Passman
github.com
What it is
Passman is a free, open-source password manager for hosting credentials on a user's own Nextcloud or ownCloud instance. It supports multiple vaults, and vault keys are not sent to the server. Credentials are encrypted client-side with 256-bit AES, with additional server-side encryption described by the maker. Users can create custom credential fields, generate one-time passwords, and check password strength. Sharing is available internally or by link, though administrators may disable it. Passman offers a web interface, a native Android app, and browser extensions; its documented REST API covers vaults, credentials, and authentication, although the reference is described as slightly outdated. Vaults can be exported to CSV or JSON using the vault password. Experimental import sources include KeePass, LastPass, DashLane, ZOHO, Clipperz.is, EnPass, and ocPasswords. The project lists SQLite, MySQL or MariaDB, and PostgreSQL support and uses the AGPL-3.0 license. Its stable listing shows version 2.6.3 for Nextcloud 34 and 35.
Spec sheet
- Purpose
- Passman is an open-source password manager for hosting passwords and credentials on your own Nextcloud or ownCloud instance.Read 3 Oct 2026 · passman.cc
- Free plan
- YesRead 20 Sep 2026 · github.com
- API
- Passman documents a REST API v2 for vaults, credentials, and authentication, while noting that the reference is slightly outdated.Read 3 Oct 2026 · github.com
- Support
- The project invites users to discuss Passman in its Telegram group and welcomes issues and pull requests on GitHub.Read 3 Oct 2026 · github.com
- License
- The repository identifies Passman as licensed under AGPL-3.0.Read 3 Oct 2026 · github.com
- Headquarters
- Stuttgart, GermanyRead 28 Sep 2026 · github.com
- Founded
- 2016Read 28 Sep 2026 · github.com
- Browser extension
- The maker describes a Passman web extension and says it is available for Firefox, Chrome, and Safari.Read 3 Oct 2026 · passman.cc
- Business admin controls
- YesRead 20 Sep 2026 · github.com
- Compatibility
- The Nextcloud app listing shows Passman version 2.6.3 on its stable channel for Nextcloud 34 and 35.Read 3 Oct 2026 · apps.nextcloud.com
- Credential tools
- Features include custom credential fields, a built-in one-time password generator, and a password strength analyzer.Read 3 Oct 2026 · github.com
- Database support
- The repository lists SQLite, MySQL or MariaDB, and PostgreSQL as supported databases.Read 3 Oct 2026 · github.com
- Encryption
- Credentials are encrypted client-side with 256-bit AES, and the maker describes additional server-side encryption.Read 3 Oct 2026 · github.com
- Export and backup
- Users can export a vault to CSV or JSON through the UI with the vault password, and administrators can back up or restore instances, users, or vaults with OCC commands.Read 3 Oct 2026 · github.com
- Imports
- Experimental import sources include KeePass, LastPass, DashLane, ZOHO, Clipperz.is, EnPass, and ocPasswords.Read 3 Oct 2026 · github.com
- Installation
- The project wiki says users can install the app from the Nextcloud app store, an archive, or Git.Read 3 Oct 2026 · github.com
- Mobile
- A native Android app is available through Google Play, IzzyOnDroid, and F-Droid.Read 3 Oct 2026 · github.com
- Passkey support
- NoRead 20 Sep 2026 · github.com
- Secure sharing
- YesRead 20 Sep 2026 · github.com
- Sharing
- Users can share credentials internally and via link, though administrators may disable sharing.Read 3 Oct 2026 · github.com
- Supported platforms
- web,Android,Chromium-based browsers,Firefox,self-hosted NextcloudRead 20 Sep 2026 · github.com
- Vaults
- The app supports multiple vaults, and vault keys are never sent to the server.Read 3 Oct 2026 · github.com
Plans and prices
Strong points and limits
Strong points
- Free and open source under AGPL-3.0.
- Vault keys are not sent to the server.
- Client-side credential encryption uses 256-bit AES.
- Supports multiple vaults and credential sharing.
- Exports vaults to CSV or JSON.
Limits
- Sharing can be disabled by administrators.
- Import options are experimental.
- REST API reference is slightly outdated.
- Stable listing covers Nextcloud 34 and 35.
Who it suits
Passman suits people who want to host password vaults on their own Nextcloud or ownCloud instance. Its Android app, browser extensions, and sharing tools may suit users who need access across those supported interfaces.
Verdict
Passman offers self-hosted vaults and credential tools without a paid plan stated. Its fit depends on maintaining a compatible Nextcloud or ownCloud instance and accepting the noted limits around imports and API documentation.
Where Specifiction places it
- Password Managers#31 of 1048.5