Open-source Sticky Password alternatives

Vaultwarden is a Rust server that reimplements the Bitwarden Client API as an alternative to the official service, and it works with the official Bitwarden clients. It was formerly known as bitwarden_rs and is released under the AGPL-3.0 license. It is aimed at people who self-host and find the official server too heavy to run themselves.

The project implements most of the Bitwarden Client API, including personal vaults, Send, attachments, website icons and personal API keys, as well as organizations, with collections, shared passwords, member roles, groups, event logs and policies. Multi-factor authentication covers authenticator apps, email, FIDO2 WebAuthn, YubiKey and Duo, and emergency access is supported. An admin backend and a modified web vault client are included.

Vaultwarden is distributed as a Docker image and the code is on GitHub. The project is unofficial, and its maintainers ask users to report problems to them rather than to Bitwarden's official support channels. It suits individuals, families and small teams who want to host their own password manager while keeping the familiar Bitwarden apps and browser extensions.

KeePassXC is a modern, open-source password manager for Windows, macOS and Linux. It began as a community port of the Windows program KeePass Password Safe and is aimed at people with demanding requirements for managing sensitive personal data securely.

It stores usernames, passwords, URLs, attachments and notes in an encrypted file that works offline and can live anywhere, including private or public cloud storage that you sync yourself. Entries have custom titles and icons and are sorted into customizable groups, and a search function supports advanced patterns. A built-in password generator can create strings with any mix of characters or easy-to-remember passphrases, and topics mention YubiKey support.

The app is written in C++ and has a quick-start guide plus pre-compiled binaries on the downloads page. Its license is listed as 'Other' on GitHub, so confirm the terms for your use. Because there is no vendor account or server, it is a good fit for users who want local control of their password database instead of a hosted password service.

Bitwarden is a password manager, and this repository contains its server side: the APIs, database and other core infrastructure that all Bitwarden client applications connect to. The code is written in C# on .NET Core with ASP.NET Core, and the database layer is written in T-SQL for SQL Server.

The server can be developed, built, run and deployed on Windows, macOS and Linux. For deployment, the project provides Docker containers along with PowerShell and Bash scripts that bootstrap an installation, and the images are published on GitHub Container Registry. The services include Admin, API, Billing, Events, Identity, Notifications, SCIM and SSO components.

Organizations that want to keep their vaults on their own infrastructure can follow the on-premise install guide in the Bitwarden help center, which requires Docker and Docker Compose. Bitwarden also runs managed cloud clusters in the US and EU. The repository lists its license as 'Other', so check the license files for the exact terms.

KeePassDX is a password safe for Android that edits encrypted data kept in a single file in KeePass format and fills in forms securely. It is a local manager, so your credentials live in a database locked with a master key, a keyfile or both, and you only need to remember one master password.

Features include passkeys for authentication with local storage of private keys, biometric unlocking, one-time password management for HOTP and TOTP, autofill, a Magikeyboard for entering fields, creation of encrypted database files, entries organized in group trees, dynamic templates, entry history and Material Design themes. It supports kdb and kdbx files, versions 1 to 4, with AES, Twofish, ChaCha20 and Argon2, and is compatible with KeePass, KeePassXC and KeeWeb.

KeePassDX is described as open source and ad-free, written natively in Kotlin, Java, JNI and C, and licensed under GPL-3.0. Because the file is yours, you choose how to sync it between devices. It suits Android users who want a private password manager that stays interoperable with desktop KeePass tools.

MacPass is a native macOS client for KeePass databases in the kdbx format. It started as an attempt to provide a good-looking, feature-complete KeePass client for the Mac, and its author says no other native macOS client is fully open source. After a period with few updates, the maintainer says they hope to revive it.

Topics mention auto-type, kdbx and plugins. The README includes security notes: users should upgrade to version 0.8.2 or later, disable automatic plugin updates on older versions, and keep the default setting that refuses unsigned or wrongly signed plugins. Releases should be taken only from the official GitHub page, since an old website domain was dropped and the site now lives at macpass.app.

Pre-built releases and an unsigned continuous build are available on GitHub, and building from source needs Carthage and Xcode. MacPass is written in Objective-C, and the repository lists the license as Other, so check the licence file. It suits Mac users who keep their passwords in a KeePass-compatible file.

Keepass2Android is a password manager app for Android that reads the same database format as KeePass 2.x, the well-known Windows password safe. You keep your credentials in an encrypted database file that you control, instead of handing them to a vendor-run service, and open it on your phone with the app.

The project aims at simple synchronization between devices, so a database edited on a desktop KeePass client can be used on Android and vice versa. It is built on the .NET stack and distributed through the Google Play Store, where it is published by an individual developer. Its repository tags it with the keepass and password-manager topics.

Keepass2Android is licensed under GPL-3.0. Because the database is a file you hold yourself, it fits people who already use KeePass on other platforms or who want a password manager without a hosted account. There is no vendor-operated cloud service for it.

AuthPass is an open-source password manager built with Flutter that runs on mobile, desktop, and the web. It is compatible with KeePass 2.x databases in both KDBX 3 and KDBX 4 formats, so you can open existing KeePass files and keep control of the file where your credentials are stored. It is released under the GPL-3.0 license.

Apps are distributed through the Mac App Store, Google Play, the iOS App Store, the Snap Store and Flathub for Linux, and the Microsoft Store for Windows, and there is also a browser version. The project invites contributions such as translations, documentation, reviews, and code, and uses a forum and Discord channel for coordination.

Since it relies on the KDBX file format rather than a proprietary vault, AuthPass suits people who want a cross-platform KeePass-compatible client with a modern interface. It is a client application, so there is no central server to host.

KeeWeb is a password manager that runs in a web browser or as a desktop application and works with kdbx database files created by KeePass, KeePassXC, and other compatible tools. You can open existing vaults or create new ones to store credentials. It supports Linux, Windows, and macOS and is built on Electron and JavaScript. The input lists its license only as other.

The README includes a thorough self-hosting guide using Docker and Docker Compose, with Traefik integration covering labels, dynamic and static configuration, certificate resolvers, entry points, a Cloudflare variant, and an Authentik integration. Other sections cover environment variables, volumes, Dropbox support, and building from source on each platform using Grunt or npm.

Because vault files stay in the standard kdbx format, users are not locked into the app. KeeWeb suits individuals and teams that already use KeePass and want a friendlier interface, or who want to host a web-based vault viewer on their own domain.

Rowel is a desktop password manager that keeps everything on your own machine. Logins, credit card details and secure notes are stored in a locally held, encrypted vault, and the project states that no data leaves your computer unless you turn on the optional Google Drive sync. It is written in Rust with Tauri and runs on macOS, Windows and Linux.

The vault is an encrypted SQLite database using SQLCipher, and each entry's secrets get an extra application-level encryption layer and stay encrypted in memory until you reveal or copy them. Rowel also includes a one-click strong password generator and time-based one-time password (TOTP) support. Moving to another computer is done with a backup file or the Google Drive sync.

For browser autofill, Rowel speaks the KeePassXC-Browser protocol, so the standard KeePassXC-Browser extension for Chrome, Firefox or Edge can fill logins from the vault, and passkey requests are supported with version 1.9 or newer of the extension. Because both apps use the same browser connection, Rowel and KeePassXC should not be used at once. It is licensed under GPL-3.0.

KeyPass is an open-source password manager for Android that does not store credentials on any server. The app is completely offline, with no internet permission added, so your passwords stay in your own hands and on your own device.

Features include encrypted backup and restore, automatic backups, dark mode, a Material Design 3 interface built with Jetpack Compose, screenshot blocking, and unlocking with device credentials such as a PIN, pattern or biometrics. It also provides a password generator, a TOTP generator and an Android autofill service. Credentials can be imported from Google Chrome and KeePass CSV files, with Bitwarden import and exports to those formats still on the to-do list.

The app is written in Kotlin using Room, Hilt and an MVI architecture, and is licensed under MIT. The README advises taking a backup before updating to a new version, and the author has asked the community to suggest a new name for the project through a discussion thread.