Skip to content
vaultigen
Get started free
Free for up to 10 users · every feature included

Your team’s passwords belong on your own server.

Shared logins in chat threads, a spreadsheet nobody owns, and one admin who knows everything. Vaultigen replaces all of it with encrypted vaults, access you can explain, a tamper-evident audit log and backups you have actually restored. Self-hosted, source-available, and it never phones home.

Get started freeSee pricing
  • Self-hosted
  • Source available
  • MFA for every account
  • Never phones home
  • Data import
A Vaultigen vault with entries grouped by folder, showing title, type, host and owner. Passwords are not visible.A Vaultigen vault with entries grouped by folder, showing title, type, host and owner. Passwords are not visible.

The problem

Password chaos is not a tooling problem until the day it is.

Most teams do not lose control in one big breach. They lose it quietly, one shared login at a time.

The 2 a.m. lockout

The only person who knows the hosting password is on a plane. Nobody else can get in, so everybody starts sharing one login “just this once”.

The audit question

“Who saw the production database password, and when?” A spreadsheet and a chat history have no answer that holds up in a review.

The person who leaves

Someone leaves the company. Which credentials did they know? Without a record, the honest answer is “all of them”, and rotating everything never happens.

Vaultigen is built around one idea: your company should never be one sick day away from losing access to its own accounts, and every access to a secret should be provable, not just promised.

Features

Everything a team needs from a vault. Nothing that leaves your network.

Vaults & access

Access you can explain in one sentence.

A vault per project, customer or department. Folders inside. Grants for users or whole teams, at vault, folder or single-entry level, with an optional expiry.

  • Viewer, Editor and Manager roles, plus a Custodian who governs a vault without reading it
  • “Why can I see this?” names the exact grant behind every access
  • Logins, secure notes, SSH keys, TOTP codes, custom fields and encrypted files
  • Search covers titles, hosts, folders and tags. Secrets are never searchable.
Vault entry list grouped by folders with login, secure note and SSH key entries.Vault entry list grouped by folders with login, secure note and SSH key entries.

Users & teams

Admins run the system. They do not read your secrets.

Invite-only accounts with mandatory MFA. Platform roles manage users, teams and settings, but never grant access to a single password.

  • Single-use, 24-hour invitations bound to the invited email address
  • Authenticator app or email code; the admin decides which are allowed
  • Offboarding lists every credential a leaver revealed, so you know what to rotate
  • Every account gets an organization-managed personal work vault
Users list with platform roles, active and verified status and the MFA method per user.Users list with platform roles, active and verified status and the MFA method per user.

Audit log

An answer for “who saw what, and when”.

Every reveal, download, grant and setting change is recorded. Events are hash-chained and checkpointed with a key that does not live in the database, so tampering shows.

  • Filters by actor, action, vault, outcome and time
  • Never contains passwords, codes, keys or request bodies
  • Retention you control, with verifiable pruning
  • Read-only Auditor role for compliance reviews
Activity page showing a verified audit chain and a list of security events.Activity page showing a verified audit chain and a list of security events.

Backup & recovery

Backups you have restored, not backups you hope work.

One click creates a complete encrypted backup set: database snapshot, encrypted files and an authenticated manifest. The backup key is independent from the live installation key.

  • Readiness checks before a backup starts, verification after it ends
  • Restore preflight checks every key before touching the target
  • Installation-key and vault-key rotation without taking the vault offline
  • Trash and encrypted revisions for everyday mistakes
Operations page with green backup readiness checks and the latest completed backup.Operations page with green backup readiness checks and the latest completed backup.

Import

Move to Vaultigen without starting over.

Import your data from other systems into Vaultigen. A guided workflow helps you organize entries into vaults, folders and tags, assign owners and set access before the import begins.

  • The export is re-encrypted immediately; plaintext is never stored
  • Runs in the background and reports per-entry failures
  • Previews show redacted metadata only
  • Creates new vaults; nobody sees anything until you grant access
Import page with fields for the source system, export file and export password.Import page with fields for the source system, export file and export password.

And the parts you only notice when you need them

Emergency access

Read-only, one vault, 30 minutes, fresh MFA, a written reason, and every other admin is notified.

Trash & revisions

Deleted entries wait in the trash. Every edit keeps an encrypted revision you can restore.

Key rotation

Rotate the installation key or a single vault key from the UI or the console. Resumable and audited.

Installation status

Database, keys, queue, scheduler, mail, disk headroom and license, checked on one page.

Tags & favorites

Vault tags, curated global tags and favorites in the sidebar keep large installations navigable.

Your database

PostgreSQL, MySQL, MariaDB or SQLite. You own the data, the backups and the way out.

Built for the person who runs it

Know your installation is healthy before your users do.

The Installation status page checks everything a self-hosted service quietly depends on: keys, mail, queue and scheduler heartbeats, free disk space, pending security notifications and your license. No values are ever shown, only whether things are in place.

Installation status page with all readiness checks passing.Installation status page with all readiness checks passing.

Security, without hand-waving

We tell you exactly what is encrypted, and what is not.

Many vendors sell “zero knowledge” as an absolute promise. Vaultigen is a server-trusted design, and we document precisely what that means. That is a much easier conversation with your security team or auditor than a claim they cannot verify.

Encrypted before storage

Secrets are sealed with XChaCha20-Poly1305 before they reach the database. A stolen dump holds ciphertext.

One key per vault

Vault keys are wrapped by an installation key that lives outside the database.

Checked on every reveal

Each reveal is a fresh, audited authorization decision. No audit record, no secret.

Honest about the boundary

The server can decrypt for authorized users. A compromised host is outside what encryption can protect.

Read the security model

Never phones home

Your vault does not talk to us. Ever.

No telemetry, no online activation, no update check, no license server. Licenses are signed files that are verified offline. Vaultigen runs the same behind an egress firewall or in a network without internet access.

  • Offline license verification (Ed25519)
  • Works fully air-gapped
  • The source is public, so you can check

Pricing

Free for small teams. A one-time price for everyone else.

Try every feature on your own server before you buy. Free for up to 10 users, with no time limit. Need more users? Buy a perpetual license.

Free

For teams with up to 10 users.

€0forever

Install for free
  • Up to 10 users
  • Every feature included
  • Self-hosted, source available
  • Community support via GitHub

Pro

For growing organizations.

€490one-time

Buy Pro
  • Unlimited users
  • Use your version forever
  • 1 year of updates included
  • Optional renewal: €190 per year
  • All installations of your organization (staging, DR)
  • Email support
Introductory offer

Lifetime

Pay once, get every future version.

€990one-time

Buy Lifetime
  • Unlimited users
  • Updates for the lifetime of the product, including major versions
  • No renewals, ever
  • All installations of your organization (staging, DR)
  • Email support

Commercial licenses are for businesses and other organizations only. Prices exclude VAT. Payment and invoicing by Creem, our merchant of record.

Try every feature free with up to 10 users, with no time limit, before you buy. After delivery, we do not offer voluntary refunds for changes of mind. Applicable statutory rights, including remedies for defects or non-delivery, remain unaffected. Refund terms

Compare plans and FAQ

How Vaultigen compares

VaultigenCloud password managersLegacy self-hosted tools
Self-hosted, your data stays with youYesVariesYes
Audited emergency-access workflowYesVariesNo
Publicly documented security modelYesVariesNo
Tamper-evident audit logYesVariesVaries
No vendor connection requiredYesNoYes
Browser extension and mobile appsPlannedYesNo

A category-level view. Features of other products change and vary by plan; check their current documentation.

Give your team a vault. Give your business a way back in.

Install Vaultigen on your own server in under an hour. Free for up to 10 users, with every feature.

Get started freeRead the docs