Psono

Psono is a self-hosted password manager built specifically for organizations that need control over where their credentials live. Instead of trusting a third-party cloud vault, you run the server yourself, keeping encrypted data behind your own firewalls. It's also available as a managed SaaS option if you'd rather skip the infrastructure work.

Vault data is encrypted on the client before it ever reaches the server. That means even if someone gains access to the server, they get ciphertext, not credentials. Encryption happens at multiple layers: client-side, in transit, and at rest.

Key capabilities include:

• SAML and LDAP integration for connecting to existing identity providers and directory services
• Audit logs so you can track who accessed or changed what
• Compliance policies to enforce password rules across your organization
• Encrypted sharing lets teams share credentials without exposing plaintext
• Cross-platform access across Windows, macOS, Linux, iOS, and Android, with browser extensions for Chrome, Firefox, and Edge
• Admin client for centralized management of users, groups, and permissions

All business features are free for teams up to 10 users, which makes it practical for small organizations to evaluate it fully before committing. Larger teams can self-host without per-seat licensing pressure, or contact the team for supported SaaS plans with SLAs.

Compared to tools like Bitwarden or Passbolt, Psono leans heavily into enterprise compliance and directory integration out of the box. The fully auditable codebase means your security team can verify the encryption implementation rather than taking it on trust, which matters in regulated industries.

The source code is publicly available, and the architecture is designed so security doesn't depend on obscurity.