Private and open-source alternatives to Dashlane
15 password managers rated against the same public privacy criteria as Dashlane, with our picks first.
Why look for an alternative?
- Open source: partial. The Android and Apple app sources are published under CC BY-NC 4.0, which is not OSI-approved. The server is closed.
- No trackers or telemetry: no. The Android app contains Adjust and Sentry, and the privacy policy says the website uses Google Analytics.
- No ads or data sales: partial. Funded by subscriptions, but the privacy policy says Dashlane and third-party advertising partners use personal data for interest-based advertising.
- Independent audit: no. No independent audit is published.
- Transparency report: no. No transparency report or government request policy is published.
- Tells users about requests: no. No published policy on notifying users about data requests.
- Security headers: partial. Grade B+ (80/100+)
- Local or self-hosted option: partial. Vaults are stored only in the Dashlane cloud. Data can be exported.
The alternatives
Browserpass Grade B Our pick
Browser extension for pass, the standard Unix password manager. Passwords stay in GPG-encrypted files on your own computer.
Why it is our pick: For people who want no password company at all. Every password is a GPG-encrypted file in a folder you control, synced with Git if you like, and Browserpass fills it into the browser.
Browserpass scores 88 out of 100 (grade B) on the password managers criteria. It meets 6 of 7 criteria: open source, no trackers or telemetry, no ads or data sales, end-to-end encrypted vault, local or self-hosted option and full export.
Bitwarden Grade C Our pick
Open-source, end-to-end encrypted password manager with apps for Windows, macOS, Linux, Android, iOS, the web and browsers, and an option to self-host.
Why it is our pick: Syncs across desktop, mobile and browser apps and supports sharing with family or a team. End-to-end encrypted, audited every year, and it can be self-hosted.
Based in the United States (Five Eyes). Bitwarden scores 73 out of 100 (grade C) on the password managers criteria. It meets 8 of 11 criteria: open source, no ads or data sales, independent audit, TLS configuration, security headers, end-to-end encrypted vault, local or self-hosted option and full export.
KeePassium Grade A
Open source KeePass-compatible password manager for iOS and macOS from KeePassium Labs. It opens KDBX databases stored locally or in any Files app provider, with AutoFill, TOTP and YubiKey support.
Based in Luxembourg. KeePassium scores 100 out of 100 (grade A) on the password managers criteria. It meets 7 of 7 criteria: open source, no trackers or telemetry, no ads or data sales, independent audit, end-to-end encrypted vault, local or self-hosted option and full export.
KeePassXC Grade A
Open source, offline password manager for Windows, macOS and Linux that stores passwords in an encrypted KeePass (KDBX) database file. It includes browser integration, TOTP, SSH agent and YubiKey support, with no built-in cloud sync.
KeePassXC scores 91 out of 100 (grade A) on the password managers criteria. It meets 6 of 7 criteria: open source, no ads or data sales, independent audit, end-to-end encrypted vault, local or self-hosted option and full export.
KeePassDX Grade B
Open source password and passkey manager for Android that stores data in encrypted KeePass (KDB and KDBX) database files. It supports autofill, TOTP and biometric unlock, with no built-in cloud service.
KeePassDX scores 88 out of 100 (grade B) on the password managers criteria. It meets 6 of 7 criteria: open source, no trackers or telemetry, no ads or data sales, end-to-end encrypted vault, local or self-hosted option and full export.
Password Safe Grade B
Open source password manager originally designed by Bruce Schneier that keeps passwords in a Twofish-encrypted local database. Official builds exist for Windows and Linux, with YubiKey support and compatible third-party apps for macOS, Android and iOS.
Password Safe scores 88 out of 100 (grade B) on the password managers criteria. It meets 6 of 7 criteria: open source, no trackers or telemetry, no ads or data sales, end-to-end encrypted vault, local or self-hosted option and full export.
Strongbox Grade B
Open source password manager for iOS and macOS that works with KeePass (KDBX) and Password Safe databases stored locally, in iCloud or in other cloud storage. It supports AutoFill, TOTP, passkeys and YubiKey.
Based in the United Kingdom (Five Eyes). Strongbox scores 88 out of 100 (grade B) on the password managers criteria. It meets 6 of 7 criteria: open source, no trackers or telemetry, no ads or data sales, end-to-end encrypted vault, local or self-hosted option and full export.
Vaultwarden Grade B
Open source, lightweight server written in Rust that implements the Bitwarden client API for self-hosting. It works with the official Bitwarden apps and extensions and is not affiliated with Bitwarden.
Vaultwarden scores 88 out of 100 (grade B) on the password managers criteria. It meets 6 of 7 criteria: open source, no trackers or telemetry, no ads or data sales, end-to-end encrypted vault, local or self-hosted option and full export.
Proton Pass Grade B
End-to-end encrypted password manager from Proton with apps for desktop, mobile and browsers, built-in email aliases and a TOTP authenticator. The apps are open source.
Based in Switzerland. Proton Pass scores 80 out of 100 (grade B) on the password managers criteria. It meets 7 of 11 criteria: no ads or data sales, independent audit, transparency report, tells users about requests, TLS configuration, end-to-end encrypted vault and full export.
AliasVault Grade B
Open source, end-to-end encrypted password manager that also generates email aliases and identities and receives mail through its own email server. It can be used in the hosted cloud or self-hosted.
Based in the Netherlands (Nine Eyes). AliasVault scores 75 out of 100 (grade B) on the password managers criteria. It meets 7 of 11 criteria: open source, no trackers or telemetry, no ads or data sales, TLS configuration, end-to-end encrypted vault, local or self-hosted option and full export.
PaperVault Grade B
Encrypts secrets into a printable paper vault and splits the decryption key into several paper key cards with Shamir secret sharing. It runs in the browser, as a standalone offline app or from the command line.
PaperVault scores 75 out of 100 (grade B) on the password managers criteria. It meets 7 of 11 criteria: open source, no trackers or telemetry, no ads or data sales, TLS configuration, end-to-end encrypted vault, local or self-hosted option and full export.
2of3 by Ente Grade C
Splits a recovery key, password or other secret into three cards with Shamir secret sharing, so that any two cards recover it. It runs entirely in the browser and includes an offline recovery page.
Based in the United States (Five Eyes). 2of3 by Ente scores 73 out of 100 (grade C) on the password managers criteria. It meets 7 of 11 criteria: open source, no trackers or telemetry, no ads or data sales, TLS configuration, end-to-end encrypted vault, local or self-hosted option and full export.
LessPass Grade C
Stateless password manager that derives each site's password from the site name, login and a master password, so no vault is stored or synced. The hosted profile server is closed to new users, who can self-host one.
LessPass scores 71 out of 100 (grade C) on the password managers criteria. It meets 6 of 10 criteria: open source, no trackers or telemetry, no ads or data sales, TLS configuration, end-to-end encrypted vault and local or self-hosted option.
Pass Grade C
Command-line password manager that stores each password as a GPG-encrypted file in a folder, with optional git for history and syncing. Many third-party clients and extensions exist.
Pass scores 69 out of 100 (grade C) on the password managers criteria. It meets 5 of 7 criteria: open source, no ads or data sales, end-to-end encrypted vault, local or self-hosted option and full export.
Padloc Grade C
Open source, end-to-end encrypted password manager from MaKleSoft with desktop, mobile, browser and web apps, a hosted service and a self-hostable server. The code has had no updates in several years.
Based in Germany (Fourteen Eyes). Padloc scores 68 out of 100 (grade C) on the password managers criteria. It meets 7 of 11 criteria: open source, no ads or data sales, TLS configuration, security headers, end-to-end encrypted vault, local or self-hosted option and full export.