Passman

Passman is a free, open-source password manager for storing credentials on a self-hosted Nextcloud or ownCloud instance. It supports multiple vaults, with vault keys kept off the server. Credentials are encrypted on the client using 256-bit AES, and the maker also describes server-side encryption. Users can add custom credential fields, generate one-time passwords, and assess password strength. Credentials may be shared internally or by link, though an administrator can turn sharing off. Passman offers a web interface, Android app, and browser extensions for Firefox, Chrome, and Safari. Its REST API v2 covers vaults, credentials, and authentication, though the project notes that the reference is slightly outdated. Users can export vaults to CSV or JSON using the vault password; administrators can use OCC commands to back up or restore instances, users, or vaults. Experimental imports are listed for several other password managers. The project uses the AGPL-3.0 license and lists SQLite, MySQL or MariaDB, and PostgreSQL support.

Passman provides credential storage tied to a self-hosted Nextcloud or ownCloud instance, with vaults, encryption, exports, and several access options. Readers should note that sharing depends on administrator settings and the documented API reference is slightly outdated.

Passman may suit people or organizations already hosting Nextcloud or ownCloud who want to manage credentials on their own instance. Its Android app and browser extensions provide access beyond the web interface.

Overview

Passman is an open-source password manager for people and teams who already run Nextcloud or ownCloud and want credentials stored in that environment. It is a practical fit for self-hosters who value control over deployment; those seeking a standalone hosted manager should look elsewhere.

Key features

Users can organize credentials into multiple vaults, and vault keys are never sent to the server. Credentials are encrypted client-side with 256-bit AES, with additional server-side encryption described by the maker. That layered approach suits users who want to manage their own storage environment, but the self-hosted requirement also means taking responsibility for that instance.

Custom credential fields, a built-in one-time password generator and a password strength analyzer address everyday credential management. Sharing is possible internally and by link, which can help teams, but administrators may disable it. Passman also supports business admin controls and employee self-service.

Imports from KeePass, LastPass, DashLane, ZOHO, Clipperz.is, EnPass and ocPasswords are experimental. That makes migration less predictable for anyone moving an established vault. Users can export vaults to CSV or JSON through the interface with the vault password; administrators can back up or restore instances, users or vaults with OCC commands.

Passman documents a REST API v2 for vaults, credentials and authentication, though its reference is slightly outdated. The project welcomes issues and pull requests on GitHub and invites discussion in its Telegram group.

Pricing

Passman is free and open source: the Free and open source plan costs nothing. No paid plan or usage limits are stated. That makes it appealing to individuals and teams comfortable operating their own Nextcloud or ownCloud setup, rather than buyers looking for a managed service tier.

Platforms

Passman supports web, Android, Chromium-based browsers, Firefox and self-hosted Nextcloud. The native Android app is distributed through Google Play, IzzyOnDroid and F-Droid; the maker also describes a browser extension for Firefox, Chrome and Safari. Installation is offered through the Nextcloud app store, an archive or Git. The Nextcloud app listing shows version 2.6.3 on the stable channel for Nextcloud 34 and 35.

The project lists SQLite, MySQL or MariaDB, and PostgreSQL as supported databases, and uses the AGPL-3.0 license. Passkey support is not available.

Who it's for

Passman best suits individuals or teams already operating Nextcloud or ownCloud who want free credential storage, multiple vaults and optional sharing within an environment they control. It is less suitable for people who want hosted service convenience, passkey support or a predictable migration from another password manager.

Pros and cons

• Pro: Multiple vaults keep credentials organized, while vault keys stay off the server.
• Pro: Client-side 256-bit AES encryption, custom fields, one-time passwords and strength analysis cover security and routine credential tasks.
• Pro: Free and open source, with CSV or JSON vault exports and administrator backup and restore commands.
• Con: It depends on a self-hosted Nextcloud or ownCloud instance, adding operational responsibility.
• Con: Imports are experimental, making migration from an existing vault a potential pain point.
• Con: Administrators can disable sharing, and the API reference is slightly outdated.
• Con: Passkey support is absent.

Alternatives

For other password manager choices, browse Password Managers. The alternatives provided here focus on workforce and time-management needs rather than credential storage: consider OtisIO for rotas, time clock and tasks, TNC Track for team and attendance management, or Toggl Track for manual and real-time timers.

Zoho People, actiPLANS, BookYourPTO, Day Off and Shiftbase are other options to consider.

Verdict

Choose Passman if you already run Nextcloud or ownCloud and want a free, open-source password manager with multiple vaults and flexible sharing. The main reason to look elsewhere is the operational burden of self-hosting, compounded by experimental imports if you are moving an existing credential collection.