
Vaultly — The zero-knowledge team password manager you own forever.
The zero-knowledge team password manager you own forever.
1Password Teams is $7.99 per user per month, so a five-person team pays roughly $1,438 over three years, forever, with everything in someone else's cloud. Vaultly runs the same zero-knowledge model on your own $5 VPS: everything is encrypted in your browser with AES-256-GCM before it reaches the server, which only ever stores ciphertext. $39, once, however many people you add.
Zero-knowledge client-side crypto — PBKDF2 at 600k iterations into AES-256-GCM via the Web Crypto API, so a server compromise is not a vault compromise.
Shared team vaults — Vault keys are wrapped with each member RSA-OAEP public key in the browser, and the server only relays wrapped keys it cannot read.
Logins, notes and cards — Store logins, secure notes and cards with folders, search, a strong password generator and a strength meter.
Inline TOTP — Store a 2FA secret alongside a login and get live 6-digit codes with copy-to-clipboard that auto-clears.
Opt-in breach check — HaveIBeenPwned k-anonymity range lookups only when you click, off by default, and your password never leaves the browser.
Audit log — Registrations, logins, item create/edit/delete/reveal and vault sharing are all recorded with who did what and when.
Runs as a Windows desktop app or on any $5 VPS (Docker included).
What's included:
Full source code (MIT): https://github.com/bensblueprints/password-manager-selfhosted
Lifetime v1 updates
Setup guide (README quick start)
