Self-host zero_password_manager
0.2.0Self-hosted zero-knowledge password manager
- Stars
- 168
- Port
- 8000 (API server)
- Requires
- Redis
What is zero_password_manager?
Zero Password Manager is a self-hosted password manager where you run the server yourself. The Flutter apps encrypt everything on your device with AES-256-GCM before any data leaves your phone or computer. The backend (FastAPI) only ever sees encrypted blobs and hashed site identifiers — it cannot read your passwords or even know which websites you use. It requires TOTP two-factor authentication for every account, supports WebAuthn passkeys, and unlocks via fingerprint or Face ID. You can organize entries into colored folders, track password history, share credentials safely, grant emergency access to trusted people, and import from other managers. Deployment options include Docker Compose with PostgreSQL and Redis, or a manual Python setup. Android APKs are pre-built; other platforms compile from source. The license allows personal and self-hosted use but not commercial SaaS.
Should you self-host zero_password_manager?
zero_password_manager scores 40/100 on selfhost.directory (how scoring works) and ranks #18 of 28 in Password Managers. It has 168 GitHub stars.
It shipped 2 stable releases in the past year. The latest, 0.2.0, came out on 27 March 2026. New versions land roughly every 2 weeks.
Setup is moderate: expect some configuration beyond a single command. It is Other-licensed and written mostly in Dart.
Its closest alternative on selfhost.directory is AliasVault (68/100, 3 321 stars). It scores higher overall, so compare the two before you pick. See zero_password_manager vs AliasVault side by side.
Features
- Audit Log
- Biometric unlock
- Blind site hashing
- CSV Import
- Emergency access
- End-to-end encryption
- Folder Organization
- Mandatory TOTP 2FA
- Password history
- Password rotation reminders
- Per-operation OTP gating
- Secure credential sharing
- WebAuthn / FIDO2 passkeys
- Zero-knowledge architecture
zero_password_manager README
More in Password Managers
AliasVaultOpen-source, self-hosted password and email alias manager: end-to-end encrypted vaults, a built-in receive-only email server, TOTP, passkeys and browser/mobile apps.
BitwardenThe open-source Bitwarden Server is the self-hosted password-vault backend: API, identity, database and Docker deployment scripts for Windows, macOS and Linux.
BrambleLocal-first password manager keeping vault encrypted on your devices browsers desktop mobile. No account server data. Peer-to-peer sync imports KeePass LastPass Bitwarden
DELE.TODELE.TO is a self-hosted, open-source service for securely sharing passwords and credentials using client-side AES-256 encryption with self-destructing links.
FlashPaperFlashPaper is a self-hosted, open-source app for sharing secrets via one-time links that self-destruct after viewing. Zero-knowledge AES-256 encryption with local SQLite.
FyxxVaultSelf-hosted, open-source password manager with AES-256-GCM encryption, TOTP/2FA, dark web monitoring via HIBP, and zero-knowledge architecture.
guptSelf-hosted, end-to-end encrypted messenger and privacy suite with no phone number or central server — runs in the browser on a decentralized Nostr relay network.
KeewebFree cross-platform password manager compatible with KeePass
keyperKeyper is a self-hosted, open-source credential manager encrypting secrets client-side with AES-256-GCM and Argon2id, storing them in your own database.
keyshadeOpen-source, self-hostable secret management with public key encryption, live updates, versioning, and RBAC.
kontojKontoj is a self-hosted, open-source web app that helps create and manage service accounts using a JSON config file, with autofill via a browser userscript.
lazywardenAutomatic Bitwarden Backup
0 comments