Freedom251 › Password Managers
Passwordcockpit
What Passwordcockpit is
Passwordcockpit is a free, self-hosted web password manager for teams. It stores, shares, and retrieves passwords, certificates, files, and other items, with deployment through Docker Compose and images supplied through its Docker Hub organization. Administrators can assign global permissions and folder-level read or manage access. Users authenticate with a database password or LDAP. A personal PIN can encrypt a password so people with access to all directories, or users assigned to the same directory, cannot view it. The project describes SSL for data transfer, database encryption for login information, passwords, and files, and PIN-based password encryption. It recommends enabling SSL or an SSL reverse proxy, setting custom encryption and authentication keys plus an admin password, and disabling Swagger. The RESTful application documents APIs with Swagger, uses MySQL or MariaDB, and stores uploaded files in a persistent volume. The configured block cipher key must be retained because passwords and files cannot be decrypted without it.
Who it suits
It suits teams wanting self-hosted password and file management with folder permissions, LDAP authentication, and Docker deployment. Administrators should be prepared to manage encryption keys, database backups, and updates.
What it does well
- Free open-source self-hosted deployment
- Global and folder-level permissions
- LDAP authentication supported
- Docker Compose installation
- MySQL or MariaDB storage
What to know first
- Losing the block cipher key prevents decryption
- Requires self-hosted administration
- SSL and security settings need manual setup
- Updates require container replacement and backups
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Free | Described as free and open source; no billing details stated. · Self-hosted web app · team password manager | Free |
As passwordcockpit.com lists them, read 11 Oct 2026. The maker's own page has the final word.
Verdict
Passwordcockpit combines team sharing controls with self-hosted deployment and several encryption options. It is a practical fit when retaining control of infrastructure and keys is more important than a managed service.
Facts from Passwordcockpit's own pages
- API
- The application follows a RESTful architecture and documents its APIs with Swagger. · passwordcockpit.com, 11 Oct 2026
- Authentication
- Users can authenticate with a password stored in the database or through LDAP. · passwordcockpit.com, 11 Oct 2026
- Business admin controls
- Yes · passwordcockpit.com, 16 Sept 2026
- Data storage
- The application uses MySQL or MariaDB, and uploaded files are stored in a persistent upload volume. · passwordcockpit.com, 11 Oct 2026
- Deployment
- Installation uses Docker Compose, and Docker images are provided through its Docker Hub organization. · passwordcockpit.com, 11 Oct 2026
- Encryption
- The project describes SSL for data transfer, database encryption for login information, passwords, and files, and PIN-based password encryption. · passwordcockpit.com, 11 Oct 2026
- Free plan
- Yes · passwordcockpit.com, 16 Sept 2026
- Permissions
- Administrators can assign global permissions and folder-level read or manage access to users. · passwordcockpit.com, 11 Oct 2026
- PIN protection
- A password can be encrypted with a personal PIN to hide it from users with access to all directories and users assigned to the same directory. · passwordcockpit.com, 11 Oct 2026
- Purpose
- Passwordcockpit is a self-hosted web password manager for teams to store, share, and retrieve passwords, certificates, files, and other items. · passwordcockpit.com, 11 Oct 2026
- Recovery consideration
- The documentation says passwords and files cannot be decrypted without the configured block cipher key, so that key must be retained. · passwordcockpit.com, 11 Oct 2026
- Runtime
- The container runs as the non-root www-data user. · passwordcockpit.com, 11 Oct 2026
- Secure sharing
- Yes · passwordcockpit.com, 16 Sept 2026
- Security setup
- The project recommends enabling SSL or using an SSL reverse proxy, setting custom encryption and authentication keys and an admin password, and disabling Swagger. · passwordcockpit.com, 11 Oct 2026
- Supported languages
- The project lists English, Italian, French, and German translations. · passwordcockpit.com, 11 Oct 2026
- Supported platforms
- web,self_hosted · passwordcockpit.com, 16 Sept 2026
- Updates
- The documented update process replaces the container with a newer image and recommends backing up the database and persistent files beforehand. · passwordcockpit.com, 11 Oct 2026
Where Passwordcockpit stands on Freedom251
- Password Managers#47 of 104