Open-source, self-hostable password manager for teams, built by a German company and independently security-audited.

Psono is a password manager for teams developed by esaqa GmbH, based in Vorra, Bavaria, Germany. Credentials are encrypted client-side, so a server operator — including esaqa itself on the hosted plan — never sees plaintext secrets, and encrypted entries can be shared with colleagues or grouped into team vaults.

Both the server and the clients are open source under the Apache 2.0 license and can be self-hosted without feature restrictions, which is the main reason it shows up in setups where a password manager is not allowed to leave the company’s own infrastructure. The server image has passed two million Docker Hub pulls.

Psono commissioned an independent security audit from the German firm X41 D-Sec in 2024 and publishes the full report — a level of transparency few password managers in this segment offer. Business features are free up to ten users, with paid tiers for self-hosted enterprise deployments and a managed SaaS option for teams that would rather not run it themselves.