Psono
An open-source password manager client that needs a Psono server, hosted or your own.
Why it's a strong pick
Psono suits people who want to host their own password manager. The extension is only the browser client, so you need a Psono server, either hosted or self-hosted, and a login. The client is open source under Apache-2.0, and its code is public on GitLab. It uses Manifest V3. The latest client tag, v4.8.2, is dated 9 September 2026.
What it does
Psono fills in and saves logins in your browser. Your vault lives on a Psono server. The Psono site says data is encrypted in the browser with NaCl before it goes to the server. The extension adds autofill, a notification bar, an omnibox keyword (pp) and an Alt+P shortcut. It also supports encrypted sharing with a team.
Key features
- Server-based vault. Needs a Psono server, hosted or self-hosted.
- Autofill. Fill logins on pages, with a notification bar.
- Team sharing. Share items with encrypted sharing, per the Psono site.
- Single sign-on. The manifest includes OIDC and SAML login scripts.
- Shortcuts. Use the omnibox keyword pp or Alt+P.
- Admin settings. The manifest has a managed-storage schema for admins.
Who it's for
Psono is for teams and homelab users who want to run their own password manager instead of a cloud vault. If you want a local vault with no server, it is not the simplest choice. Look at KeePassXC-Browser instead.
Do I need a Psono server to use it?
Yes. The extension is only a client, so it needs a Psono server and a login. That can be a hosted Psono service or your own server. We did not confirm which hosted option is the default sign-up. Decide where your vault will live before you install.
What permissions does Psono ask for?
The manifest lists identity, storage, contextMenus, unlimitedStorage, privacy, notifications, tabs, clipboardWrite, webRequest, webRequestAuthProvider and offscreen. It also asks for access to all http and https sites, with content scripts on all pages and frames. That is broad, as autofill needs it. Check the install prompt.
Does Psono see my passwords?
The Psono site says vault data is encrypted in the browser with NaCl before it goes to the server. That is the developer's own claim. We could not read the developer's privacy policy when we checked; read it before installing.
Is Psono open source?
Yes. The client is under the Apache-2.0 license, and the code is public on GitLab. The Chrome extension is the browser client, so you still need a Psono server to use it. The server is a separate part. Check the license and code for the server separately, because this answer covers the client.
FAQ
Does it use Manifest V3? Yes.
Is it a standalone local vault? No. It needs a Psono server.
Which version is in the store? We did not verify it. The latest client tag we saw is v4.8.2.
Good to know
Set up and test your Psono server before you move any real logins over. Start with a few low-risk items. Because the extension reads all pages to autofill, keep your browser and the server up to date.
Other password managers to compare
Psono is one of 10 picks in our password managers guide:
- Bitwarden: An open-source password manager from Bitwarden Inc. The free plan covers unlimited passwords and devices.
- 1Password: A password manager from AgileBits Inc. (1Password). It has a free trial but no free plan.
- NordPass: A password manager from Nord Security. The free plan covers one active device; Premium adds more.
- Proton Pass: An open-source, end-to-end encrypted password manager from the Proton Mail team. It has a free plan.
- RoboForm: A password manager from Siber Systems, Inc. The free plan is for one device with no sync.
- Keeper: A zero-knowledge password manager from Keeper Security. The extension needs a paid plan or the free trial.
- KeePassXC-Browser: Fills in logins from the KeePassXC desktop app on your own computer. Needs KeePassXC installed and running. Open source.
- Passbolt: Open-source password manager for teams. The extension needs a Passbolt server, self-hosted or managed.
- authenticator.sh 2FA: Open-source authenticator that makes 2FA codes inside Chrome, with no host permissions. It makes codes only, not passwords. Set its password first: without one, accounts sit unprotected in Chrome sync.
Compare: Passbolt vs Psono
This is a third-party extension, not built or maintained by Xplorekit. We link to the official Chrome Web Store listing — install and permissions are entirely between you and the extension's own publisher.