Download the PHP package nilsteampassnet/teampass without Composer
On this page you can find all versions of the php package nilsteampassnet/teampass. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Download nilsteampassnet/teampass
More information about nilsteampassnet/teampass
Files in nilsteampassnet/teampass
Package teampass
Short Description teampass
License GPL-3.0-only GPL-2.0-only AGPL-3.0-only LGPL-2.1-only LGPL-3.0-or-later LGPL-3.0-only GPL-3.0-or-later GPL-3.0-only LGPL-2.1-or-later
Homepage https://www.teampass.net
Informations about the package teampass
**Your secrets never leave your infrastructure.** **π [teampass.net](https://teampass.net)** Β· **π [Documentation](https://documentation.teampass.net)** Β· **π¬ [Discussions](https://github.com/nilsteampassnet/TeamPass/discussions)** Β· **π³ [Docker Hub](https://hub.docker.com/r/teampass/teampass)**
[](https://github.com/nilsteampassnet/TeamPass/releases/latest) [](LICENSE.md) [](https://www.php.net/) [](https://hub.docker.com/r/teampass/teampass) [](https://github.com/nilsteampassnet/TeamPass) [](https://github.com/nilsteampassnet/TeamPass/actions/workflows/codeql.yml) [](https://github.com/nilsteampassnet/TeamPass/actions/workflows/docker-publish.yml) [](https://github.com/nilsteampassnet/TeamPass/security/advisories) [](https://github.com/sponsors/nilsteampassnet)
Contents
- About
- Who it's for
- Security
- Features
- Get started
- Documentation
- Languages
- Community
- Support Teampass
- License
About
Teampass is an open-source credential vault you run yourself. No account to create, no company behind the curtain holding your data β just a PHP/MySQL application on your own server, with folder-level access control, per-user encryption keys and a full audit trail.
It has been built and maintained since 2009, driven by what real teams actually run into: who should see which credential, how to prove it to an auditor, and how to stop passwords living in chat threads and spreadsheets.
πΈ More screenshots
**Items and secrets** **Folders and roles** **Authentication and MFA** **Encryption keys** **Search, export, one-time view** **Background tasks**
Who it's for
| ### π Individuals & Homelab ***Own your vault, literally.*** - Runs on a Raspberry Pi or a β¬5 VPS - Personal folders encrypted with your own key - Import from Bitwarden, LastPass, 1Password or KeePassXC - Free forever, no sign-up required | ### π₯ Teams & SMB ***Stop sharing passwords in chat.*** - Folders and roles instead of a shared document - A record of who accessed what, and when - Secure Send for clients and contractors - Browser extension for day-to-day autofill | ### ποΈ Enterprise & Regulated ***Prove your access controls, don't just claim them.*** - Access recertification campaigns with immutable decisions - Compliance reports and evidence export - LDAP/AD with nested groups, OAuth2 SSO - Data classification and ownership |
Security
Encryption you can describe to an auditor
Secrets are encrypted with AES-256-GCM using random nonces and per-secret salts, under 256-bit object keys. The private key that unlocks them is derived from your password with PBKDF2-SHA256 at 600 000 iterations.
- Authenticated encryption β tampering is detected, not silently decrypted - Per-user key distribution β every user holds their own RSA-wrapped copy of each object key, so removing an account actually revokes access instead of just hiding a button
- Lazy migration β format upgrades happen on access, with no maintenance window
Transparency over silence
A password manager that reports no vulnerabilities is not a password manager that has none.
Findings are triaged, fixed and published as GitHub Security Advisories with CVE identifiers.
- π Security policy and how to report
- π Published advisories
- π‘οΈ Security hardening guide
Found a vulnerability? Please report it privately through GitHub Security Advisories β never in a public issue.
Features
ποΈ Folder and role access control
- [Folders](https://documentation.teampass.net/#/features/folders) β unlimited nesting, per-folder password complexity rules - [Roles](https://documentation.teampass.net/#/features/roles) β grant access by role, not user by user - [Rights](https://documentation.teampass.net/#/features/rights) β read, write, no-edit, no-delete, resolved least-permissive-wins - [Users](https://documentation.teampass.net/#/features/users) β per-user overrides on top of roles - Personal folders that nobody else can read, including administrators
π Authenticated encryption
- [Encryption model](https://documentation.teampass.net/#/install/encryption) β how keys are derived, wrapped and distributed - [Encryption improvements](https://documentation.teampass.net/#/install/encryption-improvements) β the AES-256-GCM format and its lazy migration - [Key management](https://documentation.teampass.net/#/features/keys) β regeneration, recovery, per-user key repair
π Security posture
- Security Posture Dashboard scoring weak, reused and breached credentials - [Breach detection](https://documentation.teampass.net/#/features/breach-detection) β Have I Been Pwned checks without sending your passwords - [Password renewal](https://documentation.teampass.net/#/features/renewal) β expiry policies and reminders - [Micro-learning](https://documentation.teampass.net/#/features/micro-learning) β in-app nudges instead of a yearly slideshow
ποΈ Governance and audit
- [Access reviews](https://documentation.teampass.net/#/manage/access-reviews) β recertification campaigns with immutable decisions - [Compliance reports](https://documentation.teampass.net/#/manage/compliance-reports) β evidence you can hand to an auditor - [Rotation tracking](https://documentation.teampass.net/#/manage/rotation-tracking) β what was rotated, when, by whom - [Leaver risk](https://documentation.teampass.net/#/features/leaver-risk) β what a departing user could still know - [Data classification](https://documentation.teampass.net/#/features/classification) β ownership and sensitivity labels
πͺͺ Identity integration
- [Authentication](https://documentation.teampass.net/#/features/authentication) β local, LDAP/AD with nested groups, OAuth2 / SSO - Multi-factor: TOTP (Google Authenticator), Duo Security, YubiKey, AGSES - [Network ACL](https://documentation.teampass.net/#/manage/network-acl) β restrict access by IP range - [Session management](https://documentation.teampass.net/#/misc/session-management) β timeouts, concurrent sessions, Redis-backed storage
π€ Automation
- [REST API](https://documentation.teampass.net/#/api/api-basic) β JWT-authenticated, OpenAPI 3.1 spec, Bash and PowerShell clients - [Browser extension](https://documentation.teampass.net/#/misc/extension) β autofill, capture, one-click auto-configuration - [Background tasks](https://documentation.teampass.net/#/manage/tasks) β key distribution, notifications, maintenance - [Real-time collaboration](https://documentation.teampass.net/#/features/collaboration) β WebSocket sync and edition locks - [Backups](https://documentation.teampass.net/#/features/backups) β scheduled, encrypted database dumps
π¦ Migration in and out
- [Import](https://documentation.teampass.net/#/features/import) β Bitwarden, LastPass, 1Password, KeePassXC, CSV - [Export](https://documentation.teampass.net/#/features/export) β CSV, PDF, and a self-contained encrypted offline HTML vault - No lock-in: it is your database, on your server, under GPL-3.0
β‘ Daily productivity
- [Search](https://documentation.teampass.net/#/features/search) β across labels, descriptions, tags and custom fields - [Command palette](https://documentation.teampass.net/#/features/command-palette) β keyboard-first navigation - [Favourites](https://documentation.teampass.net/#/features/favourites) and quick access to recent items - [Custom fields](https://documentation.teampass.net/#/features/custom-fields) β individually encryptable, role-restricted - [Knowledge base](https://documentation.teampass.net/#/features/knowledge-base) and [notification center](https://documentation.teampass.net/#/features/notification-center) - One-time view links and Secure Send for sharing outside the vault
Get started
Requirements
| Database | MySQL 5.7+ or MariaDB 10.7+ |
| PHP | 8.2 or newer (tested against 8.3) |
| Required extensions | openssl mysqli mbstring bcmath iconv xml gd curl gmp β plus ldap for LDAP/AD |
| Recommended extensions | apcu (config cache) Β· opcache (performance) Β· redis (HA sessions) Β· pcntl + posix (WebSocket daemon) |
Teampass follows active PHP support. Running the latest stable PHP release is strongly recommended for both security and performance.
π³ Docker
Images are published to both registries:
- Docker Hub β
teampass/teampass - GitHub Container Registry β
ghcr.io/nilsteampassnet/teampass
π Migrating an existing install to Docker
π₯οΈ Bare metal (recommended for production)
Installing directly on a PHP/MySQL server gives the best performance and the most control over your environment.
- π Official installation guide
- π Upgrade guide
- π File permissions
- π₯ Video tutorial
Documentation
| π Full documentation | Install, features, administration |
| π Installation | Step-by-step first setup |
| π Upgrade | Moving between versions |
| π‘οΈ Security hardening | Production checklist |
| βοΈ Performance | PHP-FPM, caching, tuning |
| π REST API | Endpoints, JWT auth, clients |
| π§© Browser extension | Setup and usage |
| π©Ί Troubleshooting | When something goes wrong |
Languages
Teampass ships in 25 languages, translated by the community.
| English | French | German | Spanish | Italian |
| Portuguese | Portuguese (BR) | Dutch | Russian | Ukrainian |
| Polish | Czech | Hungarian | Romanian | Bulgarian |
| Greek | Turkish | Swedish | Norwegian | Estonian |
| Catalan | Chinese | Japanese | Vietnamese | πΈπ¦ Arabic (in progress) |
Translations are managed on POEditor β a few strings from you go a long way.
Community
Contributing
Contributions of any kind are very welcome. Fork the repo, make your changes, then open a pull request β see CODE_OF_CONDUCT.md for how we work together.
Reporting bugs
If something does not work as it should, raise a ticket. Please include the steps to reproduce, your server configuration, and the diagnostic report from Admin β Bug icon (bottom left).
Asking questions
Questions, deployment advice and ideas belong in Discussions rather than the issue tracker.
Contributors
Teampass is what it is thanks to these people.
Star history
Support Teampass
Teampass is free, GPL-3.0, and has been maintained by one person since 2009. There is no company behind it β which is exactly the point, and also why support matters.
What sponsorship funds
- Security work β triaging reports, fixing them, and publishing advisories with CVEs
- Releases β testing, upgrade paths, and keeping older installations able to move forward
- Documentation β the guides at documentation.teampass.net
- Translations β coordinating 25 languages
- Infrastructure β Docker images, CI, and the project websites
Become a sponsor
The goal is 100 monthly sponsors. Every tier helps, and small recurring amounts help most because they make the work predictable.
Sponsors
Huge thanks to everyone who sponsors this work β you keep Teampass free for everyone else.
Commercial support
Sponsorship funds the free server. The browser extension and professional services fund the roadmap.
| Pro Extension | Browser autofill, capture and phishing protection β from β¬49/year, 30-day trial |
| Services | Feature development, deployment assistance, priority handling β quoted per engagement |
License
Teampass is released under the GNU General Public License v3.0.
You are free to use, study, modify and redistribute it β including commercially β provided derivative works remain under the same license.
π Dependency license compliance report
**Built and maintained by [Nils LaumaillΓ©](mailto:[email protected]) since 2009.**
Copyright Β© 2009-2026 Nils LaumaillΓ©
[](https://github.com/vshymanskyy/StandWithUkraine/blob/main/docs/README.md)
All versions of teampass with dependencies
ext-mysqli Version >=5.1.0
ext-mbstring Version *
ext-openssl Version *
ext-bcmath Version *
ext-iconv Version *
ext-xml Version *
ext-gd Version *
teampassclasses/sessionmanager Version *
teampassclasses/superglobal Version *
teampassclasses/nestedtree Version *
ezimuel/php-secure-session Version *
teampassclasses/performchecks Version *
teampassclasses/encryption Version *
teampassclasses/language Version *
teampassclasses/ldapextra Version *
teampassclasses/passwordmanager Version *
teampassclasses/oauth2controller Version *
teampassclasses/configmanager Version *
teampassclasses/emailservice Version *
teampassclasses/folderservices Version *
teampassclasses/cryptomanager Version *
teampassclasses/passwordgeneratorservice Version *
teampassclasses/importformat Version *
illuminate/contracts Version ^10.32
illuminate/collections Version ^10.48
nesbot/carbon Version ^2.71
directorytree/ldaprecord Version ^3.0
voku/anti-xss Version ^4.1
tiben/crontab-manager Version ^1.4
sergeytsalkov/meekrodb Version ^2.5
owasp/csrf-protector-php Version ^1.0
phpmailer/phpmailer Version ^6.8
moxiecode/plupload Version ^3.1
tecnickcom/tcpdf Version ^6.6
paragonie/random_compat Version ^9.99
elegantweb/sanitizer Version ^2.1
defuse/php-encryption Version ^2.4
dittertp/gibberish-aes-php Version ^4.0
firebase/php-jwt Version ^7.0
neitanod/forceutf8 Version ^2.0
goodby/csv Version ^1.3
robthree/twofactorauth Version ~2.1
hackzilla/password-generator Version ^1.6
peppeocchi/php-cron-scheduler Version ^4.0
duosecurity/duo_universal_php Version ^1.0
spomky-labs/otphp Version ^11.2
symfony/http-foundation Version ^6.4
symfony/password-hasher Version ^6.4
symfony/finder Version ^6.3
symfony/process Version ^6.3
symfony/contracts Version ^3.4
bjeavons/zxcvbn-php Version ^1.0
thenetworg/oauth2-azure Version ^2.2
symfony/console Version ^6.4
composer/composer Version ^2.7
phpseclib/phpseclib Version ^3.0
cboden/ratchet Version ^0.4.4
react/event-loop Version ^1.6
ezyang/htmlpurifier Version ^4.17