Passbox for teams
Stop sharing passwords in chat.
- Every feature in one plan
- Guests and AI agents free
- Self-host for free, any number of people
- Open source, from Europe
Sharing
The right people see the right passwords
Create shared vaults for teams, projects or customers and give people or whole groups View, Edit or Manage. When someone leaves, Passbox replaces the vault keys.
Shared vaults
With View, Edit and Manage, visible on every item: “Visible to: Sales (12)”.
Groups
Give a group access once; new members get every vault of the group.
Roles
Owner, admin, member and guest, each with a one-line explanation. Guests are free and only view what you share.
Security codes
Admins confirm members against the key directory, so a server cannot slip in a fake key.
Administration
Control without a back door
Admins manage people, not secrets. They cannot open vaults they were not given, and they can help a member back in after a forgotten master password.
Recovery through administrators
On by default: an admin approves a request after checking the person by phone or in person. Every recovery is logged.
Two-step sign-in
Authenticator apps, security keys and passkeys, with recovery codes.
Server administration
Invite-only or by email domain, password rules, mail and a tamper-evident administration log.
Admin console and policies
Require two-step sign-in, set auto-lock limits and control exports, per organization.
Organization audit log
Who changed which vault and when, with export for your SIEM.
Identity
Fits into your identity stack
Sign in with the company account people already have, and let members come and go automatically.
Single sign-on (OIDC)
Entra ID, Google, Okta, Keycloak, Authentik and other OpenID Connect providers.
SCIM 2.0
Provision and deprovision members and groups from your directory.
Open API
Everything the apps do is a documented API (OpenAPI).
Switching
Moving from Passbolt, Bitwarden or 1Password
Import every vault in one go. The file is read on the admin's device; nothing is uploaded unencrypted.
Import from every major manager
1Password, Bitwarden, Passbolt, KeePass, LastPass, Dashlane, Proton Pass and CSV.
Encrypted export
Take your data with you at any time, as an encrypted file or CSV.
What teams pay elsewhere
Passbox Teams costs €30 per member per year, with every feature in one plan; guests and AI agents don't count as members. Comparable business plans cost more:
| Plan | Per member per year | Note |
|---|---|---|
| Passbox Teams | €30 | Every feature; free when you host it yourself |
| Proton Pass Professional | $53.88 | $4.49 per month, with SSO and SCIM |
| Passbolt Pro | €54 | €4.50 per month, at least 10 users |
| Bitwarden Enterprise | $72 | $6 per month, needed for SSO and policies |
| 1Password Business | $95.88 | $7.99 per month |
Published list prices with yearly billing, as of 24 October 2026, without guarantee. Prices change, so please check the vendors' websites.
FAQ
Questions, answered
Can administrators read our passwords?
No. Vaults are encrypted on the members' devices. Admins manage people, groups and access, but cannot open a vault they have not been given access to. Recovery through administrators is on by default so nobody gets locked out; to be clear, an admin who approves a recovery could technically read that member's data. So every recovery needs an identity check, is logged and is mailed to the member, and members can turn it off.
Do guests and AI agents count as members?
No. Guests are unlimited and free, with view-only access to the vaults you share with them: good for freelancers, agencies and tax advisors. AI agents and service accounts are free with fair use. You pay only for members.
What happens when someone leaves?
Removing a member signs them out and replaces the keys of every vault they could open. Passbox lists those vaults and suggests changing the important passwords, because the person may have kept what they saw.
Do you support single sign-on?
Yes. Members sign in with OpenID Connect providers such as Entra ID, Google, Okta, Keycloak or Authentik, and SCIM 2.0 adds and removes members and groups from your directory. Their vault is still unlocked with keys only they hold.
How do we move our team over?
Start with one team, import its vaults from your current password manager and invite the others when it works for you. Everything about the design is public: how Passbox protects your data.
Give your team one place for passwords.
€30 per member per year with every feature, guests and AI agents free, or free on your own servers.