itself a commercial open source app: the commercial side funds maintenance and premium support, while the open source side lets anyone audit the code and build the app themselves. It is aimed at people who want the KeePass ecosystem with a native Apple interface.

It synchronizes databases automatically through the system's own storage integration, so it does not ask for your cloud credentials, and works with iCloud Drive, Dropbox, OneDrive, Google Drive, Box, Nextcloud, SFTP and others. Password AutoFill is supported on iOS. Protection includes Face ID or Touch ID, passcodes, and customizable timeouts for the app, database and clipboard. It handles the kdbx4, kdbx3 and kdb formats with ChaCha20, Argon2, AES, Salsa20 and Twofish, and supports TOTP codes including Steam TOTP, YubiKey challenge-response, attachments, custom fields and custom icons.

Several databases can be used and switched between, and there are no ads. The code is written in Swift, and the repository metadata lists the license as Other, so read the license file for exact terms. The README has a section on whether the app is free; check the vendor for current pricing.

Padloc is a password and secure data manager aimed at both individuals and teams who want an open-source alternative to closed commercial password managers. It emphasizes simplicity and security, built around end-to-end encryption so that stored data is protected even from the server operator.

The project is organized as several packages: a core logic library, web-based UI components, a backend server, a progressive web app client, a desktop app built with Electron, mobile apps built with Cordova, a cross-platform native app built with Tauri, and a browser extension, along with a localization package for translations. This split lets different front ends share the same core encryption and data logic.

Setting up a local instance for testing requires installing and configuring at least the server and a web client, which the README describes as quick to do, while guides for running a production deployment and building distributable desktop and mobile apps are still being written. Padloc is written in JavaScript and TypeScript and released under the AGPL-3.0 license, making it self-hostable.