Vault, autofill and passkeys
Fills in for you, everywhere
Logins, passkeys and 2FA codes, filled in your browser and in apps on your phone, with real website icons so you find things at a glance.
See all apps
Only you can see your passwords.Not even we can.
Passbox remembers your passwords, passkeys and 2FA codes, fills them in on every device and shares them safely with your family and team. Open source, made in Europe, and free with every feature on your own server.
- Open source (MIT)
- Every feature, free when self-hosted
- €1 a month, even for the whole family
Runs in every browser, on your computer and on your phone
- Web
- Chrome
- Edge
- Firefox
- Safari
- Windows
- macOS
- Linux
- App Store
- Google Play
Illustration of the Passbox vault: a sidebar with categories and the family vault, a list of entries and a login with username, hidden password and a 2FA code that changes every 30 seconds.
Your keys, your devices, your choice of server.
Security architecture
Designed for the worst case: a server that has been broken into
Not other people, not hackers and not us. Every app encrypts on the device, so even a stolen server database reveals nothing, whether the server is yours or ours.
- plain-text secrets on the server
- 0
- secrets protect your account
- 2
Your devicesOne Rust core in every app
- WebWebAssembly
- DesktopWindows · macOS · Linux
- ExtensionChrome · Edge
- iOSiPhone · iPad
- AndroidPhone · tablet
- CLI and agentspbx · MCP
Your server or ours in GermanyStores only ciphertext
- Passbox serverRust · OPAQUE sign-in
- PostgreSQLRow Level Security
- Object storageEncrypted attachments
End-to-end encryptionXChaCha20-Poly1305 · X-Wing
Your devicesOne Rust core in every app
- WebWebAssembly
- DesktopWindows · macOS · Linux
- ExtensionChrome · Edge
- iOSiPhone · iPad
- AndroidPhone · tablet
- CLI and agentspbx · MCP
End-to-end encryptionXChaCha20-Poly1305 · X-Wing
Your server or ours in GermanyStores only ciphertext
- Passbox serverRust · OPAQUE sign-in
- PostgreSQLRow Level Security
- Object storageEncrypted attachments
- Never sees your master password
- Never sees your Secret Key
- Never holds a decryption key
Only you hold the key
Everything is encrypted on your device before it is saved or synced, including titles and websites. The server stores data it cannot read.
Two secrets, not one
Your master password plus a Secret Key that only your devices know. Without it, a stolen database is useless for guessing your password.
Your password never leaves
Signing in uses OPAQUE: your device proves it knows the password without sending it, not even in scrambled form.
Ready for quantum computers
Every share is sealed with X-Wing, a hybrid of X25519 and ML-KEM-768, so data shared today stays private tomorrow.
Features
Everything a modern password manager does. And a few things only Passbox does.
One vault for passwords, passkeys, 2FA codes, cards and notes, on every device, for one person or a whole company.
Security check
Know what to fix first
See at a glance which passwords are compromised, reused or weak, and change each one in three guided steps.
How the check stays private
Developers and AI agents
Secrets in your commands, not in your files
pbx hands secrets to the one process that needs them. Coding agents ask through MCP, and you approve each request on another device.
Secrets for AI agents
Breach alerts
Warned before it hurts
When your email address shows up in a new data breach, Passbox tells you which logins to change, checked without revealing your passwords.
How the check stays private
Share with the people you trust
One price for any number of family members, a family vault for streaming and Wi-Fi, and security codes so nobody can slip in a fake key.
- Families with a shared family vault
- Guests with view-only access, free
- Sharing by link with an expiry date
From five people to five thousand
Roles, groups and shared vaults, single sign-on and SCIM, policies and an audit log. Removing someone replaces the keys.
- Owners, admins, members and guests
- Single sign-on (OIDC) and SCIM
- Policies and organization audit log
A way back in, without a back door
Nobody can reset your master password, not even we. So there are honest ways back in instead.
- Recovery code in your Emergency Kit
- Emergency access with a waiting period
- Add a new device with a code
Switch in minutes
Bring everything. Fits in everywhere.
Import logins, notes, cards, 2FA codes and even passkeys from the password manager you use today; the file is read on your device. Passbox signs you in with your company account, gives your AI agents secrets on approval and sends its logs to your SIEM.
Supported formats
- 1Password
- Bitwarden
- Proton Pass
- Dashlane
- LastPass
- Passbolt
- KeePassXC
- KeePass
- Apple Passwords
- Chrome
- Firefox
- Edge
- Safari
- Brave
- Any CSV
- Okta
- Microsoft Entra ID
- Keycloak
- Claude
- Cursor
- VS Code
- Ollama
- Mistral
- Splunk
Duplicates are detected, and you can export everything again at any time, encrypted or as CSV.
Open source and made in Europe
Run the whole thing yourself
One small Rust server serves everything your apps need. Docker Compose runs it with PostgreSQL and Caddy for automatic HTTPS, on a home server or for a whole company. No license key, no enterprise edition.
- Every feature included, free, for any number of people
- MIT License: read, change and check every line
- Your data stays on your server, in your network, under your rules
- Invitations, mail and administration built in
deploy/compose/docker-compose.yml
services: postgres: image: docker.io/library/postgres:17.10-bookworm networks: [backend] # no internet access migrate: image: ghcr.io/passboxnet/server:latest command: ["migrate"] passbox: image: ghcr.io/passboxnet/server:latest environment: PASSBOX_PUBLIC_URL: https://${PASSBOX_DOMAIN:?set in .env} caddy: image: docker.io/library/caddy:2.11.6-alpine ports: ["80:80", "443:443"] backup: build: ./backup # encrypted nightly backups$ cd passbox/deploy/compose$ cp .env.example .env$ docker compose up -dPricing
Simple prices. Every feature in every plan.
€1 a month for you or your whole family, €3 per member for teams, or free on your own server. Guests and AI agents are always free, and no feature is held back for a higher tier.
2 months free
Private
For one person
€10per year
€0.83 per month, billed yearly
Included
- Unlimited items and devices
- Apps for browser, computer and phone
- Autofill, passkeys and 2FA codes
- Security check with leaked passwords
- Emergency access and recovery code
- AI agents and your own AI model, free
Get startedHosted in Germany
Family
PopularFor the whole family, any size
€10per family / year
€0.83 per month, billed yearly
Included
- Unlimited family members, one price
- Everything in Private, for everyone
- Family vault plus a private vault each
- Recovery through the organizer, on by default
- Guests such as the babysitter, free
- Emergency access with a waiting period
Get startedHosted in Germany
Teams
For companies of any size
€30per member / year
€2.50 per month, billed yearly
Included
- Everything in Private
- Shared vaults, groups and roles
- Recovery through administrators, on by default
- Guests free, view-only
- Two-step sign-in with security keys
- Policies and audit log
- Single sign-on and SCIM
Get startedHosted in Germany
Self-hosted
On your own server
Free
Forever, with every feature
Included
- Every feature, no limits
- Any number of members and guests
- Docker Compose: Passbox, PostgreSQL and Caddy
- Invitations, mail and administration
- MIT License, full source code
Read the guideForever, with every feature
Free in every plan
These never cost extra and never count as members.
- GuestsUnlimited and always free: view-only access to the vaults you share with them. For freelancers, the babysitter or your tax advisor.
- AI agents and service accountsFree with fair use. Agents ask for one secret at a time, and you approve.
- AI with your own modelOn your device, on your own server (Ollama, vLLM) or with an EU provider and your own key. Your secrets never reach a model.
- Recovery through your organizationOn by default in families and teams: if you forget your master password, an admin can help you back in.
Built for privacy and control
Open source code, a published security design and data that stays in Germany or on your own server. No promises you have to take on faith.
- Zero-knowledge
- Open source (MIT)
- Hosting in Germany
- PostgreSQL with Row Level Security
- End-to-end encryption
- Post-quantum key exchange
- GDPR
Zero-knowledge by design
Your vault is encrypted on your devices with keys only you hold. The server stores ciphertext, an OPAQUE record and public keys, nothing it could read.
- End-to-end encryption
- OPAQUE sign-in
- Secret Key
Your data, your jurisdiction
The hosted service runs in data centers in Germany. Or run the very same server yourself, with every feature, in your own network.
- Hosting in Germany
- Self-hosting
- GDPR
Open source
Server, apps and encryption core under the MIT License.
Row Level Security
PostgreSQL limits every query to the signed-in account.
Post-quantum
Every share is sealed with X-Wing (X25519 + ML-KEM-768).
Report privately
Vulnerabilities go to us through GitHub Security Advisories.
Compare
How Passbox compares
Factual, dated comparisons with sources, including what the others do better.
- Passbox vs1PasswordThe same two-secret design, plus open source, self-hosting and emergency access.Read the comparison
- Passbox vsBitwardenOpen source on both sides, with a Secret Key and every enterprise feature free to self-host.Read the comparison
- Passbox vsProton PassEuropean too, but with an open server you can run yourself.Read the comparison
Can Passbox read my passwords?
No. Your vault is encrypted on your device with keys that only you have. Our server stores only encrypted data, and it never receives your master password or your Secret Key.
Why should I trust Passbox?
Because you don't have to take our word for it: Passbox is open source, its whole security design is public, and the server never sees your passwords or keys. The security page explains how.
What is the Secret Key?
A long random code that is created on your first device and printed in your Emergency Kit. Together with your master password it protects your vault: even someone with a stolen copy of our database cannot try to guess your password without it. You enter it once on each new device, or move it there with a device code.
What happens if I forget my master password?
Nobody can reset it, not even we, because nobody else has your keys. But you can get back in with the recovery code from your Emergency Kit, through your family or organization (on by default there), or let a trusted person access your vaults through emergency access. Set one of them up today.
Can I share passwords with my family?
Yes. Start a family and Passbox creates a family vault. Everyone keeps a private vault that nobody else can open. You choose who can view, edit or manage the family vault.
How many people can join a family?
As many as you like. Family costs €1 a month or €10 a year for the whole family on the hosted service, and guests such as the babysitter are free.
Is the self-hosted version limited?
No. Self-hosting is free and includes every feature, for any number of people. The code is MIT-licensed, so you can run, change and check it yourself.
What does the hosted service cost?
€1 a month (€10 a year) for one person on Private, the same for a whole family of any size on Family, and €3 per member (€30 a year) on Teams, with every feature. Guests, AI agents and service accounts are free.
Take back your keys.
Hosted in Germany from €1 a month, for you or your whole family. Or free on your own server, with every feature.