Padloc
padloc.app
What it is
Padloc is an open-source password manager that also handles notes, file storage, authentication, and secret sharing. It can hold passwords, credit cards, banking details, documents, and other sensitive information. Access is available through the web, Windows, macOS, Linux, iOS, Android, and browser extensions for Chrome and Firefox, with cloud synchronization. Shared vaults and organization controls let users set who may access, edit, or share data. Padloc says information is encrypted locally, is not stored or sent in plain text, and cannot be decrypted by the company; its security whitepaper describes AES in GCM mode. The free plan includes unlimited vault items and devices but excludes features such as MFA, shared vaults, and encrypted file storage. Premium starts at $3.49/mo, and a 30-day trial is offered. Users can self-host with the supplied documentation. Padloc says it cannot recover unencrypted data if a user loses the master password.
Spec sheet
- What it does
- Padloc is an open-source, end-to-end encrypted manager for passwords and other private data.Read 15 Oct 2026 · padloc.app
- Product
- Padloc is an open-source password manager that also supports note-taking, file storage, authentication, and secret sharing.Read 5 Oct 2026 · padloc.app
- Free plan
- YesRead 20 Sep 2026 · padloc.app
- Integrations
- Padloc’s 2022 v4 announcement says its Security Report checks for compromised passwords against a known-breach database powered by Have I Been Pwned.Read 5 Oct 2026 · padloc.app
- Security
- Padloc says secure data is encrypted locally, is not stored or transmitted in plain text, and cannot be decrypted by the company.Read 5 Oct 2026 · padloc.app
- Support
- The privacy policy directs users with questions to [email protected].Read 5 Oct 2026 · padloc.app
- License
- The source code is distributed under the GNU Affero General Public License, with commercial licensing available by contacting Padloc.Read 15 Oct 2026 · github.com
- Headquarters
- Ansbach, Bavaria, GermanyRead 28 Sep 2026 · padloc.app
- Audit criticism
- NCC Group's 2019 cryptography review reported flaws involving silent re-addition of removed organization members and dictionary attacks against weak or moderate master passwords.Read 15 Oct 2026 · padloc.app
- Browser extensions
- The browser extension supports Chrome and Firefox; the documentation says Safari, Edge, and other browsers were planned for future support.Read 5 Oct 2026 · docs.padloc.app
- Built-in authenticator
- Paid plans provide a built-in authenticator for one-time passwords.Read 15 Oct 2026 · padloc.app
- Business admin controls
- YesRead 20 Sep 2026 · padloc.app
- Company identity
- The legal developer is MaKleSoft UG, listed at Meisenstraße 5, 91522 Ansbach, Germany; NetSec.News says the project has existed since 2014.Read 15 Oct 2026 · play.google.com
- Cross-device access
- Padloc says it is available for Windows, macOS, iOS, Android, Linux, and major browsers, with cloud synchronization.Read 5 Oct 2026 · padloc.app
- Data hosting
- The FAQ says user data is stored in a Frankfurt, Germany data center operated by DigitalOcean.Read 15 Oct 2026 · docs.padloc.app
- Developer components
- The repository contains core logic, web UI, server, PWA, localization, Electron, Cordova, Tauri and browser-extension packages.Read 15 Oct 2026 · github.com
- Directory integration
- Business and Enterprise plans list directory synchronization and automatic provisioning.Read 15 Oct 2026 · padloc.app
- Documentation
- Documentation includes a user manual, generated technical reference, development material, hosting guides and a security whitepaper.Read 15 Oct 2026 · docs.padloc.app
- Encrypted file storage
- Encrypted attachment storage ranges from 1GB on Premium and Family to 20GB on Business, with Enterprise listed as unlimited.Read 15 Oct 2026 · padloc.app
- Encryption algorithm
- The security whitepaper states that Padloc uses AES in GCM mode for symmetric encryption.Read 15 Oct 2026 · docs.padloc.app
- Encryption detail
- The security whitepaper says Padloc uses AES in GCM mode for symmetric encryption.Read 5 Oct 2026 · docs.padloc.app
- End-to-end encryption
- Padloc says data is encrypted locally and is never stored or transmitted in plaintext.Read 15 Oct 2026 · padloc.app
- Family plan
- YesRead 20 Sep 2026 · padloc.app
- Independent audit
- Padloc says three independent groups audited it; its 2022 Radically Open Security audit summary reports that identified issues were resolved or documented and that no high or critical issues were found.Read 5 Oct 2026 · padloc.app
- Independent install evidence
- A 2024 academic survey table listed Padloc with 1,000+ Google Play installs and four iOS App Store ratings.Read 15 Oct 2026 · ndss-symposium.org
- Limit: autofill
- NetSec.News reported that Padloc lacked autofill and password capture, requiring drag-and-drop entry instead.Read 15 Oct 2026 · netsec.news
- Limit: mobile experience
- An Apple reviewer reported small text, many steps to copy passwords and frequent mobile crashes.Read 15 Oct 2026 · apps.apple.com
- Limit: pricing value
- NetSec.News judged the Premium price difficult to justify because competing open-source managers offered more capabilities for less.Read 15 Oct 2026 · netsec.news
- Multi-factor authentication
- Paid plans include multi-factor authentication, while the Free plan excludes it.Read 15 Oct 2026 · padloc.app
- Organization roles
- Organizations define owners, admins and regular members, with vault permissions assigned directly or through groups.Read 15 Oct 2026 · docs.padloc.app
- Password recovery limit
- The company says it does not store the master password and cannot recover users’ unencrypted data if they lose it.Read 5 Oct 2026 · padloc.app
- Passwordless account login
- NoRead 20 Sep 2026 · padloc.app
- Praise: interface
- ItsFOSS described Padloc as having a pleasing, refreshing user experience and a clean, simple interface.Read 15 Oct 2026 · itsfoss.com
- Praise: simplicity
- NetSec.News characterized the interface as uncluttered, intuitive and easy for password-management beginners.Read 15 Oct 2026 · netsec.news
- Privacy telemetry
- Padloc collects device and anonymized usage information such as operating system, app version, installs and activity.Read 15 Oct 2026 · padloc.app
- Rating on Apple App Store
- 3.6 out of 5 from 10 ratingsRead 15 Oct 2026 · apps.apple.com
- Rating on Firefox Add-ons
- 4 out of 5 from 4 reviewsRead 15 Oct 2026 · addons.mozilla.org
- Rating on Google Play
- 3.0 out of 5 from 66 reviewsRead 15 Oct 2026 · play.google.com
- Rich-text notes
- Paid plans include rich-text notes with Markdown support.Read 15 Oct 2026 · padloc.app
- Secure sharing
- YesRead 20 Sep 2026 · padloc.app
- Security audits
- Padloc says three independent security groups have audited the project, most recently Radically Open Security.Read 15 Oct 2026 · padloc.app
- Security report
- The Security Report feature identifies weak, reused, compromised or expired passwords.Read 15 Oct 2026 · apps.apple.com
- Self-hosting
- Self-hosting is supported with Docker and Docker Compose; the project says a private instance requires its server and web client.Read 15 Oct 2026 · selfhost.directory
- Shared vaults
- Family, Team, Business and Enterprise plans support shared vaults with plan-specific limits.Read 15 Oct 2026 · padloc.app
- Sharing
- Organizations and shared vaults let users share data and control who can access, edit, or share it.Read 5 Oct 2026 · docs.padloc.app
- Stored data
- The service supports passwords, credit cards, notes, banking data, documents, license keys and other sensitive information.Read 15 Oct 2026 · padloc.app
- Supported platforms
- Official downloads cover Windows, macOS, Linux, Android, iOS, Chrome and Firefox.Read 15 Oct 2026 · padloc.app
Plans and prices
Strong points and limits
Strong points
- Free plan allows unlimited vault items and devices.
- Shared vaults provide access and editing controls.
- Cloud synchronization spans desktop and mobile platforms.
- Company says it cannot decrypt locally encrypted data.
- Self-hosting documentation is available.
Limits
- Free plan excludes MFA and shared vaults.
- Free plan excludes encrypted file storage.
- Lost master passwords mean unencrypted data cannot be recovered.
- Safari and Edge extensions are described as future support.
Who it suits
Padloc suits individuals, families, and organizations seeking a password manager with sensitive-data storage and sharing controls. Self-hosting is an option for users comfortable following its technical documentation.
Padloc in depth
Read the full write-up
Padloc is an open-source password manager for individuals, households and teams that need more than a place for logins. Its broad device support and sharing options are useful, but plan limits matter: the free tier omits several security and storage tools, and there is no way to recover a lost master password.
Overview
Padloc combines password storage with notes, file storage, authentication and secret sharing. Its vault can hold credit cards, banking data, documents and other sensitive records, making it a better fit for consolidating personal information than for users who only need a basic password list.
Padloc says data is encrypted locally, is never stored or transmitted in plain text, and cannot be decrypted by the company. Its security whitepaper describes AES in GCM mode for symmetric encryption. The company reports three independent audits; the 2022 Radically Open Security summary says identified issues were resolved or documented, with no high or critical issues found. This is useful assurance, though it does not remove the practical risk of losing access: Padloc does not store the master password and cannot recover unencrypted data if it is lost.
Cloud synchronization connects devices. Users who prefer to operate the service themselves can follow Padloc’s self-hosting documentation and guide. Its Security Report checks passwords against a known-breach database powered by Have I Been Pwned.
Key features
Multiple kinds of sensitive data: Passwords, cards, banking data, notes and documents can share one vault. Encrypted file storage and rich text notes are paid-plan features, so the free tier is less suitable for users who want a full document-and-notes repository.
Sharing with controls: Organizations and shared vaults let users control who can access, edit or share data. This makes Padloc relevant to families and teams, but shared vaults are not included with Free or Premium.
Security and recovery: Local encryption and the reported audit history are meaningful safeguards. The uncompromising master-password recovery limit makes careful credential backup essential.
Breach checks: The Security Report checks for compromised passwords against a breach database. Free does not include it.
Pricing
Padloc is freemium, with a 30-day trial. The free plan has unlimited vault items and devices, an unusually useful base for someone who needs cross-device password storage. It excludes MFA, shared vaults, encrypted file storage, Security Report, the built-in authenticator and rich text notes, so it is not the plan for users who want the broader toolkit.
PlanPriceWhat it includes and who it suitsFreefreeUnlimited items and devices; best for basic personal storage without MFA, sharing or the paid features above.Premium$3.49 a month (billed or $34.90 / year)Unlimited items and devices, MFA and up to 1GB encrypted file storage. It suits an individual wanting stronger account protection and file storage, but still has no shared vaults.Family$5.95 a month (billed or $59.50 / year)Up to 5 users, 5 shared vaults and 1GB encrypted file storage. A practical household option, with firm user and storage caps.Team$3.49 a month (billed or $34.90 / year)Up to 20 shared vaults, 10 groups and 5GB encrypted file storage. It supports small-team sharing but lacks directory sync and automatic provisioning.Business$6.99 a month (billed or $69.90 / year)Up to 50 shared vaults, 20 groups and 20GB storage, with directory sync and automatic provisioning for organizations that need those controls.EnterpriseCustom pricingUnlimited vaults, groups and encrypted file storage; appropriate when the smaller business caps are insufficient.Team and Business are priced per month in the plan terms shown, with annual amounts also given. The available plan terms do not state a seat count for those tiers, so buyers should confirm that before choosing between them.
Platforms
Padloc supports web, Windows, macOS, Linux, iOS and Android, with cloud synchronization and browser extensions for Chrome and Firefox. Safari, Edge and other browser support was described as planned, rather than currently supported. Self-hosting is also an option for users willing to manage their own deployment.
Who it's for
Choose Padloc if you want passwords and other sensitive records in one encrypted service, need broad device coverage, or expect to share credentials through family or organizational vaults. The Free tier can work for personal storage across multiple devices; households should compare Family’s five-user limit, and teams should weigh the collaboration caps against the added provisioning controls in Business.
It is a weaker fit if account recovery is important: losing the master password can mean permanent loss of unencrypted data. It is also less compelling for someone who needs shared vaults on the lowest-cost individual plan, since Premium adds MFA and file storage but not sharing.
Pros and cons
Pros: Unlimited items and devices on Free make it possible to sync a substantial personal vault without a paid subscription.
Pros: Support for notes, banking data, documents and encrypted files extends the vault beyond passwords.
Pros: Family and organization plans offer shared vaults, while Business adds directory sync and automatic provisioning.
Cons: Free omits MFA, breach reporting, sharing, file storage, rich text notes and the built-in authenticator.
Cons: Premium still has no shared vaults, so an individual who needs to share must consider a different plan.
Cons: The company cannot recover data if the master password is lost, making recovery planning the user’s responsibility.
Alternatives
For a broader comparison, see Password Managers.
LastPass is worth comparing if you want a freemium password manager with a free plan limited to one device type.
Proton Pass is another freemium option with a free plan if you want to compare its tiers with Padloc’s.
NordPass offers a free plan described as lifetime access for one user account; consider it if that arrangement suits your needs.
RoboForm has a free single-device plan and a Premium plan at $2.49 a month, billed annually and renewing at $29.88/yr after the first year; compare it if a paid individual option is your priority.
Psono is a freemium alternative with self-hosting support and an Open Source plan for unlimited users; consider it if those are central requirements.
Intuitive Password is another freemium option with self-hosting support and no free trial.
Zoho Vault offers a free plan with unlimited storage and device access, making it worth comparing if those are your main criteria.
heylogin has a free plan and free trial; compare it if you want to consider a different password manager.
Verdict
Padloc is a sound choice for people who want an encrypted, cross-platform home for passwords and other sensitive records, especially households and teams that will use shared vaults. Its free tier covers unlimited items and devices, while paid plans add MFA, file storage and progressively stronger sharing administration. Look elsewhere if losing a master password must not risk unrecoverable data, or if you need shared vaults without moving beyond Premium.
Verdict
Padloc covers password storage, sensitive notes and files, and controlled sharing across many platforms. Before choosing it, consider which features are in each plan and the consequences of losing the master password.
Where Specifiction places it
- Password Managers#6 of 1049.4