On this page
Overview
Padloc is an open-source password manager for personal and team use. It can self-host the server and web client, includes PWA, desktop, and browser-extension clients, and documents an end-to-end encryption design for sensitive vault data shared across organizations.
Features and best fit
Based on official documentation; not hands-on tested · Content checked:
Key features
Protect sensitive vault data with end-to-end encryption
The security whitepaper describes cryptographic access control for plaintext vault data and treats sensitive Padloc information as end-to-end encrypted.
Sources: [3]
Combine personal password management with shared team vaults
Organizations and vault membership provide a model for sharing protected data across members, alongside password generation, tags, and other credential-management features.
Best fit
Fits individuals and teams that want control over password-manager hosting
It is relevant when teams want shared password vaults while operating the server and data location themselves rather than depending entirely on a hosted service.
Sources: [2]
Before adoption
Review maintenance freshness before adoption
The latest GitHub release is v4.3.0 from 2023-03-06 and the repository was last pushed on 2025-03-29. In 2026, browser, mobile-OS, Node dependency, and security-update compatibility should be reassessed.
Do not treat end-to-end encryption as a replacement for HTTPS
The whitepaper notes that even end-to-end encrypted sensitive data does not remove transport-level risks such as redirecting users to a malicious server, so secure connections remain necessary.
Sources: [3]
Official sources
- [1]padloc/padloc repository(2026-10-03)
- [2]Padloc README(2026-10-03)
- [3]Padloc Security Whitepaper(2026-10-03)
- [4]Padloc server configuration(2026-10-03)
- [5]Padloc v4.3.0 release(2026-10-03)
- [6]Padloc AGPL-3.0 license(2026-10-03)
Supplemental curator note
Padloc is relevant when password vaults should stay on infrastructure you control while supporting both individual and team sharing. Its latest GitHub release is from March 2023 and the repository was last pushed in March 2025, so dependency and client compatibility deserve explicit review in 2026.
Try it in 3 steps
- 1
Clone the repository
Fetch the official repository. The README local-test workflow uses Node.js and npm.
git clone https://github.com/padloc/padloc.git && cd padloc - 2
Install dependencies
Install the monorepo dependencies from the lockfile.
npm ci - 3
Start the server and web client
Open http://localhost:8080 to inspect Padloc. This is a local test workflow; production hosting needs separate TLS, storage, and backup planning.
npm start
Growth
Growth trends · Last 30 days
2,925 Stars
Trend data is still being collected.
Development activity
Last 90 days · weekly
- Commits (last 30 days)
- 0
- Open PRs
- 12
Development activity is still being collected.
Built with
Categories and tags
Categories
GitHub data
GitHub dataView detailed GitHub data
GitHub Topics
- javascript
- lit-element
- lit-html
- password-generator
- password-manager
- progressive-web-app
- pwa
- tauri
- typescript
- cryptography
- end-to-end-encryption
- Stars
- 2,925
- Forks
- 266
- Watchers
- 33
- Open issues
- 93
- Contributors
- 28
- Owner type
- Organization
- Primary language
- JavaScript
- License
- AGPL-3.0
- Repository last updated
- Mar 29, 2025
Related information
Write a related articleShare a guide or use case for this OSS in Markdown. Articles are published after administrator approval.
Explore next
- Open Notebook39,763 Stars
2 shared tag(s) · 2 shared category(s)
combine cross-source search, contextual chat, and podcast generation in a self-hosted research workspace with multiple AI providers
TypeScript - Puter43,646 Stars
3 shared tag(s) · 2 shared category(s)
a self-hostable Internet Computer combining browser desktop, storage, databases, AI, and serverless workers
TypeScript - Infisical29,584 Stars
3 shared tag(s) · 2 shared category(s)
manage secrets, certificates, and privileged access in one security platform
TypeScript - Cap7,924 Stars
3 shared tag(s) · 1 shared category(s) · Same language
self-host a privacy-focused CAPTCHA alternative built around proof-of-work and instrumentation challenges
JavaScript - Bitcoin Core90,305 Stars
3 shared tag(s) · 1 shared category(s)
Fully validate Bitcoin peer-to-peer blocks and transactions yourself while optionally running wallet and RPC services on the same node
C++ - Rocket.Chat46,207 Stars
3 shared tag(s) · 1 shared category(s)
an open-core collaboration platform for organizations that control data and network boundaries
TypeScript
Report incorrect information
Tell us if any listing information is incorrect or outdated.