Passman
Passman is a full featured, open source password manager for Nextcloud.
Join us!
Visit the “Passman General Talk” Telegram Group to participate in all sorts of topical discussions about Passman and its apps!
Features
- Multiple vaults
- Vault keys are never sent to the server
- 256-bit AES-encrypted credentials (see security)
- User-defined custom credentials fields
- Built-in OTP (One Time Password) generator
- Password analyzer
- Securely share passwords internally and via link
- Import from various password managers (experimental):
- KeePass
- LastPass
- DashLane
- ZOHO
- Clipperz.is
- EnPass
- ocPasswords
Try a Passman demo here.
External apps
Browser extension
Passman Webextension is our new, fully rewritten browser extension for the Passman Nextcloud app, using modern frontend and extension frameworks.
Android app
Our native Passman Android app is available for download from the Google Play Store, IzzyOnDroid and F-Droid.
Screenshots
More screenshots are available on the Nextcloud App Store and imgur.
Database Compatibility
| Supported |
|---|
| SQLite | • |
| MySQL / MariaDB | • |
| PostgreSQL | • |
CI runs PHPUnit against SQLite, MySQL and PostgreSQL on GitHub Actions.
Security
Password generation
Passman can generate passwords and measure their strength using zxcvbn.
Generate passwords as you like.
Passwords are generated using sjcl randomization.
Storing credentials
All passwords are encrypted client side with sjcl using 256-bit AES.
You supply a vault key which sjcl uses to encrypt your credentials. Your encrypted credentials are then sent to the server and encrypted yet again using the following routine:
Sharing credentials
Passman allows users to share passwords. (Administrators may disable this feature.)
API
Passman offers a developer API.
Unfortunately it is very outdated and not maintained. You're welcome to update it.
Docker
Passman Docker images are currently maintained in passman-dev-docker-build.
Default login for all images: admin / admin.
Quick start (development):
docker run -d -p 8080:80 -p 8443:443 \
-v /path/to/passman:/var/www/html/apps/passman \
--name passman-dev \
binsky/passman-dev:latest
See the repository README for TLS setup, available tags, and SSH/sshfs mounting.
For production deployments, use the official Nextcloud Docker image and install Passman as an app.
Development
Start from a passman-dev container, then work inside /var/www/html/apps/passman:
- Passman uses a single
.js file for templates which minimizes XHR template requests.
- Our CSS is written in SASS.
templates.js and the CSS are built with grunt / grunt build.- Watch for changes using
grunt watch.
- To run PHP unit tests in the running dev container, ...
- run on your host:
make test (full suite) or make testNoDb (without DB group). Generate a Clover coverage report with make test-coverage (requires pcov or xdebug in the container). Customize the container name with DOCKER_CONTAINER=passman-dev-nc34-85-testing make test.
- or run in the container:
cd /var/www/html/apps/passman && composer run test
- after switching branches or on cache-issues, run
cd /var/www/html/apps/passman && composer run test:clear-cache
Support Passman
Passman is open source and lives from contributions like pull request,
but we’ll also gladly accept a Club Mate or pizza!
Please consider donating:
Contributing
Pull requests and issues are welcome. Fork the repo, make your changes, and open a pull request. Add your name to the contributors list below when you do.
Maintainers:
Contributors:
FAQ
Are you adding something to check if malicious code is executing on the browser?
No, because malicious code can edit functions that check for malicious code.
