Psono

Psono is a team password manager you can host yourself, which is the combination most of this category does not offer. Personal managers self-host badly and team managers are almost always someone else's service — Psono is open source, designed for organisations, and deployable on your own infrastructure.

Encryption happens client-side before anything is transmitted, so a self-hosted Psono server stores material it cannot read, and the same is true of the hosted option on German servers. For team use the sharing model is the part that matters: credentials shared with a group rather than pasted into chat, with access removed when someone leaves rather than remaining in a colleague's notes app.

It is developed in Germany with servers in Germany for the hosted version, using TLS 1.2 with perfect forward secrecy in transit on top of the client-side encryption. Free and open source to self-host, with paid hosting and enterprise plans including the administration features larger deployments need. The costs are the usual ones: self-hosting means you run and update it, the interface is functional rather than polished next to 1Password, and the ecosystem of integrations is smaller.

What Psono does well

• Open source and self-hostable for team use
• Client-side encryption — the server stores unreadable data
• Proper group sharing with revocable access
• German company, German servers on the hosted option
• Free to self-host at any team size

Where Psono falls short

• Self-hosting means you run and update it
• Interface functional rather than polished
• Smaller integration ecosystem than commercial rivals
• Enterprise administration features are paid

Standout feature. A team password manager on your own server — the combination that personal managers and SaaS both miss.