Stars
Forks
Watchers
Developer links
TeamPass
TeamPass is a dedicated on-premise password manager built specifically for teams that need collaborative credential sharing with fine-grained access controls. Role-based access control defines user permissions through hierarchical folder trees where each folder and item can be independently set to write, read, or no access against assigned roles, enabling organizations to segment credentials across departments without exposing sensitive data. Passwords are encrypted in the database using Defuse PHP Encryption with per-installation unique saltkeys, while two-factor authentication supports configurable RFC 6238 TOTP profiles with custom digits, period, and algorithm settings alongside Duo Security and Yubico hardware key integration. LDAP and Active Directory native integration enables enterprise SSO with automatic user provisioning. The Security Posture Dashboard surfaces weak, reused, breached, overdue, no-expiry, widely-shared, and unreadable credentials through indicator cards that filter and deep-link directly to items. Secure Send creates expiring, view-count-limited one-time links optionally protected by recipient passphrases for sharing credentials with external users. Import from Bitwarden, LastPass, 1Password, and KeePassXC through a unified source selector, with export to encrypted offline files. Email notifications, password expiration policies, custom fields, and attachment support round out item management. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.
Benefits
- Granular Role-Based Access Control
- Define user roles with hierarchical folder permissions set independently to write, read, or no access, enabling departmental credential segmentation without sensitive data exposure.
- Security Posture Dashboard
- Surface weak, reused, breached, overdue, and widely-shared credentials through indicator cards that filter and deep-link directly to items for immediate remediation.
- Enterprise LDAP and AD Integration
- Native LDAP and Active Directory authentication enables single sign-on with automatic user provisioning and group synchronization for enterprise identity management.
- Secure Send One-Time Links
- Share credentials with external users through expiring, view-count-limited one-time links optionally protected by recipient passphrases that wrap per-link encryption keys securely.
Features
- Configurable TOTP Profiles
- RFC 6238 TOTP with custom digits, period, and algorithm settings alongside Duo Security and Yubico hardware key two-factor authentication support.
- Encrypted Password Storage
- Defuse PHP Encryption with per-installation unique saltkeys protects all stored credentials using server-side encryption without exposing plaintext data.
- Comprehensive Audit Logging
- Complete tracking of all password access, modifications, and sharing events with detailed audit trails for compliance and security monitoring.
- Multi-Source Import
- Unified import from Bitwarden, LastPass, 1Password, and KeePassXC through a single source selector with encrypted offline file export capability.
- REST API Integration
- Documented REST API enables programmatic credential access, automated password rotation, and third-party system integration for DevOps workflows.