Open source LastPass alternatives

Every project in the catalog is MIT, Apache or BSD licensed. 0 projects explicitly describe themselves as a LastPass alternative; 9 more are in the category where LastPass is a typical product.

Open source projects in the same category: Passwords & Privacy

Category-level information: these projects are the same kind of software as LastPass; they have not claimed to be a one-to-one replacement.

ME

Zackriya-Solutions · Passwords & Privacy

STARS32.3K
FORKS3.5K
COMMITS661
CONTRIBUTORS18
VERSIONv0.4.1
UPDATEDyesterday
RustAITranskripsiyonYerel İşlemeMIT

Common commercial products in this category: 1Password, LastPass, Dashlane

What can it do?
  • You save your meetings on your local device and convert them to text live without sending data to the cloud.
  • You create meeting summaries using occurrence-supported language models.
  • In accordance with the privacy and compliance requirements, you manage your sensitive conversations entirely in your own infrastructure.
User reviews
  • • NeutralGitHub Issue

    Cmake Error - Windows installation of backend

    “Dear Developers, I wanted to install the backend on a Windows Server 2022. The official documentation of the latest release I used: After installing the dependencies with the script inside an admin powershell CLI, I closed the powershell and opened a new simple one with my…”

  • ↓ NegativeGitHub Issue

    [BUG] App does not request microphone permission MacOs

    “## Bug Description The app does not request microphone permissions, so the mic is not recorded. Audio that played is recorded without any problem. ## Current Behavior Mic is not being recorded. ## Expected Behavior Mic audio is captured and transcribed ## Steps to Reproduce 1.…”

Verified against README · Oct 26, 2026 · source

IN

Infisical · Passwords & Privacy

STARS30.2K
FORKS2.4K
COMMITS—
CONTRIBUTORS255
VERSIONv0.85.0-postgres
UPDATEDtoday
Secrets ManagementSelf-HostedTypeScriptDevOpsMIT

Common commercial products in this category: 1Password, LastPass, Dashlane

What can it do?
  • You manage application secrets and configuration settings through a central interface.
  • You automatically synchronize secrets with external platforms such as GitHub, Vercel, and AWS.
  • You ensure infrastructure security with dynamic secret production and leak prevention tools.
Heads up
  • • High number of open issues (868)
User reviews
  • • NeutralHacker News

    Infisical – open-source HashiCorp Vault alternative

    “Hey! Definitely, we have more details on the cryptography in our documentation here: . Put simply, Infisical operates E2EE by default which means the platform itself can’t decrypt secrets. This is unless you opt out of E2EE (secrets remain encrypted at rest) to use select…”

  • • NeutralHacker News

    Infisical – open-source HashiCorp Vault alternative

    “Maybe I'm missing something, but Infisical ONLY seems to handle shared secrets. Vault handles a lot more, it can for instance create DB users on the fly, with the right permissions that will only live for as long as the vault token does. Vault also has a full CA system in-place,…”

Verified against README · Oct 26, 2026 · source

AG

age

92

FiloSottile · Passwords & Privacy

STARS24.1K
FORKS683
COMMITS—
CONTRIBUTORS57
VERSIONv1.3.1
UPDATED2 mo ago
GoEncryptionCLIBSD / ISC

Common commercial products in this category: 1Password, LastPass, Dashlane

What can it do?
  • Using the command line, you can quickly encrypt and decrypt your files.
  • You can incorporate hardware-based PIV into encryption transactions through token plugins.
  • You can store your data in a secure format using small and open keys.
User reviews
  • ↓ NegativeHacker News

    The Age Verification Trap: Verifying age undermines everyone's data protection

    “You don't know that you had access though based on what you said. You think you might have had access looking back. >I could have easily gotten a teenager to get me cigarettes (and drugs, but I didn’t know what those were really). I had also already tasted alcohol. Any of this I…”

  • • NeutralHacker News

    The Age Verification Trap: Verifying age undermines everyone's data protection

    “Yeah that's a good point that I certainly didn't think about it that way, but it's something that the ID verification people never quite address. When I was a kid, I played neopets. For whatever reason, they age gated some content (maybe messaging or other social features)…”

Verified against README · Oct 26, 2026 · source

KE

keeweb · Passwords & Privacy

STARS13.0K
FORKS1.2K
COMMITS—
CONTRIBUTORS70
VERSIONv1.9.3
UPDATED5 mo ago
Password ManagerSelf-HostedKeePassJavaScriptMIT

Common commercial products in this category: 1Password, LastPass, Dashlane

What can it do?
  • You can open and manage kdbx extension password databases created with KeePass.
  • You can store password cases on local filesystems or cloud storage services.
  • You can run the application as desktop software on Windows, macOS or Linux.
User reviews
  • • NeutralHacker News

    KeeWeb: Unofficial KeePass web and desktop client

    “The reference implementation's domain is vulnerable to MITM attacks between KeeWeb and CloudFlare until they set their CloudFlare crypto settings to "strict" and get some real certificates of their own (e.g. Let's Encrypt). I submitted an issue here: Of course exploiting this…”

  • ↓ NegativeGitHub Issue

    Access to Keepass database on Googledrive is blocked

    “Hi, I am trying to open my KeePass database (saved in Google Drive) from the web app (KeeWeb), but it does not work. I receive this message: "This app is blocked This app tried to access sensitive info in your Google Account. To keep your account safe, Google blocked this…”

ST

smallstep · Passwords & Privacy

STARS9.0K
FORKS612
COMMITS—
CONTRIBUTORS101
VERSIONv0.9.2-rc.1
UPDATED4 days ago
GoPkiCertificatesTLSApache-2.0

Common commercial products in this category: 1Password, LastPass, Dashlane

What can it do?
  • You can create HTTPS server and client certificates that work in browsers.
  • You can edit TLS certificates for virtual machines, containers, API and database connections.
  • You can receive SSH certificates in exchange for single sign-in ID tokens or cloud credentials.
User reviews
  • • NeutralHacker News

    Show HN: Step-ca is a self-hosted open-source CA that supports ACME

    “We just added ACME support to `step-ca`, an open source private certificate authority that I work on. ACME is the protocol that Let's Encrypt uses to automate certificate management for websites. ACME support in `step-ca` means you can leverage existing ACME clients and…”

GO

gopasspw · Passwords & Privacy

STARS7.3K
FORKS568
COMMITS2.2K
CONTRIBUTORS239
VERSIONv1.9.3-rc.1
UPDATED2 days ago
GoPassword ManagerGpgCLIMIT

Common commercial products in this category: 1Password, LastPass, Dashlane

What can it do?
  • You easily manage your credentials through the command line.
  • You share password stores with teams securely using GPG and Git.
  • Thanks to browser integration, you perform operations without using the command line.
User reviews
  • • NeutralHacker News

    Announcing gopass – A 'pass' compatible password manager for teams

    “I looked at the code for pass recently, and thought it was a nice example of something where bash is absolutely adequate. You point out (in discussing the design of pass): > There is one slight drawback to all the simplicity, and that is an information disclosure inherent to the…”

  • ↑ PositiveHacker News

    Announcing gopass – A 'pass' compatible password manager for teams

    “I know the pain of managing the synchronization of your password store. That's exactly why we enable git by default now and auto commit all you changes like pass did before. For me it works great personally, but also with a team it's awesome. It just feels like working with…”

PE

Volmarg · Passwords & Privacy

STARS4.2K
FORKS350
COMMITS0
CONTRIBUTORS0
VERSIONv2.1.0
UPDATED2 days ago
PHPSelf-HostedPersonal-DataBackendMIT

Common commercial products in this category: 1Password, LastPass, Dashlane

What can it do?
  • With the to-do list module, you track the progress of your personal goals.
  • You keep your passwords encrypted in the database and copy them over the interface.
  • You register diseases, doctors and appointments with the health module.
User reviews
  • • NeutralGitHub Issue

    infinite loading

    “hosting my own instance, for some reason when I open a new page, it seems to load indefinitely, followed install instructions, and if I refresh the page, the loading circle goes away, and I can use the site normally, but I can't seem to recreate this on the demo site. EDIT: I…”

  • • NeutralGitHub Issue

    Loading after each page-change.

    “Everytime i change module on the site, example fro Goals to Notes i get the loading"dot" staying in front of the page. forcing me to reload the page so that i can continue. Seams to be after every "page load" Any ideas?”

HA

sh-dv · Passwords & Privacy

STARS2.3K
FORKS272
COMMITS—
CONTRIBUTORS17
VERSIONv2.3.6
UPDATED2 yr ago
JavaScriptEncryptionBrowser-BasedMIT

Common commercial products in this category: 1Password, LastPass, Dashlane

What can it do?
  • You can securely encrypt or decrypt multiple files in your browser using passwords or keys.
  • You can perform authentication key changes by creating an asymmetric key pair.
  • You can use password power measurement tools and a secure random password generator.
Heads up
  • • Last update 2 years ago
User reviews
  • ↑ PositiveGitHub Issue

    Support for asymmetric public-private key encrpytion

    “Hey there! I found this awesome project while looking for cross platform apps that support libsodium file encryption/decryption. It's so great to see things like this coming to the browser so people do not have to worry about installing any tools and using the command line etc.…”

  • • NeutralGitHub Issue

    error - ESLint: Failed to load plugin '@next/next' declared in '.eslintrc » eslint-config-next': Unexpected token '.' Re

    “Hi, I do have 2 points, one is the error while installing locally: error - ESLint: Failed to load plugin '@next/next' declared in '.eslintrc » eslint-config-next': Unexpected token '.' Referenced from: /usr/local/bin/hat.sh/node_modules/eslint-config-next/index.js ![grafik](…”

PS

psono · Passwords & Privacy

STARS111
FORKS20
COMMITS—
CONTRIBUTORS17
VERSION—
UPDATEDyesterday
Password ManagerSelf-HostedPythonTeamApache-2.0

Common commercial products in this category: 1Password, LastPass, Dashlane

What can it do?
  • Using the backup scripts provided, you get a backup of the database and the settings file
  • You're the time to automatically run daily with the prepared backups crontab.
  • By executing the restore command, you restore system data to its former state
Heads up
  • • No published release