# Private and open-source alternatives to LastPass

1. [Browserpass](https://privacyratings.com/password-managers/browserpass/) (our pick): B (88/100). Browser extension for pass, the standard Unix password manager. Passwords stay in GPG-encrypted files on your own computer.
2. [Bitwarden](https://privacyratings.com/password-managers/bitwarden/) (our pick): C (73/100). Open-source, end-to-end encrypted password manager with apps for Windows, macOS, Linux, Android, iOS, the web and browsers, and an option to self-host.
3. [KeePassium](https://privacyratings.com/password-managers/keepassium/): A (100/100). Open source KeePass-compatible password manager for iOS and macOS from KeePassium Labs. It opens KDBX databases stored locally or in any Files app provider, with AutoFill, TOTP and YubiKey support.
4. [KeePassXC](https://privacyratings.com/password-managers/keepassxc/): A (91/100). Open source, offline password manager for Windows, macOS and Linux that stores passwords in an encrypted KeePass (KDBX) database file. It includes browser integration, TOTP, SSH agent and YubiKey support, with no built-in cloud sync.
5. [KeePassDX](https://privacyratings.com/password-managers/keepassdx/): B (88/100). Open source password and passkey manager for Android that stores data in encrypted KeePass (KDB and KDBX) database files. It supports autofill, TOTP and biometric unlock, with no built-in cloud service.
6. [Password Safe](https://privacyratings.com/password-managers/password-safe/): B (88/100). Open source password manager originally designed by Bruce Schneier that keeps passwords in a Twofish-encrypted local database. Official builds exist for Windows and Linux, with YubiKey support and compatible third-party apps for macOS, Android and iOS.
7. [Strongbox](https://privacyratings.com/password-managers/strongbox/): B (88/100). Open source password manager for iOS and macOS that works with KeePass (KDBX) and Password Safe databases stored locally, in iCloud or in other cloud storage. It supports AutoFill, TOTP, passkeys and YubiKey.
8. [Vaultwarden](https://privacyratings.com/password-managers/vaultwarden/): B (88/100). Open source, lightweight server written in Rust that implements the Bitwarden client API for self-hosting. It works with the official Bitwarden apps and extensions and is not affiliated with Bitwarden.
9. [Proton Pass](https://privacyratings.com/password-managers/protonpass/): B (80/100). End-to-end encrypted password manager from Proton with apps for desktop, mobile and browsers, built-in email aliases and a TOTP authenticator. The apps are open source.
10. [AliasVault](https://privacyratings.com/password-managers/aliasvault/): B (75/100). Open source, end-to-end encrypted password manager that also generates email aliases and identities and receives mail through its own email server. It can be used in the hosted cloud or self-hosted.
11. [PaperVault](https://privacyratings.com/password-managers/papervault/): B (75/100). Encrypts secrets into a printable paper vault and splits the decryption key into several paper key cards with Shamir secret sharing. It runs in the browser, as a standalone offline app or from the command line.
12. [2of3 by Ente](https://privacyratings.com/password-managers/2of3-by-ente/): C (73/100). Splits a recovery key, password or other secret into three cards with Shamir secret sharing, so that any two cards recover it. It runs entirely in the browser and includes an offline recovery page.
13. [LessPass](https://privacyratings.com/password-managers/lesspass/): C (71/100). Stateless password manager that derives each site's password from the site name, login and a master password, so no vault is stored or synced. The hosted profile server is closed to new users, who can self-host one.
14. [Pass](https://privacyratings.com/password-managers/pass/): C (69/100). Command-line password manager that stores each password as a GPG-encrypted file in a folder, with optional git for history and syncing. Many third-party clients and extensions exist.
15. [Padloc](https://privacyratings.com/password-managers/padloc/): C (68/100). Open source, end-to-end encrypted password manager from MaKleSoft with desktop, mobile, browser and web apps, a hosted service and a self-hostable server. The code has had no updates in several years.

Source: https://privacyratings.com/alternatives/lastpass/