Overview

Passman is an open-source password manager hosted on your own Nextcloud or ownCloud instance. It suits individuals and teams already invested in that stack who want credential sharing and control over where vaults live. Its self-hosted model is a strong fit for those priorities, but its integration path is less compelling for teams that need a current API reference or dependable migration tooling.

Key features

Passman supports multiple vaults, with vault keys kept off the server. Credentials receive client-side 256-bit AES encryption, alongside additional server-side encryption described by the maker. That combination suits teams seeking layered protection within their own deployment, though self-hosting means they must operate the underlying Nextcloud or ownCloud instance.

Custom credential fields, a built-in one-time password generator and a password strength analyzer cover practical credential management needs. Sharing works internally and through links, with the important caveat that administrators can disable it. Business admin controls and employee self-service are also supported.

Imports from KeePass, LastPass, DashLane, ZOHO, Clipperz.is, EnPass and ocPasswords are experimental, so teams moving an established vault should plan for possible friction rather than assume a smooth migration. Vaults can be exported to CSV or JSON through the UI using the vault password; administrators can back up or restore instances, users or vaults with OCC commands.

The REST API v2 covers vaults, credentials and authentication, but its reference is described as slightly outdated. That makes Passman less attractive when a team’s decision depends on integrating against precise, current API documentation. The project welcomes issues and pull requests on GitHub and invites discussion in its Telegram group.

Pricing

Free and open source: 0.00 USD per free. The plan has no stated usage limits or paid tier, making it straightforward for individuals and teams willing to provide their own Nextcloud or ownCloud deployment. The tradeoff is that the plan price does not remove the operational responsibility of self-hosting.

Platforms

Passman runs on the web and self-hosted Nextcloud, with browser extensions for Firefox, Chrome and Safari and a native Android app distributed through Google Play, IzzyOnDroid and F-Droid. The supported-platform information also includes Chromium-based browsers and Android. Although iOS appears among the platform categories, the described native mobile app is Android; teams requiring a confirmed iOS app should not assume one from that category alone.

Installation is available through the Nextcloud app store, an archive or Git. The stable-channel listing shows version 2.6.3 for Nextcloud 34 and 35. Supported databases are SQLite, MySQL or MariaDB, and PostgreSQL. Passman is licensed under AGPL-3.0. It does not support passkeys.

Who it's for

Passman is best for people and organizations already operating Nextcloud or ownCloud who want a free, open-source credential manager with multiple vaults, sharing and administrator controls. It is a weaker fit for teams that need passkey support, a verified iOS app, mature migration imports or a current API reference as a foundation for integration work.

Pros and cons

Pros: Client-side 256-bit AES encryption and vault keys kept off the server align well with a self-hosted deployment.
Pros: Multiple vaults, internal and link sharing, custom fields and an OTP generator make it useful beyond basic password storage.
Pros: The free plan has no stated usage limits, and database options include SQLite, MySQL or MariaDB, and PostgreSQL.
Cons: Experimental imports make Passman a riskier choice for teams migrating a large or business-critical credential collection.
Cons: The REST API reference is slightly outdated, which complicates decisions that depend on integration detail.
Cons: No passkey support is a clear gap for teams making passkeys part of their credential strategy.

Alternatives

For a broader shortlist, see Password Managers. Consider LastPass if you want a freemium option spanning Android, iOS, desktop operating systems and web; its free plan is limited to one device type. Proton Pass is another freemium choice with apps across Android, iOS, desktop operating systems and web.

NordPass offers a free plan for one user account and support across mobile, desktop and web. Zoho Vault is worth considering for a free plan with unlimited storage and device access. RoboForm has a free single-device plan and a Premium option at 2.49 USD per month, billed annually and renewing at $29.88/yr after the first year.

Intuitive Password may suit teams that want a self-hosted option with secure sharing and autofill; its Basic Edition caps storage at 20 password items. Passbolt is an alternative for teams prioritizing a free Community Edition with unlimited users and instances. Devolutions Password Manager is another option for teams considering cloud or self-hosted workspaces with browser autofill and built-in OTP authentication.

Verdict

Choose Passman if your team already runs Nextcloud or ownCloud and values free, self-hosted credential management with vaults, sharing and administrative control. Its principal advantage is fitting that stack without a stated usage cap; look elsewhere if current API documentation, reliable imports, passkey support or a confirmed iOS app is essential.

	AnnualLeave.com	Passman
Free plan	No	Yes
Free trial	No	No
Paid from	—	Free
Open source	No	No
Platforms	Web	Android, api, extension, iOS, self-hosted, Web
Free plan	No	Yes
Approval workflows	Yes	Yes
Accrual rules	custom	—
Employee self-service	Yes	Yes
Mobile apps	—	No
Payroll integrations	—	No

AnnualLeave.com vs Passman

AnnualLeave.com

Passman