Psono vs Vaultwarden

Psono is an open-source password manager for storing credentials and sharing them with a team in encrypted form. It can be self-hosted, with its server and clients available free for on-premises hosting. Vault data is encrypted in the browser before it is stored on a server. Psono describes its cryptography as Curve25519 and Salsa20 via NaCl, with scrypt for password derivation, and says it uses layered transport security including HTTPS with TLS 1.2. Vault tools include password capture and autofill, generation, secure notes, bookmarks, offline access, import and export, and secret history. Teams can group users and shared items, use role-based access, and restrict permissions on shared items. Multifactor options include YubiKey, Duo, TOTP apps, and FIDO WebAuthn passkeys. It supports web, Windows, macOS, Linux, iOS, Android, Chrome, Firefox, and Edge. Enterprise Edition adds LDAP, SAML, and OIDC integrations, REST-call audit logging, and policies for two-factor authentication or restricting exports and recovery. The pricing note lists a free plan and paid service from €2.50/user/mo (annual); the Business plan lists €2.50 a month, billed annually, with a 25-user minimum.

Vaultwarden is a free, open-source, unofficial Bitwarden-compatible server written in Rust for self-hosted deployment. It implements the Bitwarden Client API and works with official Bitwarden clients. Personal features include a vault, Send, attachments, website icons, and a personal API key. Organization tools provide collections, password sharing, member roles, groups, event logs, admin password reset, a directory connector, and policies. Listed multi-factor options include authenticator, email, FIDO2 WebAuthn, YubiKey, and Duo, with Emergency Access also included. Vaultwarden supports passkeys, secure sharing, and business admin controls, but not passwordless account login. The project recommends container images from ghcr.io, Docker Hub, or Quay.io. Its web vault requires HTTPS; maintainers recommend a reverse proxy and do not recommend the built-in Rocket HTTPS option. Admin guidance calls for HTTPS and a long random token, with Argon2id storage supported. The project serves self-hosting individuals, families, and small organizations and is not associated with Bitwarden, Inc. The listed plan is free, with no paid plans stated.