Skip to content
Password Manager Manager
Psono logo

Psono

psono.com

Open-source, self-hostable password manager from Germany's esaqa GmbH that encrypts client-side with NaCl and derives keys with scrypt.

Owner
esaqa GmbH
Based in
Germany
Founded
Unknown
Type
Standalone app
Free plan
Yes
Community Edition free and open source for unlimited self-hosted users; Enterprise Edition free up to 10 users
Personal plan
No paid plan
Latest audit
Cure53, 2026
console and infrastructure, public report
On record
No incidents found
in our research
  • Audited by Cure53 in 2026, report public
  • All apps are open source
  • You can run your own server
  • Has a free plan

How Psono encrypts your vault

From Psono's security documentation, next to the other 22. Psono is outlined.

  • End-to-end encrypted

    Encrypted on your device before it's stored (like 20 others)

    Cipher: XSalsa20-Poly1305 (NaCl, Curve25519)

  • Website addresses encrypted

    Encrypted with the rest of the item (like 18 others)

  • Item names encrypted

    Titles and folder names are encrypted (like 16 others)

    The account email is also encrypted at rest on the server.

  • Memory-hard password hashing

    Each password guess costs memory as well as time (like 2 others)

    scrypt N=2^14 (16 MiB), r=8, p=1, 64-byte output

  • Extra secret key

    Not documented (19 of 23 document it)

What you'll pay

In EUR, from Psono's own pricing page, checked 2026-10-16.

Free plan

Yes

Community Edition free and open source for unlimited self-hosted users; Enterprise Edition free up to 10 users

Personal plan

None

After the first year

—

Family plan

None

Business:
€2.50/user/mo
Free trial:
Unknown
Money-back:
Unknown
About the renewal:
Paid plans are business only; renewal terms not stated.

Audits

Independent security reviews, newest first.

  1. 2026 Cure53

    Scope: console and infrastructure. Report is public.

    • Research summary (no single link)

  2. 2025 Cure53

    Scope: browser add-ons and API. Report is public.

  • Open-source appsAll appsAll apps
  • Open-source serverYesYes
  • Run it yourselfOwn serverOwn server
  • Bug bountyNot verifiedNot verified

Source code

Incidents

Breaches, stolen data and serious flaws on record.

None found in our research.

Apps, browsers and passkeys

  • WindowsNoNo
  • macOSNoNo
  • LinuxNoNo
  • iPhoneYesYes
  • AndroidYesYes
  • Web vaultYesYes
  • ChromeYesYes
  • FirefoxYesYes
  • SafariNoNo
  • EdgeYesYes
  • Saves and fills passkeysNot verifiedNot verified
  • Unlock the vault with a passkeyYesYes
  • Passkey import and export (CXP)Not verifiedNot verified

Sharing, recovery and extras

  • Shared vaultsYesYes
  • Share with non-usersYesYes
  • Emergency accessYesYes
  • 2FA codes built inNot verifiedNot verified
  • Breach monitoringYesYes
  • Email aliasesNot verifiedNot verified
  • File attachmentsYesYes
  • SSH keys and agentNot verifiedNot verified
  • Command lineNot verifiedNot verified
  • Encrypted exportNot verifiedNot verified
  • Works offlineYesYes
  • Authenticator-app 2FAYesYes
  • Security key for 2FAYesYes
  • Password health reportYesYes
  • CSV exportNot verifiedNot verified

Where it's a pick

Best self-hosted password manager for teams

Open source, self-hosted, Cure53 audits in 2025 and 2026, and a free Enterprise Edition for up to 10 users. Priced in euros.

All sources for Psono (9)