Get started

Lasbolt is a self-hosted password manager. You run the server. You keep your data. Apps for the web, macOS, iOS, Android, browsers and the command line connect to your server.

What Lasbolt does

• It stores logins, notes, cards and keys, with custom fields and one-time password (TOTP) secrets.
• It syncs your devices without manual steps. It works offline and merges the changes later.
• It keeps the history of each change. An overwrite does not destroy the old value.
• It has two protection levels for each folder. A server-readable folder lets the server search, sync and serve agents. An end-to-end (E2E) folder is secret from the server.
• It shares spaces with other users of your server, and it has teams.
• It gives scoped access to scripts and AI agents, so they do not need a broad key.

Who it is for

• A person, a family or a small team that wants to run its own server.
• A developer who wants secrets for scripts, CI jobs and AI agents with a short, limited key.
• A person who wants to choose, for each folder, between ease of use and a server that cannot read the data.

One server is one organisation. There is no hosted service and no multi-tenant mode.

What Lasbolt is not

• It is not a hosted service. You must run lasboltd yourself.
• It does not protect server-readable data from the operator of the server. The operator can read it. Use an E2E folder for data that the operator must not read. See Security.
• It does not yet have a release, signed builds, SSO, SCIM, attachments or passkeys.
• It is not audited by a third party.

Where to go next