License & Deployment Mix: 18 tools – 9 OSS, 8 SaaS. (OSS and SaaS counts can overlap when an open-source tool also offers a vendor-hosted edition.)

What Is a Password Manager?

A password manager is a tool that securely stores, generates, organizes, and shares passwords, credentials, and other sensitive data. Enterprise password managers extend beyond personal password vaults to provide:

• Encrypted vaults – zero-knowledge architecture where only the user’s master password (or key) can decrypt stored credentials; the service operator cannot access vault contents
• Password generation – cryptographically random passwords with configurable length, complexity, and character sets
• Secure sharing – share credentials with individuals or groups without revealing the plaintext password; shared folders and collections for team access
• Multi-factor authentication – TOTP, WebAuthn /FIDO2, hardware keys (YubiKey), and biometric second factors for vault access
• Breach monitoring – checks stored passwords against known breach databases (Have I Been Pwned); alerts for compromised, reused, or weak passwords
• Audit logs – track who accessed which credentials, when, and from where; compliance reporting for SOC 2, ISO 27001, HIPAA
• Password policies – enforce minimum length, complexity, rotation schedules, and MFA requirements across the organization
• Browser extensions – auto-fill credentials in web forms; detect new logins and offer to save them; detect password changes and update stored entries
• Mobile apps – iOS and Android native apps with biometric unlock and auto-fill integration (iOS AutoFill, Android Autofill Framework)
• CLI access – command-line tools for scripting, automation, and developer workflows; retrieve secrets programmatically
• Secrets management – some password managers extend into infrastructure secrets (API keys, certificates, SSH keys, environment variables)

Password managers are a critical security tool for any organization. Weak, reused, or compromised passwords remain the leading cause of data breaches. A team password manager eliminates password reuse, enables secure credential sharing, and provides audit visibility into credential access.

The information on these pages was researched by a combination of human review and large language models. To suggest an addition or correction, please contact us. Prepared by Rhodium Systems Inc., author of the ResorsIT platform — a unified IT operations management platform for IT teams and MSPs that integrates a curated suite of open-source, commercial, and SaaS applications into a single system with shared identity, single sign-on, access control, and a common audit trail. Use this catalogue only as a starting point for your own research, and review any tool carefully against your own requirements before relying on it. Catalogue data version 2026.197.

Comparison

SSO / OIDC Comparison

OIDC is the preferred SSO protocol. The table notes each tool’s behaviour with Authentik as the IdP.

* = requires specific configuration, add-on, or enterprise plan

Best SSO support: Bitwarden (OIDC, SAML, SCIM), 1Password (OIDC, SAML, SCIM), Keeper (OIDC, SAML, SCIM), Dashlane (OIDC, SAML, SCIM)

No SSO: Padloc, Proton Pass (Proton account only), sysPass (LDAP only)

API Comparison

Security Audit History

Security Incidents

Password Management Features

Deployment and Licensing

Tools

18 tools.

1Password

1Password is a leading commercial password manager developed by AgileBits Inc. (Toronto, Canada). It provides password storage, secure notes, document storage, and identity management across all major platforms.

License: Proprietary (proprietary) · Kind: web · Deploy: saas · SSO: OIDC, SAML

Website

Bitwarden

Bitwarden is the most widely deployed open-source password manager, used by millions of individuals and thousands of organizations worldwide.

License: AGPL-3.0-only (OSS) · Kind: web · Deploy: native, docker · SSO: OIDC

Website · Source

Dashlane

Dashlane is a commercial cloud password manager using AES-256 encryption with Argon2d and a zero-knowledge model, offering vault storage, passkeys, dark web monitoring, and patented Confidential SSO.

License: Proprietary (proprietary) · Kind: web · Deploy: saas · SSO: SAML

Website

KeePassXC

KeePassXC is a community-driven cross-platform fork of KeePassX, which itself is a port of the original KeePass Password Safe for Windows.

License: GPL-2.0-only (OSS) · Kind: web · Deploy: saas, docker, native, package · SSO: none

Website · Source

Keeper

Keeper Security is a commercial password manager and privileged access management (PAM) platform founded in 2011 (Chicago, USA).

License: Proprietary (proprietary) · Kind: web · Deploy: saas · SSO: OIDC

Website

LastPass

LastPass is a commercial password manager originally developed by Marvasol Inc. and later acquired by LogMeIn (2015), then spun off as an independent company (2021).

License: Proprietary (proprietary) · Kind: web · Deploy: saas · SSO: OIDC, SAML

Website

ManageEngine Password Manager Pro

ManageEngine Password Manager Pro (PMP) is an enterprise privileged access management (PAM) and password management solution developed by Zoho Corporation’s ManageEngine division.

License: Proprietary (proprietary) · Kind: web · Deploy: native · SSO: none

Website

NordPass

NordPass is a commercial password manager developed by Nord Security, the parent company of NordVPN.

License: Proprietary (proprietary) · Kind: web · Deploy: saas · SSO: OIDC

Website

Padloc

Padloc is a minimalist, open-source password manager with web, desktop, and mobile clients, using client-side AES-256 encryption, shared vaults, TOTP, and organization management.

License: AGPL-3.0-only (OSS) · Kind: web · Deploy: native, docker · SSO: none

Website · Source

Passbolt

Passbolt is an open-source password manager for teams that encrypts each secret per- recipient using OpenPGP key pairs, so the server never holds plaintext credentials; self-hosted or cloud-hosted.

License: AGPL-3.0-only (OSS) · Kind: web · Deploy: native, docker · SSO: none

Website · Source

Pleasant Password Server

Pleasant Password Server is a Windows-based enterprise password management solution built on .NET and SQL Server.

License: Proprietary (proprietary) · Kind: web · Deploy: native · SSO: OIDC, SAML

Website

Proton Pass

Proton Pass is a password manager developed by Proton AG, the Swiss company behind Proton Mail, Proton VPN, and Proton Drive. Launched in 2023, it is the newest product in Proton’s privacy-focused suite.

License: GPL-3.0-only (OSS) · Kind: web · Deploy: saas · SSO: none

Website · Source

Psono

Psono is an open-source password manager designed for teams and enterprises, with the most permissive license (Apache 2.0) among server-based open-source password managers.

License: Apache-2.0 (OSS) · Kind: web · Deploy: native, docker · SSO: OIDC

Website · Source

RoboForm

RoboForm is one of the oldest password managers in the industry, originally launched in 1999 by Siber Systems. It began as an advanced form-filling tool and evolved into a full password management platform.

License: Proprietary (proprietary) · Kind: web · Deploy: saas · SSO: none

Website

sysPass

sysPass is a PHP-based web password manager designed for IT teams and system administrators. It provides a centralized web interface for storing and managing passwords with categories, client profiles, and user/group-based access controls.

License: GPL-3.0-only (OSS) · Kind: web · Deploy: native, docker · SSO: none

Website · Source

Teampass

Teampass is a PHP-based collaborative password manager designed for teams. It provides a web interface for storing, organizing, and sharing credentials with role-based access controls.

License: GPL-3.0-only (OSS) · Kind: web · Deploy: native · SSO: none

Website · Source

Vaultwarden

Vaultwarden (formerly bitwarden_rs) is a community-maintained, lightweight alternative implementation of the Bitwarden server API written in Rust.

License: AGPL-3.0-only (OSS) · Kind: web · Deploy: native, docker · SSO: none

Website · Source

Zoho Vault

Zoho Vault is the password management component of the Zoho ecosystem, which encompasses over 200 business applications including CRM, mail, projects, and analytics.

License: Proprietary (proprietary) · Kind: web · Deploy: saas · SSO: none

Website