Free for up to 10 users · every feature included

Your team’s passwords belong on your own server.

Vaultigen is a self-hosted password manager for organizations that need shared vaults, clear permissions, and a controlled way to regain access when someone is unavailable. One license covers your whole organization, no per-user fees.

Install free See pricing

Self-hosted
Source available
Mandatory MFA
No telemetry or activation
No per-user fees

A Vaultigen vault with entries grouped by folder, showing title, type, host and owner. Passwords are not visible.

Built for real operational problems

Shared logins work, until someone is unavailable, leaves, or an auditor asks who saw a password.

Vaultigen replaces credentials in chat and spreadsheets with organization-owned vaults, explicit access, and an audit trail.

The 2 a.m. lockout

The only person who knows the hosting password is on a plane. Emergency access gives a Super Admin a time-limited, read-only path into the affected vault.

The person who leaves

Deactivation revokes every session. The offboarding report lists the entries the person revealed through Vaultigen, so you know which credentials to rotate.

The audit question

Who saw the production database password, and when? Vaultigen records each reveal before returning the secret.

Vaultigen authorizes every reveal and writes the audit event before returning the secret.

Continuity

Access should not depend on one person being available.

When the only manager of a vault is sick, unreachable, or has left the company, a Super Admin can start an emergency session for that vault. It is deliberately narrow, visible, and separate from ordinary platform administration.

See how emergency access works

One vault, read-only
Expires after at most 30 minutes
Written reason, password, and fresh second factor required
Other administrators or designated security contacts are notified

A clear handover when someone leaves.

Offboarding revokes access immediately and lists the entries the person revealed through Vaultigen as credentials to rotate. Platform administrators have no standing access to vault contents.

Features

Shared vaults, granular access, auditing, and recovery, on infrastructure you control.

Vaults & access

Grant exactly the access each person needs.

A vault per project, customer or department. Folders inside. Grants for users or whole teams, at vault, folder or single-entry level, with an optional expiry.

Viewer, Editor and Manager roles, plus a Custodian who governs a vault without reading it
“Why can I see this?” names the exact grant behind every access
Logins, secure notes, SSH keys, TOTP codes, custom fields and encrypted files
Search covers titles, hosts, folders and tags. Secrets are never searchable.

Vault entry list grouped by folders with login, secure note and SSH key entries.

Users & teams

Admins run the system without standing access to secrets.

Invite-only accounts with mandatory MFA. Platform roles manage users, teams and settings, but do not grant access to vault contents.

Single-use, 24-hour invitations bound to the invited email address
Authenticator app or email code; the admin decides which are allowed
Offboarding lists entries a leaver revealed through Vaultigen, so you know what to rotate
Every account gets an organization-managed personal work vault

Users list with platform roles, active and verified status and the MFA method per user.

Audit log

An answer for “who saw what, and when”.

Every reveal, download, grant and setting change is recorded. Events are hash-chained and checkpointed with a key outside the database, making database-only tampering detectable.

Filters by actor, action, vault, outcome and time
Never contains passwords, codes, keys or request bodies
Retention you control, with verifiable pruning
Read-only Auditor role for compliance reviews

Activity page showing a verified audit chain and a list of security events.

Backup & recovery

Encrypted, verified backups with a documented restore process.

One click creates a complete encrypted backup set: database snapshot, encrypted files and an authenticated manifest. The backup key is independent from the live installation key.

Readiness checks before a backup starts, verification after it ends
Restore preflight checks every key before touching the target
Installation-key and vault-key rotation without taking the vault offline
Trash and encrypted revisions for everyday mistakes

Operations page with green backup readiness checks and the latest completed backup.

Pricing

One organization. One license. No per-user fees.

Use every feature free with up to 10 users. Above that, choose a perpetual Pro license or Lifetime. Both cover unlimited users and every installation of your organization.

Free

For teams with up to 10 users.

$0forever

Install for free

Up to 10 users
Every feature included
All updates included
Self-hosted, source available
Community support via GitHub

Pro

For growing organizations.

$279one-time

Buy Pro

Unlimited users
Use your version forever
1 year of updates included
Optional renewal: $190 per year
All installations of your organization (staging, DR)
Email support

Introductory offer

Lifetime

Pay once, get every future version.

Regular price: ~~$799~~

Save 25%

$599one-time

Lifetime licenses are limited

We only sell a limited number. Once they are gone, Lifetime is no longer available. The introductory price may end even sooner.

Buy Lifetime

Unlimited users
Updates for the lifetime of the product, including major versions
No renewals, ever
All installations of your organization (staging, DR)
Email support

All prices in USD, excluding VAT and other applicable taxes. Taxes are calculated at checkout. Commercial licenses are for business customers only. Payment and invoicing by Creem, our merchant of record.

Try every feature free with up to 10 users, with no time limit, before you buy. After delivery, we do not offer voluntary refunds for changes of mind. Applicable statutory rights, including remedies for defects or non-delivery, remain unaffected. Refund terms

One license. Your whole team.

Your team grows. Your price doesn’t.

We believe self-hosted software should not cost more every time you hire someone. Vaultigen is free for up to 10 users; above that, one fixed license covers your entire organization. See how that compares with typical per-user pricing.

Choose your license

Prowith annual updates$279Lifetimecurrent introductory offer$599 once

How many users?

$279 in year 1, then $190 per year for continuous updates.

Illustrative estimate based on $3–$4.90 per user/month. Pro includes optional renewals for continuous updates in years 2–6. Amounts are in USD and exclude taxes, competitor discounts and price changes.

Your savings after 6 years

$4,171 – $7,591

77% – 86% compared with per-user pricing

What you pay over time

cumulative, USD

Per-user tools, 6 years: $5,400 – $8,820
Vaultigen Pro, 6 years: $1,229
Vaultigen Lifetime, 6 years: $599

Lifetime costs less than Pro from year 3. After 6 years, you pay $630 less, and nothing more after that.

Compare plans and FAQ

A clearly documented security model

Know exactly what the server can access.

Vaultigen encrypts secret values before storage. The server can decrypt them after authorizing a request, which supports organization-controlled sharing and emergency access. The host must therefore be trusted. We document what is encrypted, what remains readable, and which threats are outside the model.

Encrypted before storage

Passwords and other secret values are sealed with XChaCha20-Poly1305 before they reach the database.

One key per vault

Vault keys are wrapped by an installation key that lives outside the database.

Checked on every reveal

Each reveal is a fresh, audited authorization decision. No audit record, no secret.

Explicit trust boundary

Vaultigen does not protect secrets from an attacker who controls the running server.

Read the security model

Never phones home

Your vault does not talk to us. Ever.

No telemetry, no online activation, no update check, no license server. Licenses are signed files that are verified offline. Vaultigen runs the same behind an egress firewall or in a network without internet access.

Offline license verification (Ed25519)
Works fully air-gapped
The source is public, so you can check

Built for the person who runs it

Know your installation is healthy before your users do.

Check keys, mail, queue and scheduler heartbeats, disk headroom, pending security notifications, and license status on one page. See whether each check passes without exposing secret values.

Installation status page with all readiness checks passing.

Guided imports

Import encrypted sysPass XML exports and KeePass 2.x/KeePassXC XML exports into new vaults. Review structure, tags, and access before anything is written.

Everyday recovery

Restore deleted entries from trash or recover encrypted revisions. Rotate installation and vault keys without taking the vault offline.

Your database

PostgreSQL, MySQL, MariaDB or SQLite. You control the data, encryption keys, and complete backup sets.

Run your organization’s password manager on your own server.

Install with Docker Compose and try every feature free with up to 10 users. No time limit, no per-user fees.

Install free Read the docs