No native mobile applications
Bitwarden, Vaultwarden and Passbolt ship mobile clients; Teampass does not. If your team needs credentials on phones, that is a real gap and you should weigh it seriously.
Compare
Teampass next to the alternatives
An honest table, including the rows where Teampass loses. If a comparison page makes its own product win everywhere, it is marketing rather than information.
Feature comparison
Restricted to things that can be checked against public documentation. Where the honest answer is "partly", the table says so.
| Capability | Teampass | Bitwarden (self-hosted) | Vaultwarden | Passbolt | KeePass + file share |
|---|---|---|---|---|---|
| Licence | GPL-3.0 | AGPL-3.0 (server) | AGPL-3.0 | AGPL-3.0 (CE) | GPL-2.0 |
| Runs entirely on your own servers | Yes | Yes | Yes | Yes | PartlyFile on a share |
| Server stack | PHP 8.2 + MySQL/MariaDB | .NET + SQL Server | Rust + SQLite/MySQL/Postgres | PHP + MySQL/MariaDB | None — local file |
| Folder tree with per-role rights | Yes | PartlyCollections | PartlyCollections | PartlyFolders in Pro | No |
| Access recertification campaigns | Yes | No | No | No | No |
| Compliance evidence export | YesAccess matrices, rotation evidence | PartlyEvent logs on paid tiers | PartlyEvent logs | PartlyAction logs in Pro | No |
| Data classification and ownership | YesFour levels | No | No | No | No |
| Password health / breach reporting | YesIncluded | PartlyPaid tiers | Partly | PartlyPro | PartlyVia plugins |
| LDAP / Active Directory | YesIncluded, nested groups | PartlyDirectory Connector, paid tiers | No | PartlyPro | No |
| OAuth2 / SSO | YesIncluded | PartlyEnterprise tier | PartlyExperimental | PartlyPro | No |
| REST API with CLI clients | YesBash and PowerShell | Yesbw CLI | Yesbw CLI | Yespassbolt CLI | No |
| Browser extension | PartlyPaid add-on | YesFree | YesBitwarden clients | YesRequired, free | PartlyThird-party |
| Native mobile apps | No | Yes | YesBitwarden clients | Yes | PartlyThird-party |
| Offline copy of the vault | YesEncrypted HTML export | YesClient cache | YesClient cache | No | YesThe file is the vault |
Comparison last verified 30 July 2026. Vendors change their tiers often — if a row is out of date or wrong, open an issue and it will be corrected.
Where the alternatives are stronger
These are real trade-offs, not softened ones. If any of them is a blocker for you, one of the other tools is the better choice — and you should find that out now rather than after a migration.
The browser extension is a paid add-on
Bitwarden and Passbolt include theirs at no cost. Ours is what funds the project, and the server stays fully usable without it — but it is a difference worth knowing before you compare price tags.
A smaller ecosystem
Bitwarden has a large company, formal audits and a broad integration ecosystem behind it. Teampass is a long-lived project with a small core team. Choose accordingly.
Three reasons teams pick it anyway
Governance is not an upsell
Recertification campaigns, evidence export, classification and rotation tracking ship in the free server. Elsewhere the equivalent features — where they exist at all — sit behind an enterprise tier.
A real folder and role model
A tree of folders with roles and per-user overrides, rather than flat collections. It maps onto how organisations actually delegate access — per client, per environment, per team.
A stack most teams already run
PHP and MySQL. No .NET, no container orchestration, no separate identity service. If you host a web application today, you can host this.
How to use this page. Do not choose a password manager from a comparison table — including this one. Install the two you are weighing, model your real folder structure in each, and try an offboarding. The differences that matter show up in fifteen minutes of that, and never in a feature grid.
Try it against your own use case.
Free, self-hosted, and uninstallable in one command if it is not for you.