Top pick · highest health
Vaultwarden
Lightweight Bitwarden server API implementation written in Rust.
★ 70k 79 commits / 90d ⟳ yesterday GPL-3.0 Docker
Category
A password manager allows users to store, generate, and manage their passwords for local applications and online services. This page ranks 7 open-source password managers projects by a health score recomputed every night from repository data; nothing else affects the order. Vaultwarden leads at 99/100 with 79 commits in the last 90 days and 70k stars, followed by Bitwarden (97) and Passbolt (95). 6 of the 7 score 70 or above, 5 publish a Docker image, and the median health is 94. AGPL-3.0 is the most common licence, carried by 3 of them. Between them they stand in for 1Password, LastPass and Bitwarden Cloud.
Most starred
69,927 stars on GitHub, the largest community in the category.
Most active
1,081 commits in the last 90 days, the fastest-moving codebase here.
Most permissive
Apache-2.0 licence with health 73/100: the strongest option if you need to embed or fork commercially.
Ranked by health
Top pick · highest health
Lightweight Bitwarden server API implementation written in Rust.
★ 70k 79 commits / 90d ⟳ yesterday GPL-3.0 Docker
Password manager with a webapp, browser extension, and mobile app.
★ 21k 458 commits / 90d ⟳ yesterday AGPL-3.0 Docker
End-to-end encrypted password manager with a built-in email alias generator and server.
★ 3.3k 1081 commits / 90d ⟳ today MIT Docker
Password manager dedicated for managing passwords in a collaborative way. One symmetric key is used to encrypt all shared/team passwords and stored server side in a file and the database. works on any server Apache, MySQL and PHP.
★ 1.9k 937 commits / 90d ⟳ yesterday GPL-3.0
Simple password manage with sharing features by group and user, but no administration interface.
★ 0 0 commits / 90d ⟳ unknown AGPL-3.0 Docker
| # | ||||||
|---|---|---|---|---|---|---|
| 1 | Vaultwarden Docker | 70k | 79 | GPL-3.0 | yesterday | |
| 2 | Bitwarden Docker | 21k | 458 | AGPL-3.0 | yesterday | |
| 3 | Passbolt Docker | 6.2k | 495 | AGPL-3.0 | 10 days ago | |
| 4 | AliasVault Docker | 3.3k | 1081 | MIT | today | |
| 5 | Teampass | 1.9k | 937 | GPL-3.0 | yesterday | |
| 6 | Psono | 6 | 36 | Apache-2.0 | yesterday | |
| 7 | PassIt Docker | 0 | 0 | AGPL-3.0 | unknown |
Vaultwarden edges Bitwarden 99 to 97, and most of the difference is stars: 70k stars against 21k stars. Bitwarden is the busier codebase, though, with 458 commits in 90 days to 79.
The most recent release is Psono v7.0.30, published yesterday. None of the measured options scores under 40. By stack, PHP (2), Python (2) and C# (1) are the most common. AliasVault and Psono are permissively licensed; Vaultwarden, Bitwarden, Passbolt and 2 more are copyleft. PassIt is not hosted on a forge Repoly can read, so it has no measured score yet.
By Repoly's GitHub health score, Vaultwarden at 99/100 (79 commits in 90 days, 1.37.4 from 25 days ago). Bitwarden is next at 97; Vaultwarden's lead comes mostly from stars. The score measures maintenance, not features, so shortlist the top few and try them.
AliasVault (1,081 commits in 90 days), Teampass (937 commits in 90 days) and Passbolt (495 commits in 90 days). Commit activity is 35 of the 100 health points, the largest single term.
5 of 7 publish a Docker image or Compose file, led by Vaultwarden, Bitwarden, Passbolt, AliasVault and PassIt.
2 of 7: AliasVault (MIT), Psono (Apache-2.0). 5 are copyleft.
1Password (Vaultwarden ranks highest here), LastPass (Vaultwarden ranks highest here) and Bitwarden Cloud (Vaultwarden ranks highest here).