Skip to content
SPECIFICTION
Get listed

LTB Self Service Password

ltb-project.org

Free plan WebLinuxAPISelf-hosted
Visit ltb-project.org
Spec score 7.8 #9 of 23 in Self-Service Password Reset Software

What it is

LTB Self Service Password is a PHP web application that lets users change or reset passwords in LDAP directories, including standard LDAPv3 directories and Active Directory. Password resets can rely on security questions, an emailed token, or SMS through an external Email 2 SMS service or SMS API. Administrators can configure checks for length, character classes, forbidden characters and words, password reuse, entropy and breached-password status using the Have I been pwned API. Other features include CAPTCHA, password-change email notices, and scripts that run before or after a password change. Users can also update their SSH key, email address and phone number in LDAP. A REST API is available. The free, GPL-3.0-licensed software is self-hosted. Documented installation routes include a tarball, Debian or Ubuntu packages, CentOS or Red Hat packages, Docker and Git for developers. Prerequisites include PHP 7.4 or later, required PHP extensions, Smarty 3 or later, configured mail and sessions, and LDAP connectivity. The project directs software questions to its mailing lists and bug reports to GitHub issues.

Spec sheet

Purpose
Self Service Password is a PHP web application that lets users change and reset passwords in an LDAP directory.Read 7 Oct 2026 · self-service-password.readthedocs.io
Deployment
The maker documents installation from a tarball, Debian or Ubuntu packages, CentOS or Red Hat packages, Docker, and Git for developers.Read 7 Oct 2026 · self-service-password.readthedocs.io
API
The application provides a REST API.Read 7 Oct 2026 · github.com
Support
The project directs users to its mailing lists for software questions and to GitHub issues for bug reports.Read 7 Oct 2026 · ltb-project.org
License
The GitHub repository identifies the software as GPL-3.0 licensed.Read 7 Oct 2026 · github.com
Additional features
It supports Samba and Active Directory modes, CAPTCHA, password-change email notifications, and scripts before or after a password change.Read 7 Oct 2026 · github.com
Directory support
It supports standard LDAPv3 directories and Active Directory.Read 7 Oct 2026 · ltb-project.org
LDAP attributes
Users can change their SSH key, email address, and phone number in the LDAP directory.Read 7 Oct 2026 · github.com
Password controls
Local password policy can check length, forbidden characters, character classes, password reuse, forbidden words, entropy, and breached-password status through the Have I been pwned API.Read 7 Oct 2026 · github.com
Professional services
The project directs customers seeking professional services or support to companies listed on its professional services page.Read 7 Oct 2026 · ltb-project.org
Requirements
The repository lists PHP 7.4 or later, required PHP extensions, Smarty 3 or later, configured mail, and configured sessions among its prerequisites.Read 7 Oct 2026 · github.com
Reset methods
Password reset can use security questions, an emailed token, or SMS through an external Email 2 SMS service or SMS API.Read 7 Oct 2026 · github.com

Plans and prices

Self Service Password Free GPL-3.0 licensed software; self-hosted; requires PHP and LDAP connectivity Read 7 Oct 2026 · github.com

Every LTB Self Service Password plan and price →

Strong points and limits

Strong points

  • Supports LDAPv3 directories and Active Directory
  • Offers several password-reset methods
  • Configurable password policy and breached-password checks
  • Provides a REST API and multiple deployment options

Limits

  • Requires PHP 7.4 or later and required extensions
  • Requires configured mail, sessions and LDAP connectivity
  • Self-hosted deployment

Who it suits

It suits organizations running LDAPv3 directories or Active Directory that want users to manage password changes and resets. Deployment requires PHP, configured mail and sessions, and LDAP connectivity.

Verdict

LTB Self Service Password provides password self-service with policy checks and multiple reset methods for LDAP environments. Its self-hosted deployment and documented prerequisites are important planning considerations.

Where Specifiction places it

Alternatives to LTB Self Service PasswordAll alternatives →