Self-host sysPass
3.2.11Web-based password manager for teams and individuals
- Stars
- 994
What is sysPass?
sysPass is a PHP web-based password manager designed for both business and personal use. It provides AES-256 encryption in CTR mode for stored passwords and RSA encryption for password transmission from forms. The application supports two-factor authentication, multi-user management with groups and profiles featuring up to 29 access levels, and authentication via MySQL, OpenLDAP, and Active Directory. Additional features include tags, custom fields, public links for sharing, private accounts, favorites, history tracking, activity notifications via email and in-app, an event log, multi-language support, and a JSON-RPC API for integration. It can be self-hosted on any PHP 7.4+ compatible server with a MySQL database, with installation documentation available at doc.syspass.org. The project is licensed under GNU GPLv3 and the latest stable release is 3.2.11 from July 2022.
Should you self-host sysPass?
sysPass scores 52/100 on selfhost.directory (how scoring works) and ranks #10 of 28 in Password Managers. It has 994 GitHub stars.
There was no stable release in the past 12 months, so check the repository's recent activity before you rely on it.
Setup is moderate: expect some configuration beyond a single command. It is GPL-3.0-licensed and written mostly in PHP.
Its closest alternative on selfhost.directory is Vaultwarden (89/100, 69 824 stars). It scores higher overall, so compare the two before you pick. See sysPass vs Vaultwarden side by side.
Features
- Activity notifications
- AES-256 encryption
- Favorites and history
- JSON-RPC API
- Multi-language Support
- Multi-User Management
- Private accounts
- Public Links
- RSA encryption for forms
- Tags and custom fields
- Two-factor authentication
sysPass README
More in Password Managers
TeampassSelf-hosted, open-source team password vault on PHP/MySQL: folder and role access control, AES-256-GCM encryption, LDAP/OAuth2 SSO, TOTP and compliance reports.
VaultwardenSelf-hosted, open-source Bitwarden-compatible password manager server written in Rust, offering nearly full API compatibility with official Bitwarden clients.
Vaultwarden_Self_HostSelf-hosted password manager using Vaultwarden with automated Docker deployment, nginx HTTPS proxy, backups, and private CA for trusted HTTPS.
whisperSelf-hosted, open-source tool for securely sharing passwords via encrypted one-time links with client-side AES-256-GCM encryption and Argon2id hashing.
zero_password_managerRun your own password vault on your hardware. Client-side AES-256-GCM encryption, required TOTP 2FA, hidden site URLs, and Flutter apps everywhere.
AliasVaultOpen-source, self-hosted password and email alias manager: end-to-end encrypted vaults, a built-in receive-only email server, TOTP, passkeys and browser/mobile apps.
BitwardenThe open-source Bitwarden Server is the self-hosted password-vault backend: API, identity, database and Docker deployment scripts for Windows, macOS and Linux.
BrambleLocal-first password manager keeping vault encrypted on your devices browsers desktop mobile. No account server data. Peer-to-peer sync imports KeePass LastPass Bitwarden
DELE.TODELE.TO is a self-hosted, open-source service for securely sharing passwords and credentials using client-side AES-256 encryption with self-destructing links.
FlashPaperFlashPaper is a self-hosted, open-source app for sharing secrets via one-time links that self-destruct after viewing. Zero-knowledge AES-256 encryption with local SQLite.
FyxxVaultSelf-hosted, open-source password manager with AES-256-GCM encryption, TOTP/2FA, dark web monitoring via HIBP, and zero-knowledge architecture.
guptSelf-hosted, end-to-end encrypted messenger and privacy suite with no phone number or central server — runs in the browser on a decentralized Nostr relay network.
0 comments