Un proyecto de Mauricio Gallmur· el prompt es gratis · si quieres que un agente lo corra solo, eso es lo que instalo

Bitwarden alternatives: 5 free & open-source picks

Curated, verified, and actually free. No trials, no crippled tiers. Star counts and last-activity dates checked by hand, not scraped and forgotten.

bitwarden $1.65/mothese $0can I vibecode it? the honest breakdown🔐 seguridad
Vaultwardenopen sourcedesktopmobilewebself-hostedextensiondocker to self-host

Los clientes de Bitwarden apuntando a tu propio servidor; no oficial, capaz y ahora tú eres la interrupción del servicio.

licenseAGPL-3.0

runsyour server

installDocker or Podman container with a persistent /data volume and a reverse proxy for HTTPS

dataClient-encrypted Bitwarden-compatible vault data stored in SQLite by default, or MySQL/PostgreSQL, with attachments and configuration in the persistent volume

the catch vs BitwardenIt is unofficial and may lag Bitwarden's proprietary or enterprise features, while support, backups and uptime move to you.

setupDocker, a domain and HTTPS reverse proxy are the easy part; backups, upgrades and outages become the user's responsibility

facts verified 2026-08-11

KeePassXCopen sourcedesktopextensionone-click install

Un archivo de bóveda en tu disco con excelente autocompletado; sincronizar y compartir es deliberadamente tarea de otro.

licenseGPL-2.0+

runson your machine

installNative Windows, macOS and Linux package

dataOne encrypted KDBX database file on disk; syncing means placing that file in a separate cloud or shared-folder service

the catch vs BitwardenIt trades Bitwarden's built-in sync, sharing and account recovery for a single vault file that you must synchronize and back up safely yourself.

setupThere is no built-in sync, sharing or recovery, so the user must choose a sync method and manage conflicts and backups

facts verified 2026-08-11

Passbolt Community Editionopen sourcemobilewebself-hostedcliextensionself-host, real ops

Una bóveda de contraseñas para equipos con uso compartido real y una pila de servidor que espera que haya un adulto a cargo.

licenseAGPL-3.0

runsyour server

installUbuntu or Debian package, or Docker deployment, followed by browser-extension setup

dataPassword secrets are OpenPGP-encrypted; account, sharing and audit metadata live in SQL, while users' private keys and recovery kits remain client-side

the catch vs BitwardenIt requires substantially more server and OpenPGP key administration while offering a narrower, team-first experience than Bitwarden.

setupA server, database, domain, TLS, SMTP and key-recovery process are required before anyone can use it

facts verified 2026-08-11

AliasVaultopen sourcemobilewebself-hostedextensiondocker to self-host

Contraseñas, llaves de acceso y bandejas desechables en una sola bóveda; si lo autoalojas, la entrega de correo se suma a tus tareas.

licenseAGPL-3.0

runsyour machine or their cloud

installHosted signup and browser/mobile apps, or a Linux Docker Compose install script for self-hosting

dataVault secrets and received-email contents are encrypted client-side; the hosted or self-hosted server stores ciphertext, with an offline cache on clients

the catch vs BitwardenIt does not yet match Bitwarden's mature Organizations, broad client ecosystem and recovery and sharing workflows.

setupNone for the hosted service; self-hosting needs a Linux server, Docker, DNS/TLS and mail routing

facts verified 2026-08-11

Bitwarden Freefreedesktopmobilewebextensionthey host it

El gestor de contraseñas principal ya es gratis: elementos de bóveda, dispositivos, llaves de acceso y autocompletado ilimitados.

licenseGPL-3.0

runsyour machine or their cloud

installCreate a hosted account and install an official app or extension; optional self-hosting uses Bitwarden's Docker deployment

dataVault items are encrypted locally before sync; Bitwarden's cloud or a self-hosted server stores encrypted vault data, while clients keep an encrypted local cache

the catch vs BitwardenIt is the same core product, but canceling Premium means losing integrated TOTP, file attachments, emergency access and several reports.

setupNone for hosted use; self-hosting requires Docker, a domain/TLS, SMTP and ongoing server maintenance

facts verified 2026-08-11

last updated 2026-08-11 · no votes, no pay-to-list · just what's real

the usual suspects · recommended everywhere, rejected here

PadlocThe live site hides a stalled repo: last commit March 2025 and production self-hosting docs never really arrived.

at a glance
toollicenserunning itplatformsstarsactive
VaultwardenAGPL-3.0docker to self-hostweb, macos, windows, linux, ios, android, self-hosted, browser-extension65,0002026-08
KeePassXCGPL-2.0+one-click installmacos, windows, linux, browser-extension28,3002026-08
Passbolt Community EditionAGPL-3.0self-host, real opsweb, ios, android, self-hosted, cli, browser-extension6,1002026-08
AliasVaultAGPL-3.0docker to self-hostweb, ios, android, self-hosted, browser-extension2,4002026-08
Bitwarden FreeGPL-3.0they host itweb, macos, windows, linux, ios, android, browser-extension
Rather build it exactly your way? The one-shot prompt is free too.get the prompt →
why people still pay for Bitwarden

They pay because a professionally maintained security service is cheap relative to the downside of mistakes. If none of that applies to you, any pick above saves $19.8 a year.

questions
Is there a free alternative to Bitwarden?

Yes: Vaultwarden, KeePassXC, Passbolt Community Edition and 2 more. Every tool on this page is either open source or genuinely free to use long-term: no trials, no crippled tiers.

Should I just build my own Bitwarden?

Our verdict is SÍ. If your goal is to stop paying hosted Bitwarden Premium, the core vault can be self-hosted or replaced with KeePass-style local storage; the caveat is security responsibility. If you'd rather build, the exact one-shot prompt is free at puedovibecodearlo.app/bitwarden.

Cada semana mueren más suscripciones.

Veredictos nuevos, prompts nuevos, las apps más condenadas de la semana.
Un correo. Te sales en un clic.

gratis para siempre · sin spam · el prompt se queda en el sitio, las muertes te llegan a ti

$semanal: qué recibió veredicto, qué murió.