ARCON PAM vs Psono

ARCON PAM has no write-up on Specifiction yet; its figures are above.

Psono is an open-source password manager for storing credentials and sharing them with a team in encrypted form. It can be self-hosted, with its server and clients available free for on-premises hosting. Vault data is encrypted in the browser before it is stored on a server. Psono describes its cryptography as Curve25519 and Salsa20 via NaCl, with scrypt for password derivation, and says it uses layered transport security including HTTPS with TLS 1.2. Vault tools include password capture and autofill, generation, secure notes, bookmarks, offline access, import and export, and secret history. Teams can group users and shared items, use role-based access, and restrict permissions on shared items. Multifactor options include YubiKey, Duo, TOTP apps, and FIDO WebAuthn passkeys. It supports web, Windows, macOS, Linux, iOS, Android, Chrome, Firefox, and Edge. Enterprise Edition adds LDAP, SAML, and OIDC integrations, REST-call audit logging, and policies for two-factor authentication or restricting exports and recovery. The pricing note lists a free plan and paid service from €2.50/user/mo (annual); the Business plan lists €2.50 a month, billed annually, with a 25-user minimum.