Passbolt

Sharing team credentials without surrendering control of the encryption is the point of Passbolt, an open source credential manager built for collaboration. Each user holds an OpenPGP secret key that stays on their device, and every secret is encrypted separately for each person allowed to see it, with a browser extension, CLI and JSON API handling daily use.

Teams use it for shared production logins, API keys and onboarding material, where per person permissions and an audit trail matter more than individual convenience.

Running the server yourself keeps the encrypted vault on infrastructure you own, avoids per user licensing, and gives you a database you can back up and inspect.