Find your fit
Who it is for
IT and operations teams handling shared service accounts can organize credentials in folders, grant read, update or owner access, and use group shares where access should follow team membership.
A team choosing its hosting model should compare the administration it will handle itself against Passbolt Cloud Business, Cloud Sovereign or Cloud Enterprise. The visible Cloud Business plan is hosted in Belgium and Germany; the Sovereign plan is described as Luxembourg hosted.
A buyer who needs directory provisioning, SSO, assisted recovery or activity logs should examine the paid edition matrix: the self-hosted Pro plan lists these above Community, while the free Community plan covers the core password-sharing workflow.
The work it supports
Core capabilities
Credential records. Create a password resource and, where the instance enables them, other secret types such as a standalone one-time code, note or custom field.
Permissioned sharing. An owner shares a resource with a person or group and chooses read, update or owner rights. Update rights include deletion; only an owner manages the share list.
Group access. Sharing with a group can follow membership as people join or leave. Adding a member to a group with many shared resources requires a manager to re-encrypt secrets, so that change may take time.
Folder organization. Community Edition includes private and shared folders for arranging credentials.
Browser use. The extension can suggest matching credentials in a recognized login form and offer fill, generate or save actions; a newly captured login is stored only after the user confirms.
Secret protection. Passbolt describes local secret encryption in the extension or mobile app and individually encrypted copies for recipients. Encryption of resource names and URLs depends on the administrator-enabled metadata configuration.
Recovery setup. Users should save their recovery kit during setup. Admin-assisted recovery requires an enabled organization setup and appears in the paid Pro and Cloud feature lists.
Understand the offer
Pricing and getting started
Self-hosted Community Edition is listed as free with unlimited users and community support. The organization operates its own server.
The viewed USD self-hosted Pro price is $4.90 per user per month, billed annually with a 10-user minimum. Pro lists LDAP provisioning, Microsoft/Google/OpenID SSO, account recovery and activity logs above Community. Enterprise is quote-led and adds consulting and tailored services.
The viewed USD Cloud Business price is $5.40 per user per month billed monthly, with a 10-user minimum and a seven-day trial. It is hosted in Belgium and Germany on Google Cloud infrastructure.
Cloud Sovereign is shown at USD $8 per user per month billed annually with a 10-user minimum and Luxembourg hosting. Cloud Enterprise has quote-led pricing. Check the current currency, billing selector and contract details before buying.
Look a little closer
Before you choose
Choose the edition before comparing features. Free self-hosted Community covers core sharing, while directory provisioning, SSO, assisted recovery and activity logs are listed above it in Pro; Cloud has its own plan matrix.
Plan for recovery and access changes. Store the recovery kit securely, enable assisted recovery if needed, and rotate a sensitive secret when someone leaves a group because withdrawing access cannot erase a copy they already read.
The vendor documents local secret encryption, while metadata encryption is a separate administrator-configured setting. Assess your own hosting, backup, account administration and security requirements before relying on a deployment.
Prices and trial terms above are a capture of the vendor’s public USD pages, not a checkout quote. No account, live sharing, recovery, deployment, trial signup or purchase was tested.
8 distinct sources behind this profile. Research observed Oct 18, 2026. Features and offers can change.
View sources and research →
