One tenant.
One vault.
Yours.
Cloud password managers put every customer in one big database — one breach away from everyone's problem. Passvault provisions you a separate, isolated instance with its own encrypted database. Here's the drawing to prove it.
NOTE 2 — Contents encrypted client-side (AES-256). Operator reads ciphertext only.
NOTE 3 — Nightly encrypted snapshots to two independent clouds. Restores are drill-tested.
Every device
Browser extensions, iOS and Android apps, and a web vault — Passvault speaks the Bitwarden protocol, so the best clients already exist.
2FA built in
Store TOTP codes next to the login they belong to. One less app, one less thing to lose.
Share safely
Organizations and collections for families and teams — grant, scope, and revoke access without ever pasting a password into chat.
Encrypted send
Share a file or a secret with anyone through an encrypted, expiring link — even if they don't use Passvault.
Your own domain
Run your vault at vault.yourcompany.com. Your brand on the login page, our drawing underneath.
Open core
Built on Vaultwarden, open source and publicly auditable. No proprietary black box holds your secrets.
or $50/year — two months free
10 GB storage · custom domain · TOTP · sharing — all included
| Your team | Passvault | Typical cloud plan* |
|---|---|---|
| 5 people | $5 /mo | $20 /mo |
| 10 people | $10 /mo | $40 /mo |
| 20 people | $20 /mo | $80 /mo |
| 50 people | $50 /mo | $200 /mo |
Detail 4.1What we can't read
Your vault is encrypted on your device with AES-256 before it ever reaches us. The server stores ciphertext; the key is derived from your master password, which never leaves your device. If you lose it, we cannot reset it — that's not a support gap, that's the design.
Detail 4.2What isolation means here
Every customer gets a separate instance with its own database — not a row in a shared one. There is no cross-tenant query to get wrong, no shared table to leak. The blast radius of any single compromise is one tenant, by construction.
Detail 4.3Backups that restore
- Nightly encrypted snapshots of every instance.
- Shipped to two independent cloud providers.
- Restore drills are actually run — a backup you've never restored is a hope, not a backup.
Detail 4.4Auditable core
Passvault runs on Vaultwarden, an open-source, Bitwarden-compatible server with its code in public. You don't have to trust our word on what the software does — you can read it, and thousands of people do.
N1 — Can I use the Bitwarden apps?
Yes. Passvault is Bitwarden-compatible: point the official browser extensions, mobile and desktop apps at your instance URL and log in.
N2 — Can I import from my current manager?
Yes — the web vault imports from Bitwarden, LastPass, 1Password, Chrome, KeePass and dozens more via standard CSV/JSON export.
N3 — What happens if you disappear?
Your data is exportable at any time in standard formats, and the server software is open source — you could self-host the same stack tomorrow. No lock-in is a feature.
N4 — Is there a free trial?
The first invoice is refundable under our refund policy — try it on a real vault, keep it only if it earns its keep.
Drawn to scale. Nothing exaggerated.
Provisioned automatically after checkout — your instance, your database, minutes from now.