Passbolt

Application512MB+ RAM

Open-source password manager for teams

Download Server Compass View Documentation

passwordsecurityteam

Deploy Passbolt in 3 Steps

Connect Your VPS

Add your server credentials to Server Compass

Select Passbolt

Choose from our template library

Deploy & Configure

Fill in settings and click Deploy

No Docker knowledge required

Do It Yourself

Deploy Passbolt via Command Line

Prefer the command line? Follow this step-by-step guide to deploy Passbolt manually on your VPS.

Access Your VPS via Terminal

Open a terminal session and log into your VPS. Replace the placeholder with your actual IP.

terminal

# Connect via SSH
ssh root@your-vps-ip

# Alternative with key file
ssh -i /path/to/key root@your-vps-ip

First time? Make sure Docker is installed on your VPS. Run: curl -fsSL https://get.docker.com | sh

Set Up Project Folder

Create a workspace for your deployment files.

terminal

# Create and navigate to project directory
mkdir -p ~/apps/passbolt
cd ~/apps/passbolt

Create the Compose File

Configure your containers with this Docker Compose setup:

docker-compose.yml

services:
  passbolt:
    image: passbolt/passbolt:latest-ce
    ports:
      - "443:443"
      - "80:80"
    environment:
      - DATASOURCES_DEFAULT_HOST=db
      - DATASOURCES_DEFAULT_DATABASE=passbolt
      - DATASOURCES_DEFAULT_USERNAME=passbolt
      - DATASOURCES_DEFAULT_PASSWORD=<your-db-password>
      - APP_FULL_BASE_URL=<your-app-url>
    volumes:
      - passbolt_gpg:/etc/passbolt/gpg
      - passbolt_jwt:/etc/passbolt/jwt
    restart: unless-stopped
    depends_on:
      db:
        condition: service_healthy

  db:
    image: mariadb:11
    environment:
      - MARIADB_ROOT_PASSWORD=<your-db-root-password>
      - MARIADB_DATABASE=passbolt
      - MARIADB_USER=passbolt
      - MARIADB_PASSWORD=<your-db-password>
    volumes:
      - mariadb_data:/var/lib/mysql
    restart: unless-stopped
    healthcheck:
      test: ["CMD-SHELL", "healthcheck.sh --connect --innodb_initialized"]
      interval: 10s
      timeout: 5s
      retries: 5

volumes:
  passbolt_gpg:
  passbolt_jwt:
  mariadb_data:

Configuration Variables

PORTHTTPS port(default: 443)

HTTP_PORTHTTP port(default: 80)

APP_URLApp URL

DB_PASSWORDDB password

DB_ROOT_PASSWORDRoot password

Deploy Your Stack

Spin up the containers and verify the deployment.

terminal

# Start all services
docker compose up -d

# List running containers
docker compose ps

# Watch the logs
docker compose logs -f

Update Firewall Settings

Allow incoming traffic on the application port.

terminal

# Allow the application port through firewall
sudo ufw allow 443/tcp
sudo ufw reload

# Access your app at:
# http://your-server-ip:443

Skip the Terminal

Skip the terminal. Use Server Compass instead.

Deploy Passbolt with a beautiful UI instead. No SSH, no YAML editing, no terminal commands. Just click, configure, and deploy in under 3 minutes.

Beautiful interface
One-click deploys
Let's Encrypt SSL
Zero downtime
Container monitoring
Easy rollbacks

Download Server Compass$29 one-time • Lifetime license

After Deployment

After deploying Passbolt with Server Compass, complete these steps to finish setup

Create first admin user

Install browser extension

Invite team members

Need help? Check out our documentation for detailed guides.

Passbolt FAQ

Common questions about self-hosting Passbolt

How do I deploy Passbolt with Server Compass?

Simply download Server Compass, connect to your VPS, and select Passbolt from the templates list. Fill in the required configuration and click Deploy. The entire process takes under 3 minutes.

What are the system requirements for Passbolt?

Passbolt requires a minimum of 512MB RAM. We recommend a VPS with at least 1024MB RAM for optimal performance. Any modern Linux server with Docker support will work.

Can I migrate my existing Passbolt data?

Yes! Server Compass provides volume mapping that allows you to import existing data. You can also use standard Passbolt backup and restore procedures.

How do I update Passbolt to the latest version?

Server Compass makes updates easy. Simply click the Update button in your deployment dashboard, and the latest Passbolt image will be pulled and deployed with zero downtime.

Is Passbolt free to self-host?

Passbolt is open-source software. You only pay for your VPS hosting (typically $5-20/month) and optionally Server Compass ($29 one-time). No subscription fees or per-seat pricing.