Passman vs Psono

Passman is a free, open-source password manager for hosting credentials on a user's own Nextcloud or ownCloud instance. It supports multiple vaults, and vault keys are not sent to the server. Credentials are encrypted client-side with 256-bit AES, with additional server-side encryption described by the maker. Users can create custom credential fields, generate one-time passwords, and check password strength. Sharing is available internally or by link, though administrators may disable it. Passman offers a web interface, a native Android app, and browser extensions; its documented REST API covers vaults, credentials, and authentication, although the reference is described as slightly outdated. Vaults can be exported to CSV or JSON using the vault password. Experimental import sources include KeePass, LastPass, DashLane, ZOHO, Clipperz.is, EnPass, and ocPasswords. The project lists SQLite, MySQL or MariaDB, and PostgreSQL support and uses the AGPL-3.0 license. Its stable listing shows version 2.6.3 for Nextcloud 34 and 35.

Psono is an open-source password manager for storing credentials and sharing them with a team in encrypted form. It can be self-hosted, with its server and clients available free for on-premises hosting. Vault data is encrypted in the browser before it is stored on a server. Psono describes its cryptography as Curve25519 and Salsa20 via NaCl, with scrypt for password derivation, and says it uses layered transport security including HTTPS with TLS 1.2. Vault tools include password capture and autofill, generation, secure notes, bookmarks, offline access, import and export, and secret history. Teams can group users and shared items, use role-based access, and restrict permissions on shared items. Multifactor options include YubiKey, Duo, TOTP apps, and FIDO WebAuthn passkeys. It supports web, Windows, macOS, Linux, iOS, Android, Chrome, Firefox, and Edge. Enterprise Edition adds LDAP, SAML, and OIDC integrations, REST-call audit logging, and policies for two-factor authentication or restricting exports and recovery. The pricing note lists a free plan and paid service from €2.50/user/mo (annual); the Business plan lists €2.50 a month, billed annually, with a 25-user minimum.