Password Depot

Password Depot is sold the way software used to be sold: €99.95 once for one user across all their own devices, or €149.95 once for a family pack of five licences, with no subscription to cancel.

The Enterprise Server for teams is quoted rather than listed, and is free for up to three users. AceBIT GmbH has been at this since 1998 and runs from Schleiermacherstraße in Darmstadt, registered at Amtsgericht Darmstadt under HRB 33038 — a small German company with a long trading history rather than a funded newcomer.

The part that matters for this directory is that AceBIT operates no cloud of its own. The vault is a local file, or it sits on an Enterprise Server you run, or in your own Azure tenant; nothing is stored on infrastructure AceBIT controls.

AceBIT is also the rare vendor here with an independent certificate rather than a self-description: ISO/IEC 27001:2022 issued by TÜV NORD, with penetration testing by SySS. Among the closed-source options in this category that combination — a named certifier and no vendor-held data — is the strongest evidence on offer.

The qualifications are real. The source is closed, so the client that handles your key has to be trusted rather than read.

The home edition syncs through Google Drive, OneDrive, Dropbox or HiDrive, and three of those four are American services; the self-hosted route via your own Azure tenant still puts the vault on Microsoft infrastructure, even when the tenant is yours. The pricing page does not say whether its figures include VAT, though the server quote is stated as "plus 19% VAT", and the Enterprise Server price only appears after a sales conversation.

What Password Depot does well

• A one-time licence at €99.95, or €149.95 for five, instead of a subscription
• ISO/IEC 27001:2022 certified by TÜV NORD, with penetration testing by SySS
• No vendor cloud at all: a local file, your own server or your own Azure tenant
• German company in Darmstadt, trading since 1998, registered at HRB 33038
• Enterprise Server free for up to three users, so a team can test it properly

Where Password Depot falls short

• Closed source — the client that handles your key cannot be inspected
• Home sync runs through Google Drive, OneDrive, Dropbox or HiDrive; three of the four are American
• The self-hosted Azure option still places the vault on Microsoft infrastructure
• The listed prices do not state whether VAT is included, and the Enterprise Server is quote-only

Standout feature. Bought once, hosted nowhere: Password Depot is the only certified vendor here that never holds your vault, because AceBIT runs no cloud for it to sit in.