Passbolt vs Password Boss (CyberFOX) (2026): which should you pick?

Pick Passbolt if

• Fits if your team has someone who runs servers and wants open-source code
• Works for data that must stay in the EU, or secrets pulled into pipelines through an API

Look elsewhere if

• Skip it if you're one person, because no paid plan is aimed at individuals
• Pricey if you're a team of three or four, as every paid plan bills for at least 10 users
• Not for you if nobody wants to maintain a server and you won't pay, since free means self-hosted
• Tight if you stay free, as single sign-on, LDAP, account recovery and the activity log are paid
• Watch out: the browser extension is required, the desktop app is Windows only, and offline mode is beta

Pick Password Boss (CyberFOX) if

• Fits if you run an IT service business and manage passwords for clients
• Works for teams that want role-based access and an admin console

Look elsewhere if

• Watch out: no prices are published, so cost cannot be compared before a demo
• Watch out: the brand is being folded into CyberFOX, so product names and plans may differ from older pages
• Skip it if you need a desktop app, as only iOS and Android are confirmed
• Not for you if you want a free plan, as only a trial is offered

Passbolt

• Every paid plan has a 10-user minimum, and there is no paid plan aimed at individuals.
• The free Community Edition has to be installed and maintained on your own server and comes with community support only.
• The browser extension is required to use Passbolt, the desktop app is listed for Windows only and offline mode is labeled beta.
• Single sign-on, LDAP provisioning, account recovery and the activity log are not part of the Community Edition.

Password Boss (CyberFOX)

• Prices are not published: passwordboss.com redirects its pricing page to the homepage and the CyberFOX site offers quotes and demos.
• The brand is being folded into CyberFOX, so the product name and plans may differ from what older pages say.
• Only iOS and Android apps are confirmed on the pages read; other platforms are not listed there.
• Partner and reseller programs are offered, with margins up to 50% advertised for MSPs.

Passbolt

Granular credential sharing

Shares passwords, TOTP codes and encrypted notes with individual users and groups, organized in private and shared folders under role-based access control.

End-to-end encryption

Passbolt says secrets are end-to-end encrypted through a public-private key architecture, and it requires its browser extension in order to guarantee that.

Self-hosted or cloud

Install it on your own Linux server with packages, a Docker container or a virtual machine, or use Passbolt Cloud, which the company hosts in the EU.

Open source, paid editions included

The Community, Pro and Enterprise editions are all distributed under AGPLv3, so the entire source code is available to inspect and modify.

API and command line interface

An open API and a CLI let DevOps teams create, retrieve and rotate secrets and inject them into CI/CD pipelines as environment variables.

SSO, directory sync and audit log

Paid editions add single sign-on with Microsoft, Google and OpenID, LDAP and Active Directory provisioning, account recovery and an activity log.

Password Boss (CyberFOX)

Client-side AES-256 encryption

Data is encrypted and decrypted locally with a key derived from the master password, which the vendor says it never stores.

Sharing with 2048-bit RSA keys

Passwords and notes are shared between team members using RSA key pairs, with an expiry date that can be set on shared items.

Role-based access and admin console

Admins add users and assign roles; business logins live in separate profiles from members' personal items.

MSP management portal

A multi-tenant portal gives MSPs dashboards, security scores, usage reports and audit logs across customers.

Two-factor login and biometrics

Supports an authenticator-app code at sign-in, and fingerprint unlock on the iOS and Android apps.

Dark web scan

Monitors stored passwords and email addresses for known breaches, and shows security scores.

Passbolt

• Community Edition$0

  Self-hosted and open source with unlimited users: sharing, private and shared folders, groups, browser extensions, CLI, open API and community support.

• Pro Edition$4.90

  per user / month, billed annually

  Self-hosted, minimum 10 users. Adds LDAP provisioning, single sign-on, account recovery, an activity log, tags and next-business-day support.

• Cloud Business$4.90

  per user / month, billed annually ($5.40 billed monthly)

  Hosted by Passbolt in Belgium and Germany, minimum 10 users, with a yearly database backup and next-business-day email support.

• Cloud Sovereign$8

  per user / month, billed annually

  Hosted in a sovereign private data center in Luxembourg with ISO 27001 certified hosting. Minimum 10 users.

• Enterprise EditionCustom

  Self-hosted, with high-availability and disaster-recovery consulting, custom feature development and a 4-hour support SLA.

• Cloud EnterpriseCustom

  Isolated hosting in Luxembourg with a custom domain, custom backup policies, 24/7 SOC monitoring and a 4-hour support SLA.

Password Boss (CyberFOX)

Pricing could not be confirmed. See passwordboss.com.

Passbolt

• Annual discount

  10% off Cloud Business with yearly billing

  Cloud Business costs $5.40 per user a month billed monthly or $4.90 billed annually; the pricing page labels yearly billing as 10% off.

• Nonprofit

  Discounts for non-profits and education

  Non-profits, charities, foundations, associations and educational institutions can request a discount on Passbolt Pro or Cloud. The amount is at Passbolt's discretion.

• Other savings

  Discounts for open source projects

  Maintainers and contributors of public open source projects and communities can request a discount through the same form.

• Other savings

  Volume discounts above 100 users

  The Pro Edition pricing notes that volume discounts apply after 100 users, arranged through a quote.

Password Boss (CyberFOX)

No public discounts listed.