Passbolt vs PassHub (2026): which should you pick?

Pick Passbolt if

• Fits if your team has someone who runs servers and wants open-source code
• Works for data that must stay in the EU, or secrets pulled into pipelines through an API

Look elsewhere if

• Skip it if you're one person, because no paid plan is aimed at individuals
• Pricey if you're a team of three or four, as every paid plan bills for at least 10 users
• Not for you if nobody wants to maintain a server and you won't pay, since free means self-hosted
• Tight if you stay free, as single sign-on, LDAP, account recovery and the activity log are paid
• Watch out: the browser extension is required, the desktop app is Windows only, and offline mode is beta

Pick PassHub if

• Fits if you want a password manager without a master password
• Makes sense if a small team prefers a flat price over per-seat billing

Look elsewhere if

• Skip it if your phone is not always with you, as every sign-in needs the WWPass Key app
• Tight if you store over 100 records on free, or signed up after April 1, 2026
• Not for you if you want desktop or phone vault apps, as the vault runs in the browser
• Watch out: teams above 200 users are on a custom plan with no published price

Passbolt

• Every paid plan has a 10-user minimum, and there is no paid plan aimed at individuals.
• The free Community Edition has to be installed and maintained on your own server and comes with community support only.
• The browser extension is required to use Passbolt, the desktop app is listed for Windows only and offline mode is labeled beta.
• Single sign-on, LDAP provisioning, account recovery and the activity log are not part of the Community Edition.

PassHub

• Every sign-in needs the WWPass Key app on an iPhone or Android phone, so the phone is a single point of access.
• The free plan is capped at 100 records; sign-ups after April 1, 2026 do not get the earlier fuller free plan.
• Teams above 200 users are on a custom Enterprise plan with no published price.
• There are no desktop or mobile vault apps listed; the vault is used in the browser, with the phone app for sign-in.

Passbolt

Granular credential sharing

Shares passwords, TOTP codes and encrypted notes with individual users and groups, organized in private and shared folders under role-based access control.

End-to-end encryption

Passbolt says secrets are end-to-end encrypted through a public-private key architecture, and it requires its browser extension in order to guarantee that.

Self-hosted or cloud

Install it on your own Linux server with packages, a Docker container or a virtual machine, or use Passbolt Cloud, which the company hosts in the EU.

Open source, paid editions included

The Community, Pro and Enterprise editions are all distributed under AGPLv3, so the entire source code is available to inspect and modify.

API and command line interface

An open API and a CLI let DevOps teams create, retrieve and rotate secrets and inject them into CI/CD pipelines as environment variables.

SSO, directory sync and audit log

Paid editions add single sign-on with Microsoft, Google and OpenID, LDAP and Active Directory provisioning, account recovery and an activity log.

PassHub

Sign-in with the WWPass Key app

No username or master password: you scan a code with the free WWPass Key phone app, and a 256-bit AES key from the app protects the data.

Encryption in the browser

Records, files and even website addresses are encrypted in the browser, so the PassHub server cannot read them, per the vendor.

Records, notes, files and cards

Stores passwords, secure notes, uploaded files and payment cards in safes, with record history and import from other managers.

Browser extension for autofill

A semi-manual extension fills login forms and payment cards for Chrome, Edge and other Chromium browsers, and Safari through a Mac app.

Team safes and directory sync

Business plans add shared safes, role-based group permissions, audit logs and sync with Microsoft Entra ID, Active Directory or Google.

Open source and self-hosting

The project is open source, and a business instance can be run as a cloud service or self-hosted by the company.

Passbolt

• Community Edition$0

  Self-hosted and open source with unlimited users: sharing, private and shared folders, groups, browser extensions, CLI, open API and community support.

• Pro Edition$4.90

  per user / month, billed annually

  Self-hosted, minimum 10 users. Adds LDAP provisioning, single sign-on, account recovery, an activity log, tags and next-business-day support.

• Cloud Business$4.90

  per user / month, billed annually ($5.40 billed monthly)

  Hosted by Passbolt in Belgium and Germany, minimum 10 users, with a yearly database backup and next-business-day email support.

• Cloud Sovereign$8

  per user / month, billed annually

  Hosted in a sovereign private data center in Luxembourg with ISO 27001 certified hosting. Minimum 10 users.

• Enterprise EditionCustom

  Self-hosted, with high-availability and disaster-recovery consulting, custom feature development and a 4-hour support SLA.

• Cloud EnterpriseCustom

  Isolated hosting in Luxembourg with a custom domain, custom backup policies, 24/7 SOC monitoring and a 4-hour support SLA.

PassHub

• Free$0

  100 records, 50 MB storage and 5 MB per file. Accounts made before April 1, 2026 keep the earlier, fuller free plan.

• Personal Pro$2.00

  per month, billing basis not shown

  Unlimited records, 10 GB of file storage and 50 MB per file.

• Starter$20

  per month for up to 10 users

  Flat team price. Listed at $10 a month for the first year if signed up before December 31, 2026.

• Team$50

  per month for up to 20 users

  Flat price for teams of up to 20; every business tier has the same features.

• Growth$100

  per month for up to 100 users

  Flat price for up to 100 users; the page pitches it to companies syncing with Entra ID or Google Workspace.

• Scale$200

  per month for up to 200 users

  Flat price for up to 200 users across departments and projects.

Passbolt

• Annual discount

  10% off Cloud Business with yearly billing

  Cloud Business costs $5.40 per user a month billed monthly or $4.90 billed annually; the pricing page labels yearly billing as 10% off.

• Nonprofit

  Discounts for non-profits and education

  Non-profits, charities, foundations, associations and educational institutions can request a discount on Passbolt Pro or Cloud. The amount is at Passbolt's discretion.

• Other savings

  Discounts for open source projects

  Maintainers and contributors of public open source projects and communities can request a discount through the same form.

• Other savings

  Volume discounts above 100 users

  The Pro Edition pricing notes that volume discounts apply after 100 users, arranged through a quote.

PassHub

• Other savings

  50% off the first year of Starter

  The business pricing page lists the Starter plan at $10 a month for the first year, down from $20, for sign-ups before December 31, 2026.