Psono

Psono is an open-source password manager built for encrypted credential sharing and controlled hosting. It fits organizations that need self-hosting, role-based permissions, and administrative policy controls more than a simple personal vault. Its strongest case is a security-conscious team willing to compare plan thresholds and, for support, request a quote.

Overview

Psono encrypts vault data in the browser before it is stored on the server, so the server receives client-side-encrypted content. The server and clients are available for on-premises hosting at no charge through the Community Edition, with Docker images for the server and web client. That makes Psono a practical option for organizations that must keep infrastructure under their own control.

The product is team-oriented rather than a narrowly personal password locker. Secure sharing, group-based roles, item-level permissions, and business administration are central to its design. Plan boundaries matter: Open Source is shown for unlimited users, Basic for 10 users, and the priced Business plan requires at least 25 users.

Key features

Encrypted vault and sharing

Psono describes Curve25519 and Salsa20 through NaCl, with scrypt for password derivation. An intermediate transport-encryption layer and HTTPS with TLS 1.2, including perfect forward secrecy support, protect data in transit. This combination suits teams that want credentials encrypted before server storage, including teams operating their own server.

Users can share passwords securely, organize users and shares into groups for role-based access control, and restrict permissions on shared items. Those controls are more useful for departments and service accounts than for a lone user who only needs autofill.

Everyday vault tools

Password capture and autofill, password generation, secure notes, bookmarks, offline access, import and export, and secret history cover the routine work of replacing scattered credentials. Offline access helps when a connection is unavailable, while history provides a record of changes to secrets.

Authentication and administration

MFA options include YubiKey, Duo, TOTP applications such as Google Authenticator, and FIDO WebAuthn passkeys. Enterprise Edition adds LDAP, SAML, and OIDC single sign-on. Enterprise policies can require two-factor authentication or disable exports and recovery features, and audit logging records REST calls. These are meaningful controls for organizations with formal access procedures, although the enterprise package is a quote-based purchase.

Psono also lists local, GCP, AWS, and Azure storage backends for client-side-encrypted files, plus API keys for build pipelines and startup scripts. Those integrations extend the vault into infrastructure workflows instead of limiting it to human logins.

Pricing

Psono uses a freemium model, with paid pricing from €2.50 per user per month when billed annually.

• Community Edition: free. Open-source, self-hosted, and includes the server and clients for on-premises hosting. It is the clearest choice for organizations able to run and maintain their own deployment.
• Open Source: custom pricing, with unlimited users. The user allowance is attractive for larger deployments, but the absent published price means budgeting requires a quote.
• Basic: custom pricing for 10 users. It targets a small team, but without a price there is no published cost advantage to weigh against other plans.
• Business: €2.50 per user per month, billed annually, with a minimum of 25 users. This is the straightforward paid tier for a substantial team; the minimum makes it unsuitable for a department with fewer than 25 seats.
• Enterprise Edition: custom pricing. It adds enterprise features, while professional support and SLAs are provided by quote. Choose it when identity integrations, audit requirements, policy enforcement, or contracted support justify the higher-tier discussion.

The free self-hosted route removes subscription cost but leaves hosting responsibility with the customer. Paid plans provide a clearer service relationship only at their stated seat thresholds, so small teams should confirm the custom-priced options before committing.

Platforms

Psono supports web, Windows, macOS, Linux, iOS, Android, Chrome, Firefox, and Edge, with browser extensions, an API, and self-hosted deployment. That breadth suits mixed-device teams and organizations that need automation alongside desktop and mobile access.

Who it's for

Psono is a strong fit for security-conscious companies, technical teams, and administrators who want encrypted sharing, self-hosted infrastructure, passkeys or hardware-backed MFA, and granular permissions. It is also appropriate when LDAP, SAML, OIDC, REST-call auditing, or controls over export and recovery are requirements.

It is less suitable for a small team seeking a plainly priced subscription: Business starts at 25 users, while Open Source and Basic use custom pricing. Organizations that do not want to operate a server should compare the operational burden of Community Edition with a hosted alternative.

Pros and cons

• Pro: Browser-side encryption keeps vault data encrypted before server storage.
• Pro: Self-hosted server and clients are free through the Community Edition, with Docker images supplied.
• Pro: Group roles, item permissions, MFA choices, and enterprise policies support controlled team access.
• Pro: Broad desktop, mobile, browser, API, and cloud-storage options support varied environments.
• Con: The paid Business tier requires 25 users, excluding many small teams.
• Con: Open Source, Basic, and Enterprise pricing is custom, making direct cost comparison difficult.
• Con: Professional support and SLAs require a quote, so support costs are not predictable from the published plans.

Alternatives

Proton Pass is a better fit when you want a freemium password manager across web, desktop, mobile, and browser-extension clients without choosing a self-hosted deployment.

NordPass suits individuals who want a lifetime free option limited to one user account and mainstream desktop and mobile platforms.

LastPass is worth considering if a free tier limited to one device type and an annual-billed premium plan match your usage.

Zoho Vault is an alternative for users who want a free plan with unlimited storage and device access, plus paid sharing and provisioning features.

RoboForm offers a free single-device tier and a $2.49-per-month annual-billed Premium plan that renews at $29.88 per year.

Intuitive Password is another freemium option with a 20-item Basic Edition and self-hosted support.

Passbolt is a self-hosted alternative whose free Community Edition supports unlimited users and unlimited instances.

Padloc may suit readers wanting a free plan with unlimited vault items and devices, while its free tier omits MFA and shared vaults.

For a broader comparison, browse the Password Managers list.

Verdict

Choose Psono when encrypted team sharing, self-hosting, and detailed access policies matter more than a simple subscription checkout. Its free on-premises edition and enterprise-grade controls are compelling for technical organizations, but the 25-user Business minimum, custom pricing on several plans, and quote-based support make it a harder recommendation for small teams or buyers who need predictable pricing.