Teampass is an open-source, self-hosted password manager for teams. Your secrets never leave your infrastructure.
Organize credentials in a tree of folders, grant access through roles, and keep a full audit trail of who accessed what. Secrets are protected with authenticated AES-256-GCM encryption and per-user keys, so removing a user really revokes access.
Teampass 3.2 adds passkeys, Linux password rotation over SSH, a security posture dashboard, access recertification and Secure Send for sharing outside the vault.
Runs on PHP 8.2+ and MySQL/MariaDB, or with Docker. LDAP/AD, OAuth2 SSO, REST API and 25 languages. GPL-3.0, built and maintained since 2009.
Source, docs and downloads: teampass.net
Features
- Teampass is managed at https://github.com/nilsteampassnet/TeamPass
- Free GPL-3.0 server · Docker & bare metal · 25 languages · Import from Bitwarden, KeePassXC, CSV
- Nested folders and roles with granular rights (read, write, no-edit, no-delete) and per-user overrides
- AES-256-GCM authenticated encryption, per-user RSA-wrapped keys, PBKDF2 600,000 iterations
- Personal folders readable by their owner only, administrators included
- Full audit trail and per-item history of every change and access
- LDAP / Active Directory (nested groups) and OAuth2 / Entra ID single sign-on
- Multi-factor authentication: TOTP, Duo, YubiKey, and passkeys
- Security posture dashboard: weak, reused, breached and overdue passwords
- Password expiry policies and agentless Linux password rotation over SSH
- Secure Send and one-time-view links to share credentials outside the vault
- REST API, Bash/PowerShell clients and browser extension (Chrome, Firefox, Edge)
License
GNU General Public License version 3.0 (GPLv3), Other LicenseOther Useful Business Software
Build Agents and Models on One Platform
Gemini Enterprise Agent Platform is Google Cloud's comprehensive platform for developers to build, scale, govern, and optimize agents and models. Choose from Google's most advanced models and third-party models like Anthropic's Claude Model Family.
Rate This Project
Login To Rate This Project
User Reviews
-
3 out of 5 starsThere is a major flaw in this software. It does not distinguish between an LDAP user and a local user with the same name. This allows someone to access another persons passwords by modifying the configuration to use local authentication, changing the local user's password, logging in as that user and seeing their passwords. After that, they can switch the configuration back to use LDAP authentication without anyone knowing that their passwords have been compromised.
-
5 out of 5 starsGrate service for management passwords for my web studio
-
5 out of 5 starsAwesome tool!
-
5 out of 5 starsThis tool really fills a gap: open source, easy-to-install, easy-to-use centralized password database with user management and a very good structured UI. Keep up your awesome project Nils!
-
5 out of 5 starsVery good project. worth its weight in gold. A very good documentation and few more releases will make it a killer application.