Best Self-Hosted Alternatives to 1Password
1Password is, plainly, the best-executed password manager most people will ever use — the apps are excellent on every platform, the security model is public and well reviewed, and it costs $3.99 a month on the monthly plan, less if you pay for a year up front for an individual. People leave it for two reasons: the vault lives on someone else's infrastructure, and the per-person bill keeps scaling as a family or a team grows. The self-hosted options below put the vault on a server you own instead — one of them, Vaultwarden, even keeps 1Password-class client apps by speaking the Bitwarden protocol.
1Password costs about $48/year and keeps your data on its servers. These researched, open-source alternatives give you the same workflow on hardware you own — here's what each needs to run.
- Keeping 1Password-class apps, losing the bill
- Vaultwarden — one 256 MB container that speaks the Bitwarden protocol, so the official browser and mobile clients autofill against your own server.
- The same thing, vendor-supported
- Bitwarden — the official self-hostable server — heavier than Vaultwarden, and the right call when you need support and enterprise SSO on-prem.
- Team sharing enforced by encryption, not permissions
- Passbolt — every secret is encrypted to each user's own OpenPGP key, so revoking access is a real cryptographic operation.
- IT teams that want an admin portal and an API
- Psono — end-to-end encrypted vaults with groups, API keys, and a built-in admin portal — the most assembly-required option here.
- Shared credentials with folder-level governance
- TeamPass — a folder tree with per-folder ACLs, roles, and an audit trail of who read what, on a plain PHP and MariaDB box.
- A client for KeePass files, not a server
- KeeWeb — hosts the app, not your passwords — a web and desktop client for kdbx vaults you already keep on disk or a cloud drive.
The alternatives
What you give up by leaving 1Password
Be honest with yourself about what you are giving up, because it is a lot: the polish of apps that never make you think, Watchtower telling you which of your logins turned up in a breach, Travel Mode wiping sensitive vaults off a device before you cross a border, family and shared-vault flows that non-technical people actually use, and infrastructure that gets audited by people whose full-time job that is. And a password manager is the single worst thing to lose to a bad backup — 1Password's redundancy is invisible to you today, and self-hosting makes it entirely yours: your restore test, your off-box copy, your problem at 3am. Take that trade when you want the data on your own hardware, when per-seat pricing has stopped making sense, or when a policy demands it — and only once you can prove you can restore the vault from a backup, not just take one.
Common questions
Are these 1Password alternatives really free?
The software is open-source and free to run. Your only cost is the server it runs on — often a few dollars a month, less than most SaaS subscriptions.
How much server do I need to self-host one?
Most of these run comfortably on a small VPS — 1–2 GB of RAM is enough for a single-user or small-team setup. Each app's page lists its minimum RAM.
Will I lose features by leaving 1Password?
It depends on the app. The alternatives below cover the core workflow; polish and integrations vary, so check each one's stack and difficulty before you commit.