Passbolt icon

Passbolt

The Chrome extension for Passbolt, an open-source password manager built for teams.

Reviewed by Xplorekit's independent developer · Last checked · How we choose

Add to Chrome Open source · Chrome Web Store · Source on GitHub

Why it's a strong pick

Passbolt is made for sharing credentials inside a team, not only for one person's logins. It is open source under the AGPL-3.0 license, and its code is public on GitHub. It uses Manifest V3, Chrome's current extension format. The repository's latest release came on 17 September 2026. That is a repo release date, not a store date.

What it does

The extension is the browser client for Passbolt, which its READMEs call "the open source password manager for teams." It lets you store and share credentials. The README says the extension keeps the cryptographic code and provides a secure random number generator. The popup opens with the Alt+Shift+P shortcut.

Key features

  • Team sharing. Store and share credentials with your team.
  • Crypto in the extension. The README says the extension holds the cryptographic code.
  • Quick access. A popup and the Alt+Shift+P shortcut open Passbolt.
  • Offline mode in beta. The September 2026 release notes describe read-only access, which an admin must enable in the admin settings.
  • Open source. The code is public under AGPL-3.0.

Who it's for

Passbolt is for teams and organisations that want a shared password manager they can host themselves. It works with a Passbolt server, so someone has to run or buy one. If you want a simple vault for yourself with nothing to set up, it is not the easiest choice.

What permissions does Passbolt ask for?

Its manifest asks for activeTab, unlimitedStorage, storage, tabs, scripting, alarms, downloads, cookies, clipboardWrite, background and offscreen. It also asks for access to all sites and needs Chrome 116 or newer. That is a long list, as you would expect for a password tool. Read the install prompt before you add it.

Do I need a server to use Passbolt?

Yes. The extension works with a Passbolt server, either one you host yourself or a managed one. It is not a stand-alone vault. Ask your admin for the server address first. The setup steps are on Passbolt's own help pages, which we could not read.

Does Passbolt cost money?

The free Community Edition is self-hosted, and that is verified. The project also lists Pro and Cloud editions. We could not read the paid-plan prices, so we do not state them. Check Passbolt's own site for current plans before you decide.

What does Passbolt do with my data?

We could not read the developer's privacy policy when we checked; read it before installing. The Passbolt API README claims end-to-end encryption, secret keys owned by users and no telemetry. Those are the vendor's own claims, and we did not test them.

FAQ

Is Passbolt open source? Yes, under the AGPL-3.0 license.

Does it use Manifest V3? Yes. The Chrome build is in the repository's chrome-mv3 folder.

Who makes it? Passbolt SA, per the copyright line in the repository.

Good to know

Talk to the person who runs your Passbolt server before you install. Offline mode is in beta and read-only, and an admin has to turn it on. If you only need a vault for yourself, compare it with the other picks in our password managers guide.

Other password managers to compare

Passbolt is one of 10 picks in our Password Managers guide:

  • Bitwarden: An open-source password manager from Bitwarden Inc. The free plan covers unlimited passwords and devices.
  • 1Password: A password manager from AgileBits Inc. (1Password). It has a free trial but no free plan.
  • NordPass: A password manager from Nord Security. The free plan covers one active device; Premium adds more.
  • Proton Pass: An open-source, end-to-end encrypted password manager from the Proton Mail team. It has a free plan.
  • RoboForm: A password manager from Siber Systems, Inc. The free plan is for one device with no sync.
  • Keeper: A zero-knowledge password manager from Keeper Security. The extension needs a paid plan or the free trial.
  • KeePassXC-Browser: Fills in logins from the KeePassXC desktop app on your own computer. Needs KeePassXC installed and running. Open source.
  • authenticator.sh 2FA: Open-source authenticator that makes 2FA codes inside Chrome, with no host permissions. It makes codes only, not passwords. Set its password first: without one, accounts sit unprotected in Chrome sync.
  • Psono: Autofill and team sharing for a Psono vault. Needs a Psono server, hosted or self-hosted. Open source.

Compare: Passbolt vs Psono

This is a third-party extension, not built or maintained by Xplorekit. We link to the official Chrome Web Store listing — install and permissions are entirely between you and the extension's own publisher.