LockPass vs Psono

LockPass is a company password manager that stores credentials in an encrypted vault and controls sharing and access tracking. Plans include unlimited passwords, personal and shared spaces, a password generator, bulk import, temporary password management with TOTP, and dark mode. Administrators can manage users centrally, organize groups or organizations, assign custom roles, and set password policies. LockPass records password creation, use, modification, and deletion; audit logs can be exported and events forwarded to a SIEM or SOC. Listed protections include two-factor authentication, RSA and AES-256 encryption, and ANSSI CSPN certification for the suite. It supports web, Windows, macOS, Linux, iOS, Android, and a Chrome extension, with browser interconnection for Chrome, Firefox, Brave, and Edge. Hosting options are shared French cloud on Scaleway, dedicated French cloud on Outscale, or the customer's servers; SecNumCloud hosting is paid. The product has no free plan but offers a 14-day trial without commitment or a credit card. Starter requires two licenses, Premium 25, and On Premises 50.

Psono is an open-source password manager for storing credentials and sharing them with a team in encrypted form. It can be self-hosted, with its server and clients available free for on-premises hosting. Vault data is encrypted in the browser before it is stored on a server. Psono describes its cryptography as Curve25519 and Salsa20 via NaCl, with scrypt for password derivation, and says it uses layered transport security including HTTPS with TLS 1.2. Vault tools include password capture and autofill, generation, secure notes, bookmarks, offline access, import and export, and secret history. Teams can group users and shared items, use role-based access, and restrict permissions on shared items. Multifactor options include YubiKey, Duo, TOTP apps, and FIDO WebAuthn passkeys. It supports web, Windows, macOS, Linux, iOS, Android, Chrome, Firefox, and Edge. Enterprise Edition adds LDAP, SAML, and OIDC integrations, REST-call audit logging, and policies for two-factor authentication or restricting exports and recovery. The pricing note lists a free plan and paid service from €2.50/user/mo (annual); the Business plan lists €2.50 a month, billed annually, with a 25-user minimum.