Passbolt – European password manager

Luxembourg Password managers

Luxembourg-based open-source password manager designed for teams and enterprises. End-to-end encrypted with GPG, fully auditable, self-host or use Passbolt Cloud. Raised €7.6M in 2025.

Quick facts

Headquarters Belvaux, Luxembourg
Company Passbolt SA
Founded 2014
Ownership VC-backed
Hosting 🇱🇺 Luxembourg, 🇩🇪 Germany
Infrastructure Own infrastructure
Data jurisdiction EU
Open source Full
GDPR Compliant
Pricing Open-core · from Free
Free tier Yes
Platforms Web, Self-hosted
Languages
ENFRDE
What people like

It's built specifically for teams, with granular permissions and GPG-based encryption that a solo password manager doesn't need to worry about, and self-hosting is a genuine free option.

Worth knowing

The team-first design makes it overkill for someone who just wants a personal vault, and the interface leans more toward IT admins than casual users.

90 · Certified European
Get started free

Why does it score 90?

Legal jurisdiction
EU member-state HQ
Why this score?

Incorporated in Belvaux, Luxembourg – a full EU member state.

30/30
Ownership & control
VC-backed, no non-EU parent
Why this score?

Backed by investors including Expon Capital, but no single non-EU company holds a controlling stake.

15/25
Data sovereignty
Own infrastructure
Why this score?

Passbolt runs on its own infrastructure across Luxembourg and Germany rather than a third-party cloud.

30/30
Accountability & trust
Fully open source + GDPR + audited
Why this score?

Fully open source, GDPR-compliant and independently auditable – used by multiple European government IT departments, a strong trust signal.

15/15
EuroPoints total
90/100
How we calculate EuroPoints →

See how they compare

Passbolt
EuroPoints
90 Certified European
83 Strongly European
100 Certified European
Legal jurisdiction
EU member-state HQ30/30
EU member-state HQ30/30
EU member-state HQ30/30
Ownership & control
VC-backed, no non-EU parent15/25
VC-backed, no non-EU parent15/25
Independent ownership25/25
Data sovereignty
Own infrastructure30/30
Own infrastructure30/30
No infrastructure – data never leaves the device30/30
Accountability & trust
Fully open source + GDPR + audited15/15
GDPR compliant8/15
Fully open source + GDPR12/15
Independence bonus
—
—
Bootstrapped, no outside investors5/5
Headquarters
Belvaux, Luxembourg
Vilnius, Lithuania
Metzingen, Germany
Founded
2014
2019
2003
Open source
Full
No
Full
Infrastructure
Own infrastructure
Own infrastructure
No infrastructure
GDPR
✓
✓
✓
Free tier
✓
✓
✓
Pricing
Open-core · from Free
Freemium · from Free
Free · from Free
Platforms
Web, Self-hosted
Web, iOS, Android, Desktop
Desktop
Languages
en, fr, de
en, lt, de, fr, es, pt, ja, ko
en, de, fr, es, it, nl, pl, ru, pt, zh

What does it replace?