Bitwarden alternatives: 5 free & open-source picks
Compare recorded free and open-source options, their capabilities and operating requirements. Source dates are shown below; licenses, hosted limits and project activity can change.
Bitwarden’s clients pointed at your own server; unofficial, capable, and now you are the outage.
licenseAGPL-3.0
runsyour server
installDocker or Podman container with a persistent /data volume and a reverse proxy for HTTPS
dataClient-encrypted Bitwarden-compatible vault data stored in SQLite by default, or MySQL/PostgreSQL, with attachments and configuration in the persistent volume
the catch vs BitwardenIt is unofficial and may lag Bitwarden's proprietary or enterprise features, while support, backups and uptime move to you.
setupDocker, a domain and HTTPS reverse proxy are the easy part; backups, upgrades and outages become the user's responsibility
facts verified 2026-08-11
A vault file on your disk with excellent autofill; syncing and sharing are deliberately somebody else’s job.
licenseGPL-2.0+
runson your machine
installNative Windows, macOS and Linux package
dataOne encrypted KDBX database file on disk; syncing means placing that file in a separate cloud or shared-folder service
the catch vs BitwardenIt trades Bitwarden's built-in sync, sharing and account recovery for a single vault file that you must synchronize and back up safely yourself.
setupThere is no built-in sync, sharing or recovery, so the user must choose a sync method and manage conflicts and backups
facts verified 2026-08-11
A team password vault with real sharing and a server stack that expects an adult in the room.
licenseAGPL-3.0
runsyour server
installUbuntu or Debian package, or Docker deployment, followed by browser-extension setup
dataPassword secrets are OpenPGP-encrypted; account, sharing and audit metadata live in SQL, while users' private keys and recovery kits remain client-side
the catch vs BitwardenIt requires substantially more server and OpenPGP key administration while offering a narrower, team-first experience than Bitwarden.
setupA server, database, domain, TLS, SMTP and key-recovery process are required before anyone can use it
facts verified 2026-08-11
Passwords, passkeys, and disposable inboxes in one vault; self-host it and mail delivery joins your chores.
licenseAGPL-3.0
runsyour machine or their cloud
installHosted signup and browser/mobile apps, or a Linux Docker Compose install script for self-hosting
dataVault secrets and received-email contents are encrypted client-side; the hosted or self-hosted server stores ciphertext, with an offline cache on clients
the catch vs BitwardenIt does not yet match Bitwarden's mature Organizations, broad client ecosystem and recovery and sharing workflows.
setupNone for the hosted service; self-hosting needs a Linux server, Docker, DNS/TLS and mail routing
facts verified 2026-08-11
The core password manager is already free: unlimited vault items, devices, passkeys, and autofill.
licenseGPL-3.0
runsyour machine or their cloud
installCreate a hosted account and install an official app or extension; optional self-hosting uses Bitwarden's Docker deployment
dataVault items are encrypted locally before sync; Bitwarden's cloud or a self-hosted server stores encrypted vault data, while clients keep an encrypted local cache
the catch vs BitwardenIt is the same core product, but canceling Premium means losing integrated TOTP, file attachments, emergency access and several reports.
setupNone for hosted use; self-hosting requires Docker, a domain/TLS, SMTP and ongoing server maintenance
facts verified 2026-08-11
latest recorded source check 2026-08-11 · check current terms at the source
PadlocThe live site hides a stalled repo: last commit March 2025 and production self-hosting docs never really arrived.
| tool | license | running it | platforms | stars | active |
|---|---|---|---|---|---|
| Vaultwarden | AGPL-3.0 | docker to self-host | web, macos, windows, linux, ios, android, self-hosted, browser-extension | 65,000 | 2026-08 |
| KeePassXC | GPL-2.0+ | one-click install | macos, windows, linux, browser-extension | 28,300 | 2026-08 |
| Passbolt Community Edition | AGPL-3.0 | self-host, real ops | web, ios, android, self-hosted, cli, browser-extension | 6,100 | 2026-08 |
| AliasVault | AGPL-3.0 | docker to self-host | web, ios, android, self-hosted, browser-extension | 2,400 | 2026-08 |
| Bitwarden Free | GPL-3.0 | they host it | web, macos, windows, linux, ios, android, browser-extension | — | — |
They pay because a professionally maintained security service is cheap relative to the downside of mistakes. The recorded subscription totals $19.8 a year before any costs of an alternative.
Questions about these alternatives
Is there a free alternative to Bitwarden?
Yes: Vaultwarden, KeePassXC, Passbolt Community Edition and 2 more. These are recorded free or open-source options. Compare their feature limits, licenses, hosting costs and current availability before choosing.
Should I just build my own Bitwarden?
Our verdict is YES. If your goal is to stop paying hosted Bitwarden Premium, the core vault can be self-hosted or replaced with KeePass-style local storage; the caveat is security responsibility. Review the scope, implementation prompt and trade-offs in the Bitwarden build guide.
