Repolode
Submit
nilsteampassnet

nilsteampassnet/TeamPass

Self-hosted collaborative password manager for teams, with folder-level access control, AES-256-GCM encryption and audit trails.

Open-source alternative to:LastPass

View on GitHubWebsite
Stars
1,888
Forks
573
Open issues
5
Last commit
3 days ago

What is it?

Teampass is an open-source credential vault that runs on your own PHP and MySQL/MariaDB server. Teams use it to decide who can see which credentials, organized through nested folders, roles and per-user rights, and to stop passwords from being shared in chat or spreadsheets.

Secrets are encrypted with AES-256-GCM under 256-bit object keys, and the private key is derived from the user's password with PBKDF2-SHA256. Each user holds an RSA-wrapped copy of the object keys, so removing an account revokes its access. The project also covers LDAP/AD and OAuth2 SSO, TOTP, Duo and YubiKey MFA, access review campaigns, and compliance report export.

It includes a REST API with JWT authentication, a browser extension for autofill, and import from Bitwarden, LastPass, 1Password, KeePassXC and CSV. Docker images are published on Docker Hub and GitHub Container Registry.

Key features

  • 01Folder and role-based access rights with per-user overrides
  • 02AES-256-GCM encryption with per-user RSA-wrapped object keys
  • 03LDAP/AD with nested groups, OAuth2 SSO and multiple MFA methods
  • 04Access reviews, compliance reports and rotation tracking
  • 05REST API with JWT authentication and OpenAPI spec
  • 06Import from Bitwarden, LastPass, 1Password, KeePassXC and CSV

Use cases

  • Small teams that need to share service account passwords without using chat or spreadsheets
  • Organizations that must show auditors who had access to which credentials
  • Homelab users who want a self-hosted vault on a small server
  • Companies that need LDAP or AD integration for password access

Quick start

  1. 1

    Run the Teampass container with Docker

    docker run -d --name teampass -p 8080:80 -v teampass_data:/var/www/html teampass/teampass:latest
  2. 2

    Open the Docker guide for details on configuration

  3. 3

    For production, follow the official bare-metal installation guide

Things to know

  • Requires a PHP 8.2+ and MySQL/MariaDB server with several PHP extensions, so setup takes effort.
  • Self-hosting means you are responsible for server maintenance, backups and security hardening.

In collections

Password managersSelf-hosted appsPrivacy & local-first toolsDatabases & SQL tools

Topics

#password-manager#self-hosted#encryption#access-control#php#mysql#team-collaboration

FAQ

What is TeamPass?
Self-hosted collaborative password manager for teams, with folder-level access control, AES-256-GCM encryption and audit trails. Teampass is an open-source credential vault that runs on your own PHP and MySQL/MariaDB server. Teams use it to decide who can see which credentials, organized through nested folders, roles and per-user rights, and to stop passwords from being shared in chat or spreadsheets.
Is TeamPass free to use? What license does it have?
TeamPass is open source under the GPL-3.0 license. Check the license terms before using it in commercial products.
Is TeamPass still maintained?
Actively maintained. The last commit to TeamPass was on Nov 4, 2026.
What can I use TeamPass for?
Small teams that need to share service account passwords without using chat or spreadsheets Organizations that must show auditors who had access to which credentials Homelab users who want a self-hosted vault on a small server Companies that need LDAP or AD integration for password access
How do I install TeamPass?
Run the Teampass container with Docker: docker run -d --name teampass -p 8080:80 -v teampass_data:/var/www/html teampass/teampass:latest Open the Docker guide for details on configuration For production, follow the official bare-metal installation guide
Where can I get TeamPass?
The source code and installation instructions are on GitHub: https://github.com/nilsteampassnet/TeamPass

Summary generated by AI from the project's README. GitHub stats refresh daily.

Related projects