sysPass is a self-hosted, open-source web password manager for business and personal use.
The original sysPass was created by Rubén Domínguez (@nuxsmin), who released the last upstream version (3.2.11) in July 2022. In May 2026, he confirmed he no longer had the time to keep evolving it (nuxsmin/sysPass#1954) and called for someone to fork the application in order to continue its development.
This repository is that fork. Started by OpusProjects in June 2026, picking up @nuxsmin's own planned hexagonal-architecture rework as the new baseline, built on PHP 8, Symfony, PHP-DI, MariaDB, Docker, PHPUnit, and a full REST API. All original copyright and the GNU GPLv3 license are retained.
- AES-256 encryption: CTR mode, all passwords encrypted at rest
- RSA key exchange: passwords leave the browser already encrypted
- Two-factor authentication: TOTP-based 2FA via the separate
syspass/plugin-authenticatorplugin - HTML5 / Ajax UI: single-page interface, no full-page reloads
- Access control: users, groups and profiles with up to 29 access levels
- Authentication backends: local, OpenLDAP and Active Directory
- Rich account model: tags, custom fields, public links, private accounts, favorites and history
- Notifications & audit log: activity alerts by email and in-app, plus a full event log
- Multilanguage: internationalised UI
- REST API: full programmatic access
| Document | What it covers |
|---|---|
| API | REST API reference, authentication, and Swagger UI (/api/docs/ on a live instance) |
| Architecture | Hexagonal layer map, request lifecycle, DI container, and dependency rules |
| CLI | Command-line tool (bin/cli.php): commands, arguments, options, and environment variables |
| Configuration | Environment variables, config.xml, every setting by area, and the defaults worth knowing |
| GitHub | Repository configuration: branch protection, CI jobs, Dependabot, releases, and workflow |
| Install | Requirements and installation (Docker and manual, multi-distro) |
| LDAP | Authenticating against a directory: the bind sequence, filters, and group membership |
| Permissions | Profile permissions, per-account access, private accounts, and how they combine |
| Security | How account passwords and the master password are protected, and the trust boundary |
| Testing | Running the test suites, test layout, environment requirements, and writing new tests |
| Upgrade | Upgrading an existing installation: what triggers it, the migrations, and what to do first |
Contributions are welcome: CONTRIBUTING.md covers dev setup, PR workflow, coding conventions, and tests.
Security issues: see SECURITY.md for private reporting.