rysasahrialPassman is a robust and secure open-source password manager seamlessly integrated with Nextcloud. Designed with security at its core, Passman offers AES‑256 encryption, client‑side vault key storage, and strong password generation powered by sjcl and strength validation via zxcvbn . Whether you’re an individual or enterprise user, Passman provides multiple vault support, customizable credential fields, built-in OTP generation, and secure password sharing — all without exposing your master vault key to third-party servers.
With Passman, all encryption occurs on the client side using AES‑256 via sjcl. Vault keys never leave the user’s device. Encrypted credentials are further protected with PBKDF2 key stretching, encrypt‑then‑MAC, and OpenSSL’s AES-256-CBC cipher, ensuring a layered defense . The combination of strong encryption and secure hashing means unauthorized access is extremely unlikely when following best practices.
Passman supports easy import from major password managers such as KeePass, LastPass, Dashlane, Zoho, Clipperz, EnPass, and ocPasswords . Additionally, the browser extension and Android app ensure you can access your credentials wherever you are, with auto-login features, OTP, and credential detection integration . The platform supports multiple vaults and secure sharing, with admin controls available to disable sharing if required .
Developers benefit from a comprehensive API and support for Docker-based deployment, ideal for both testing and production environments. Frontend templates are built using JavaScript, SASS/CSS via Grunt, and PHP backend powered by PHPUnit integration . The codebase is maintained under the AGPL‑3.0 license, encouraging community contributions and transparency in development.
With over 800 GitHub stars, 113 forks, and active maintainers including Brantje and Animalillo, Passman is a highly trusted and community‑backed project . Join the Telegram group for support and discussion.
Author: Nextcloud & Community (Brantje, Animalillo, etc.)
Programming Languages: JavaScript, PHP, HTML, SCSS/CSS, Dockerfile
License: AGPL‑3.0 (Affero General Public License v3)
License Restrictions: You can use, modify, and distribute the source code, but any derivative works deployed over a network must also be released under AGPL‑3.0. You must preserve the original copyright and licensing notices and provide access to modified source code.