🔐 Vaultly
The zero-knowledge team password manager you own forever.
Vaultly at a glance
| Price | $39, once — no renewal |
| Replaces | 1Password Teams at $7.99/user/mo — roughly $96 a year, every year |
| Type | Self-hosted web app |
| Platforms | Your own server (VPS / Docker), any browser |
| Category | Security & Backup |
Vaultly features
🔒 Zero-knowledge client-side crypto
PBKDF2 at 600k iterations into AES-256-GCM via the Web Crypto API, so a server compromise is not a vault compromise.
👥 Shared team vaults
Vault keys are wrapped with each member RSA-OAEP public key in the browser, and the server only relays wrapped keys it cannot read.
🔑 Logins, notes and cards
Store logins, secure notes and cards with folders, search, a strong password generator and a strength meter.
⏱️ Inline TOTP
Store a 2FA secret alongside a login and get live 6-digit codes with copy-to-clipboard that auto-clears.
🕵️ Opt-in breach check
HaveIBeenPwned k-anonymity range lookups only when you click, off by default, and your password never leaves the browser.
📜 Audit log
Registrations, logins, item create/edit/delete/reveal and vault sharing are all recorded with who did what and when.
🔐 Auto-lock
Keys are wiped from memory after five minutes idle.
$39 once — that's the whole pricing page
1Password Teams charges $7.99/user/mo — roughly $96 a year, every year. Vaultly is a single payment, and it keeps working whether or not we ever sell another copy.
Or get Vaultly inside the full suite — every app in the catalog, currently $97 for the bundle. See the bundle →
Vaultly guides & pages
Honest answers
Is it really free on GitHub?
Yes. Vaultly is MIT-licensed at github.com/bensblueprints/password-manager-selfhosted-mvp and always will be. The $39 buys the packaged 1-click installer and setup; building from source is free.
Where does my data live, and what can the server see?
On your own server, as ciphertext. The server can see email addresses, item counts and timestamps, vault names and audit metadata, but not names, URLs, usernames, passwords or notes, which stay inside the encryption.
What if I forget my master password?
It is unrecoverable by design; there is no reset. Export regularly (the export is ciphertext too) and store it safely.