| Name | Type | Open Source | Self-Hosted Option | Secrets Mgmt | Security Features | Free Plan | Paid Plan / Cost | Notable Features |
| ————— | ————- | ———– | ———————— | ———— | ——————————————————— | —————————– | ————————————– | ————————————————————- |
| Bitwarden | Cloud + Self | ✅ Yes | ✅ Official / Vaultwarden | ✅ Yes (orgs) | AES-256, TOTP, FIDO2, Encrypted export, Vault timeout | ✅ Unlimited passwords/devices | \$10/yr (Premium), \$40/yr (Family) | CLI, browser extension, 2FA support, secure file sharing |
| Vaultwarden | Self-Hosted | ✅ Yes | ✅ Yes (Unofficial) | ✅ Yes | Same as Bitwarden client-side; depends on setup | ✅ (Full Bitwarden client use) | Free | Docker deploy, low resource, Bitwarden client-compatible |
| 1Password | Cloud | ❌ No | ❌ No | ✅ Yes | AES-256, Secure enclave, TOTP, passkeys, biometric unlock | ❌ Trial only (14 days) | \$36/yr (Individual), \$60/yr (Family) | SSH key vault, passkeys, travel mode, CLI, secrets automation |
| KeePassXC | Local Only | ✅ Yes | ✅ Yes (manual) | ❌ Plugins | Encrypted local vault, optional plugins | ✅ Full features | Free | Portable, offline-first, file-based vault, plugin ecosystem |
| Psono | Self-Hosted | ✅ Yes | ✅ Yes | ✅ Yes | Encrypted backend, client-side encryption, 2FA | ✅ Core version | \$3/mo (Cloud) | Web-based interface, org/team support |
| Enpass | Local + Cloud | ❌ No | ✅ Yes (local sync) | ❌ | Offline vaults, 2FA, biometric unlock | ✅ 25 items | \$24/yr | Local vaults, no forced cloud sync |
| Pass (Unix) | CLI-Only | ✅ Yes | ✅ Yes | ❌ | GPG-based encryption, Git compatible | ✅ Full access | Free | Fully CLI, perfect for dev workflows, scripting |
| Buttercup | Cloud + Local | ✅ Yes | ✅ Yes (file sync) | ❌ | AES-256, password inheritance, file-based vaults | ✅ Unlimited | Free | Syncs with Dropbox, Google Drive, etc. |
| Proton Pass | Cloud | ✅ Yes | ❌ No | ❌ (WIP) | End-to-end encrypted, email alias support, TOTP | ✅ Unlimited devices | \$24/yr | Email aliases, dark web monitor, Proton ecosystem integration |
| Padloc | Cloud + Self | ✅ Yes | ✅ Yes (Docker) | ❌ | Modern crypto, TOTP, vault sharing | ✅ Basic | \$40/yr | Clean UI, vault sync, org/team support |
| NordPass | Cloud | ❌ No | ❌ No | ❌ | Zero-knowledge, encrypted vaults, MFA | ✅ One device only | \$36/yr | Password health, cloud sync |
| KeeWeb | Local Only | ✅ Yes | ✅ Yes (file-based) | ❌ | Offline vaults (KDBX format) | ✅ Full access | Free | Cross-platform, Web + desktop apps |
| Teampass | Self-Hosted | ✅ Yes | ✅ Yes | ❌ | Server-side encryption, MFA | ✅ Free | Free | Browser-based interface, team password sharing |