Passman
Passman is a free, open-source password manager for storing credentials on your own Nextcloud or ownCloud instance.
What Passman is
Passman is a free, open-source password manager for storing credentials on your own Nextcloud or ownCloud instance. It supports multiple vaults, and vault keys are not sent to the server. Credentials are encrypted on the client with 256-bit AES, with additional server-side encryption described by the maker. Users can add custom credential fields, generate one-time passwords, and check password strength. Credentials can be shared internally or by link, though an administrator may disable sharing. Passman provides a web interface, Android app, and browser extensions for Firefox, Chrome, and Safari. Its documented REST API covers vaults, credentials, and authentication, though the reference is described as slightly outdated. Users can export a vault to CSV or JSON with the vault password; administrators can back up or restore instances, users, or vaults with OCC commands. Experimental import options include KeePass, LastPass, DashLane, ZOHO, Clipperz.is, EnPass, and ocPasswords. The project lists SQLite, MySQL or MariaDB, and PostgreSQL support and uses the AGPL-3.0 license. Its stable listing shows version 2.6.3 for Nextcloud 34 and 35.
Good
- Free and open-source under AGPL-3.0
- Vault keys are not sent to the server
- Client-side credential encryption uses 256-bit AES
- Supports custom fields and one-time password generation
- Vaults can be exported to CSV or JSON
Watch out
- Requires a self-hosted Nextcloud or ownCloud instance
- Administrators may disable credential sharing
- Import options are experimental
- REST API reference is described as slightly outdated
Who it suits
Passman suits people who want to host a credential vault on their own Nextcloud or ownCloud instance. It may also suit administrators who need controls for backups and sharing.
Verdict
Passman offers credential management for people running their own Nextcloud or ownCloud service, with vault encryption, sharing, and export options. Its self-hosted setup and administrator controls are important considerations.
Plans and prices
From Passman's own pricing page, checked 3 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Free and open source | Free | No paid plan or usage limits stated |
The facts
Each one read from Passman's own pages, with the date it was checked.
What it does
- API
- Passman documents a REST API v2 for vaults, credentials, and authentication, while noting that the reference is slightly outdated.checked 3 Oct 2026
- Business admin controls
- Yeschecked 20 Sep 2026
- Compatibility
- The Nextcloud app listing shows Passman version 2.6.3 on its stable channel for Nextcloud 34 and 35.checked 3 Oct 2026
- Credential tools
- Features include custom credential fields, a built-in one-time password generator, and a password strength analyzer.checked 3 Oct 2026
- Database support
- The repository lists SQLite, MySQL or MariaDB, and PostgreSQL as supported databases.checked 3 Oct 2026
- Encryption
- Credentials are encrypted client-side with 256-bit AES, and the maker describes additional server-side encryption.checked 3 Oct 2026
- Export and backup
- Users can export a vault to CSV or JSON through the UI with the vault password, and administrators can back up or restore instances, users, or vaults with OCC commands.checked 3 Oct 2026
- Imports
- Experimental import sources include KeePass, LastPass, DashLane, ZOHO, Clipperz.is, EnPass, and ocPasswords.checked 3 Oct 2026
- Installation
- The project wiki says users can install the app from the Nextcloud app store, an archive, or Git.checked 3 Oct 2026
- License
- The repository identifies Passman as licensed under AGPL-3.0.checked 3 Oct 2026
- Mobile
- A native Android app is available through Google Play, IzzyOnDroid, and F-Droid.checked 3 Oct 2026
- Passkey support
- Nochecked 20 Sep 2026
- Purpose
- Passman is an open-source password manager for hosting passwords and credentials on your own Nextcloud or ownCloud instance.checked 3 Oct 2026
- Secure sharing
- Yeschecked 20 Sep 2026
- Sharing
- Users can share credentials internally and via link, though administrators may disable sharing.checked 3 Oct 2026
- Support
- The project invites users to discuss Passman in its Telegram group and welcomes issues and pull requests on GitHub.checked 3 Oct 2026
- Vaults
- The app supports multiple vaults, and vault keys are never sent to the server.checked 3 Oct 2026
Where it runs
- Browser extension
- The maker describes a Passman web extension and says it is available for Firefox, Chrome, and Safari.checked 3 Oct 2026
- Supported platforms
- web,Android,Chromium-based browsers,Firefox,self-hosted Nextcloudchecked 20 Sep 2026
The company
- Founded
- 2016checked 28 Sep 2026
- Headquarters
- Stuttgart, Germanychecked 28 Sep 2026
Money
- Free plan
- Yeschecked 20 Sep 2026
The full review of Passman
Overview
Passman is a free, open-source password manager for users who want credentials stored in their own Nextcloud or ownCloud setup. It is most compelling for people already operating that stack; anyone seeking a password manager that works independently of a self-hosted service should look elsewhere.
Key features
Passman supports multiple vaults and keeps vault keys off the server. Credentials are encrypted client-side with 256-bit AES, and the maker also describes server-side encryption. This gives self-hosters a security-focused credential store within their existing environment, but the model depends on maintaining that environment.
Custom credential fields, a one-time password generator and a password strength analyzer address everyday password-management needs. Sharing can happen internally or through links, which helps teams distribute credentials, though administrators may disable it. Business admin controls and employee self-service add team-oriented functions.
Migration is a weaker point: imports from KeePass, LastPass, DashLane, ZOHO, Clipperz.is, EnPass and ocPasswords are experimental, so organizations moving an existing vault should allow for extra work. Vaults can be exported to CSV or JSON through the interface using the vault password. Administrators can back up or restore instances, users or vaults with OCC commands.
A REST API v2 covers vaults, credentials and authentication, but its reference is described as slightly outdated. Passman is licensed under AGPL-3.0, and the project welcomes issues and pull requests on GitHub.
Pricing
Passman is free and open source: the Free and open source plan costs nothing. No paid plan or usage limits are stated, making it a straightforward option for users comfortable with the operating and maintenance work of self-hosting.
Platforms
Passman supports web access, Android, Chromium-based browsers, Firefox and self-hosted Nextcloud. The native Android app is distributed through Google Play, IzzyOnDroid and F-Droid; the browser extension is described as available for Firefox, Chrome and Safari. Installation is offered through the Nextcloud app store, an archive or Git. The stable app listing shows version 2.6.3 for Nextcloud 34 and 35.
Who it's for
Passman suits individuals and teams already running Nextcloud or ownCloud who value control over where credentials are hosted, want multiple vaults, and can manage their own deployment. It is less suitable for people who want a standalone password manager or need a dependable, clearly established migration path from another vault.
Pros and cons
- Pros: Multiple vaults with keys kept off the server and client-side 256-bit AES encryption give self-hosters a security-focused setup.
- Pros: Internal and link sharing, custom fields, OTP generation and strength analysis cover useful individual and team workflows.
- Pros: Free and open-source access, plus CSV or JSON export and administrator backup and restore commands, provide flexibility for users comfortable with self-hosting.
- Cons: Passman requires a Nextcloud or ownCloud environment, so it is not a standalone service for users who do not want to run their own infrastructure.
- Cons: Imports are experimental, which makes migration less certain for users bringing an established password collection.
- Cons: Administrators can disable sharing, and the API reference is slightly outdated; both may matter to teams relying on those workflows.
Alternatives
Compare password managers if you want to weigh Passman against other options in the category. The other alternatives supplied for this entry are Toggl Track, OtisIO, TNC Track, Absenca, actiPLANS, Day Off, Shiftbase and Staff Leave; each is a neutral alternative rather than a password-manager comparison.
Verdict
Choose Passman if you already run Nextcloud or ownCloud and want a free, open-source credential manager with multiple vaults, sharing and export options under your control. Its self-hosted security model is the central reason to choose it; look elsewhere if you need a standalone manager or want a more certain migration process.
Alternatives to Passman
- 1

Proton Pass
Free planOpen sourceAndroidiOSWebAPI9.4From $35.88 a year - 2

Padloc
Free planOpen sourceAndroidiOSWebExtension9.1From $3.49 a month - 3

NordPass
Free planAndroidiOSWebAPI9.0Free plan - 4

Zoho Vault
Free planAndroidiOSWebAPI8.9Free plan - 5
LogMeOnce
Free planAndroidiOSWebAPI8.8From $2.50 a month - 6

1Password
AndroidiOSWebAPI8.7From $2.99 a month
