Best / Password manager
Best open-source Password manager
The best open-source password manager in the c17.io catalog is Vaultwarden, a Bitwarden-compatible server that fits one container. Official Bitwarden is the compatible clients plus a self-hostable API (AGPL core; bitwarden_license/ is commercial). Passbolt is the team vault with sharing. KeePassXC is the desktop file vault if you do not want a server. The published combo is /stacks/vaultwarden-passwords.
Open the stackStart on Railway
Ranked picks
1
VaultwardenUnofficial Bitwarden-compatible server in Rust — the c17 LastPass/1Password stack.
When to pick it: A team vault that speaks official Bitwarden apps.
69,182 stars in the catalog
2
BitwardenOfficial Bitwarden backend (API, database, Docker). Core is AGPL; skip bitwarden_license/ if you want OSS-only.
When to pick it: The official self-host path, not the small box.
20,365 stars in the catalog
3
PassboltAGPL team password manager with sharing and a JSON API.
When to pick it: Shared credentials with a browser extension, not a Bitwarden client.
6,172 stars in the catalog
4
KeePassXCGPL desktop port of KeePass Password Safe.
When to pick it: A local .kdbx file, not a hosted vault.
29,266 stars in the catalog
How they compare
| Tool | License | Self-host | Best for |
|---|---|---|---|
| Vaultwarden | GNU Affero General Public License v3.0 | Easy | A team vault that speaks official Bitwarden apps. |
| Bitwarden | AGPL-3.0 (bitwarden_license/ is commercial) | Medium | The official self-host path, not the small box. |
| Passbolt | GNU Affero General Public License v3.0 | Medium | Shared credentials with a browser extension, not a Bitwarden client. |
| KeePassXC | GNU General Public License v2.0 or later | Easy | A local .kdbx file, not a hosted vault. |
Related pages
FAQ
- Is Vaultwarden official Bitwarden?
- No. It speaks the Bitwarden client protocol. Official Bitwarden can also be self-hosted; Vaultwarden is the small box. Clients are the official Bitwarden apps. That is the stack FAQ.
- Vaultwarden or Passbolt?
- Vaultwarden if the team already uses Bitwarden apps. Passbolt if you want sharing in a browser extension without the Bitwarden protocol.
- Are these free?
- Vaultwarden, Passbolt, and KeePassXC are OSI licenses. Bitwarden's core is AGPL; commercial directories are separate. You pay hosting (and treat the volume like production). Template users never pay c17.
- How do I deploy it?
- Open /stacks/vaultwarden-passwords. Persist /data, set DOMAIN to the public HTTPS URL, disable public signups, and import a Bitwarden/LastPass CSV.
Stack of the Week
Get one stack a week that replaces a SaaS bill.