aliasvault is a free, open source browsers & extensions project written in TypeScript and released under AGPL-3.0. It has 3,124 GitHub stars, 107 forks and 179 open issues, and was last pushed 7 hours ago. On this registry it ranks #52 of 65 tracked projects in Browsers & Extensions, with 5 head-to-head comparisons available. It gained 7 stars over the last 3 tracked days.

What is aliasvault?

What it is

AliasVault is a privacy-first password manager and email alias manager. It is an open-source TypeScript project, released under AGPL-3.0, and designed to be self-hosted. It lives in the Productivity & Utilities and Browsers & Extensions ecosystem.

It addresses credential reuse and online tracking by helping users create unique identities, strong passwords, and random email aliases for every website. The README describes the data as fully end-to-end encrypted, with a built-in email server and zero third-party dependencies. The stated goal is to give users control over digital privacy while keeping the server from seeing unencrypted data.

Key capabilities

  • Creates unique identities, strong passwords, and random email aliases for every website.
  • Encrypts vault contents and all received emails end-to-end, and keeps the master password on the user device.
  • Uses a zero-knowledge architecture, so the server never has access to unencrypted data.
  • Includes a built-in email server and states zero third-party dependencies.
  • Provides browser extensions for Chrome, Firefox, Edge, and Safari, plus a responsive web app.
  • Security architecture uses Argon2id and SRP, according to project topics.
  • Supports self-hosting through Docker, with an install script or Docker Compose.

Who uses it and how

  • Individuals can use the hosted version at app.aliasvault.com to manage passwords and aliases from the web, browser extensions, and Safari.
  • Self-hosters can deploy AliasVault on a 64-bit Linux server with 1 vCPU, 1 GB RAM, 16 GB disk, and Docker 20.10 or newer.
  • VPS or cloud users can run the install script, which creates the .env file, pulls Docker images, starts containers, and provides automatic SSL.
  • Homelab or NAS users can use Docker Compose with manual setup and existing SSL infrastructure.
  • Users can create a separate identity, password, and email alias for each website, then use the vault to keep those credentials organized.

Getting started

The README lists a hosted option at app.aliasvault.com and two Docker-based self-hosting methods: an install script for managed automatic SSL, or Docker Compose for manual setup with existing SSL infrastructure. The install script downloads from GitHub releases, creates the .env file, pulls images, and starts containers.

When to use it — and when not to

AliasVault is useful when a user wants a self-hosted, end-to-end encrypted password and alias system, and when they can operate Docker, storage, SSL, and the built-in email server. The README positions it as an alternative to traditional closed-source password managers, but it does not name a paid product or provide migration details. The project is two years old and lists 179 open issues, so teams should assess maintenance capacity and self-hosting burden before adoption.

project readme (upstream, from github) — read inline

AliasVault AliasVault

AliasVault is a privacy-first password and email alias manager. Create unique identities, strong passwords, and random email aliases for every website you use. Fully end-to-end encrypted, with a built-in email server and zero third-party dependencies.

E2E Tests .NET E2E Tests (with Sharding) Discord

Try the cloud version 🔥 | Website | Documentation | Self-host instructions

⭐ Star us on GitHub, it motivates us a lot!

If you enjoy using AliasVault, please also consider leaving a review on our apps or browser extensions, and share it with your friends or colleagues. Your support helps others discover a privacy-first alternative to traditional & closed-source password managers.

About

Built on 15 years of experience, AliasVault is independent, open-source, self-hostable and community-driven. It’s the response to a web that tracks everything: a way to take back control of your digital privacy and help you stay secure online.

– Leendert de Borst (@lanedirt), Creator of AliasVault

Screenshots

Responsive web app Browser extensions
Responsive web app Browser extensions
Native iOS & Android apps & much more
Native iOS & Android Apps Lots of features

Cloud-hosted

Use the official cloud version of AliasVault at app.aliasvault.com. This fully supported platform is always up to date with our latest release.

AliasVault is available on:

Download on the App Store Get it on Google Play Get it on F-Droid Get it on F-Droid

Self-hosting

[!NOTE] Requirements: 1 vCPU, 1GB RAM, 16GB disk, Docker ≥ 20.10, 64-bit Linux

AliasVault can be self-hosted on your own servers using two different installation methods. Both use Docker, but they differ in how much is automated versus how much you manage yourself.

  • Option 1: Install Script - Managed solution with automatic SSL (recommended for VPS/cloud)

  • Option 2: Docker Compose - Single container with manual setup for use with existing SSL infrastructure (NAS, homelab)

Quick Start (Install Script)

# Download and run install script
curl -L -o install.sh https://github.com/aliasvault/aliasvault/releases/latest/download/install.sh

# Make install script executable and run it. This will create the .env file, pull the Docker images, and start the AliasVault containers.
chmod +x install.sh

./install.sh install

For other installation methods and more detailed steps, please read the full installation guide in the official docs.

Documentation

For more information about the installation process, manual setup instructions and other topics, please see the official documentation website:

Security Architecture

AliasVault takes security seriously and implements various measures to protect your data:

  • All sensitive user data is encrypted end-to-end using industry-standard encryption algorithms. This includes the complete vault contents and all received emails.
  • Your master password never leaves your device.
  • Zero-knowledge architecture ensures the server never has access to your unencrypted data

For detailed information about our encryption implementation and security architecture, see the following documents:

Features & Roadmap

AliasVault is under active development, with a strong focus on usability, security, and cross-platform support. The main focus is on ensuring robust usability for everyday tasks, including comprehensive autofill capabilities across all platforms.

🛠️ Incremental releases are published every 2–3 weeks, with a strong emphasis on real-world testing and user feedback. During this phase, AliasVault can safely be used in production as it maintains strict data integrity and automatic migration guarantees.

Core features that are being worked on:

  • Core password & alias management
  • Full end-to-end encryption
  • Built-in email server for aliases
  • Easy self-hosted installer
  • Browser extensions with autofill feature (Chrome, Firefox, Edge, Safari, Brave)
  • Built-in TOTP authenticator
  • Import passwords from traditional password managers
  • iOS native app
  • Android native app
  • Editing in browser extension
  • Multi-language support across all client applications
  • Passkeys
  • Data model improvements (more flexible aliases and credential types, folder support, offline mode etc.)
  • Usability improvements (save credentials when browsing, more credential types, mobile app feature-parity with web app)
  • Support for FIDO2/WebAuthn hardware keys
  • Adding support for family/team sharing (organization features)

👉 View the full AliasVault roadmap here

Got feedback or ideas?

Feel free to open an issue or discussion on G

readme truncated — read the full docs on github

Frequently asked questions

Is aliasvault free to use?

aliasvault is open source under the AGPL-3.0 licence. There is no licence fee and no seat count — you can self-host it or, where the project offers one, pay a vendor for a managed version instead.

What does aliasvault do?

Privacy-first password manager with built-in email aliasing. Fully encrypted and self-hostable.

What is aliasvault written in?

aliasvault is primarily written in TypeScript. Its source is publicly available at https://github.com/aliasvault/aliasvault, and it has 3,124 GitHub stars.