Passbolt
Pending verificationOpen-source team password manager — a Luxembourg alternative to 1Password Teams.
Overview
Passbolt is a Luxembourg City, Luxembourg-based European company building open source, password manager, privacy, and security software since 2016. As an EU-headquartered provider, Passbolt likely operates under GDPR, though EU Alts has not yet independently verified its ownership and hosting facts, so its exposure to the US CLOUD Act isn't confirmed yet — see the Details section below for what's known so far.
Why European teams pick Passbolt
Teams in Europe consider Passbolt when they want a open source provider that bills in EUR and keeps customer data under Luxembourg law, operating since 2016. Its EU headquarters is a good sign compared with well-known US incumbents, but EU Alts hasn't yet verified Passbolt's ownership and hosting facts — check back once verification is complete.
See more EU open source tools or browse other startups from Luxembourg.
About
Passbolt is a Luxembourg-based open-source password manager designed specifically for teams and organisations. Passwords are end-to-end encrypted using OpenPGP — only the intended recipients can decrypt credentials — and all encryption and decryption happens in the browser, so the server never sees plaintext passwords. Passbolt is self-hostable on any EU server (a free Community Edition is available under AGPL) or available as a managed cloud service hosted in the EU. It integrates with LDAP/Active Directory for enterprise user provisioning and supports fine-grained access control for sharing credentials across teams and departments. Passbolt is widely used by EU public sector organisations, engineering teams, and businesses that need a SOC 2 and GDPR-compliant credential management solution.
Details
- Founded
- 2016
- Headquarters
- Luxembourg City, Luxembourg
- Ownership
- Independently owned (Luxembourg)
- Company size
- 11–50 employees
Other EU startups like Passbolt
- TrustYourWebsite Netherlands — Automated GDPR, cookie-consent and accessibility scanner for EU and UK small business websites. Free risk score in minutes.
- Unchained Engine Switzerland — Open-source headless e-commerce framework for Node.js, self-hostable and Swiss-made.
- Postscale — European transactional email and email API platform for sending, receiving, and managing email with privacy-first infrastructure and EU data residency.
- FormVault Norway — GDPR-compliant form builder with end-to-end encryption (AES-256-GCM), EU data residency, and a submission dashboard. No cookie banners needed.
- Pocketbase ✓ Verified by EU AltsBulgaria — Open-source backend in a single file — a European alternative to Firebase.
- NocoDB ✓ Verified by EU AltsGermany — Open-source Airtable alternative that turns databases into smart spreadsheets.
Frequently asked questions
What is Passbolt?
Passbolt is a Luxembourg-based open-source password manager designed specifically for teams and organisations. Passwords are end-to-end encrypted using OpenPGP — only the intended recipients can decrypt credentials — and all encryption and decryption happens in the browser, so the server never sees plaintext passwords. Passbolt is self-hostable on any EU server (a free Community Edition is available under AGPL) or available as a managed cloud service hosted in the EU. It integrates with LDAP/Active Directory for enterprise user provisioning and supports fine-grained access control for sharing credentials across teams and departments. Passbolt is widely used by EU public sector organisations, engineering teams, and businesses that need a SOC 2 and GDPR-compliant credential management solution.
What does Passbolt do?
Passbolt is open-source team password manager — a luxembourg alternative to 1password teams. It is listed under open source, password manager, privacy, and security on EU Alts because its core functionality serves teams looking for a European open source tool with EU data residency, typically as a switch away from well-known US incumbents.
Is Passbolt a good European open source alternative?
Passbolt is a fit for European businesses evaluating open source options where data residency and GDPR alignment matter — typical buyers include EU-based SaaS teams, public-sector projects, regulated industries (healthcare, finance, legal), and any organisation that needs to demonstrate that customer data does not leave the EU. It also overlaps with password manager and privacy use cases.
Is Passbolt GDPR compliant?
Passbolt is headquartered in Luxembourg City, Luxembourg and falls under EU jurisdiction, so it likely processes user data under the GDPR by default. Customer data processing is supervised by Luxembourg's data protection authority, the Commission nationale pour la protection des données (CNPD). EU Alts has not yet independently verified Passbolt's ownership structure or hosting location, so we can't yet confirm its exposure to the US CLOUD Act the way we can for verified entries.
How do teams switch from well-known US incumbents to Passbolt?
Most teams considering a move from well-known US incumbents to Passbolt are drawn to its EU headquarters and open source workflow fit. EU Alts hasn't yet verified Passbolt's ownership and hosting facts, so treat any CLOUD Act or Schrems II conclusions as provisional until verification is complete. Plan a migration in stages regardless: export your data from the US incumbent, pilot Passbolt with a small team, then move the rest once integration coverage is confirmed.
Where is Passbolt based?
Passbolt is headquartered in Luxembourg City, Luxembourg. The company was founded in 2016. Its main website is https://www.passbolt.com.