On-premise solution with double encryption and certified development processes for maximum protection of corporate data. Zero‑knowledge architecture ensures your passwords never leave your infrastructure.
Trusted by top teams:
Developed in Europe, ensuring full GDPR compliance and data sovereignty
All development and infrastructure practices meet the highest security standards
Chosen by government agencies and highly regulated organizations across Europe
On‑premise deployment means your passwords never leave your infrastructure
Independent research shows 30% savings compared to competitors
Get secrets for deployment without storing them in CI/CD system environment variables. The CLI passwork automatically substitutes the actual secrets at runtime.
All API features →Get secrets programmatically in your Python apps. Library handles auth, encryption and token caching.
All API features →Use Passwork CLI image to deliver secrets into containers. Secrets are never stored in images or logs.
All API features →Create Kubernetes secrets from Passwork automatically and integrate with GitOps workflows.
All API features →
User management
pipelines:
default:
- step:
name: Deploy with Passwork credentials
image: passwork/passwork-cli:latest
script:
- passwork-cli exec --password-id 'deploy_credentials' -- ./deploy.sh
environment:
- PASSWORK_HOST=https://your-passwork.domain
- PASSWORK_TOKEN=$PASSWORK_TOKEN
- PASSWORK_MASTER_KEY=$PASSWORK_MASTER_KEY
from passwork_client import PassworkClient
# Client initialization
passwork = PassworkClient("https://your-passwork.domain")
passwork.set_tokens("your_access_token", "your_refresh_token")
passwork.set_master_key("your_master_key")
# Getting secrets
database_item = passwork.get_item(item_id=PASSWORD_ID)
database_password = database_item['password']
# Using in application
db_connection = connect_to_database(
host="prod-db.company.com",
password=database_password
)
# Running container with access to secrets
docker run --rm \
-e PASSWORK_HOST=https://your-passwork.domain \
-e PASSWORK_TOKEN=your_access_token \
-e PASSWORK_MASTER_KEY=your_master_key \
passwork/passwork-cli:latest \
exec --folder-id FOLDER_ID --tags "production" -- python app.py
# Or in docker-compose
services:
app:
image: passwork/passwork-cli:latest
command: exec --folder-id ${FOLDER_ID} --tags "production" -- ./start-app.sh
environment:
- PASSWORK_HOST=https://your-passwork.domain
- PASSWORK_TOKEN=${PASSWORK_TOKEN}
- PASSWORK_MASTER_KEY=${PASSWORK_MASTER_KEY}
# Via YAML manifest
passwork-cli exec --folder-id FOLDER_ID --tags "production" -- sh -c "
cat <<EOF | kubectl apply -f -
apiVersion: v1
kind: Secret
metadata:
name: app-production-config
namespace: production
type: Opaque
stringData:
database-url: \"postgresql://\$DB_USERNAME:\$DB_PASSWORD@\$DB_HOST:5432/app\"
redis-url: \"redis://:\$REDIS_PASSWORD@redis:6379\"
api-key: \"\$API_KEY\"
webhook-secret: \"\$WEBHOOK_SECRET\"
EOF"
Passwork offers intuitive security: teams scale from 100 to 600 users — no training or onboarding required. Thoughtful UX makes security seamless, so your team can focus on work, not passwords.
Passwork grew from an internal tool to a trusted solution for thousands — from 10 to 30 000+ users. Flexible, scalable, and easy to adapt to any workflow or security needs.
Passwork is ISO 27001 certified, rigorously tested by experts, and meets the highest security standards. It’s trusted by major organizations across Europe and is available as a fully isolated on‑premise solution.
Passwork delivers up to 30% cost savings compared to competitors, offering industry‑leading TCO with zero compromise on security. Multi‑year plans unlock even greater value — without vendor lock‑in.
A partnership‑first approach: no pressure, no hassle — just genuine support, and a team that treats you like a true partner, from your first demo to long‑term success.
OWASP training and threat modeling in every development team
Static & dynamic analysis, SCA, IaC scanners integrated into every build
No direct pushes to main branch, mandatory security code review
Annual penetration testing and security audits by independent experts
Best software to password management on premise. We chose it after checking various solutions. The possibility of installing it on our systems weighed heavily on the choice. The use is simple and …
I was looking for an on premise solution to store and manage our passwords. Multiuser with different roles and rights was a must, LDAP integration a nice add on. Passwork ticked all the boxes. They were …
Very easy and secure Passwork Manager. Easy sharing functionalities. Good LDAP integration, TOTP and Multifactor Authentication Options.
The results: Increasing operational efficiency for cross‑border teams
Read full case study →Essential features for small and medium businesses to support secure growth
Advanced capabilities for complex security and management needs in large organizations
Join thousands of IT professionals who trust Passwork to manage their passwords securely. Start your free trial today or get a personalized quote.
Essential features for small and medium businesses to support secure growth
Advanced capabilities for complex security and management needs in large organizations
Join thousands of IT professionals who trust Passwork to manage their passwords securely. Start your free trial today or get a personalized quote.
Passwork offers seamless integration with enterprise authentication systems, including Active Directory, Azure AD, LDAP, and SAML SSO. This ensures automated synchronization of user accounts, groups, and permissions, aligning with your organization’s existing structure and security policies.
This eliminates duplicate user management efforts while maintaining existing authentication workflows and security protocols.
Passwork offers flexible deployment options designed for enterprise environments. Whether you prefer rapid installation or customized setups, Passwork adapts to your infrastructure needs.
Passwork’s architecture is designed to minimize resource usage while providing robust scalability and reliability.
Passwork provides IT administrators with advanced tools for centralized management. These features ensure precise control over user access, permissions, and security policies.
These tools empower IT teams to maintain security compliance, enforce policies, and monitor user behavior effectively.
Passwork ensures top-tier security through advanced encryption and compliance measures. Its self-hosted architecture guarantees complete data sovereignty.
These measures ensure compliance with global standards and protect sensitive credentials against unauthorized access.
Passwork’s MongoDB-based architecture provides enterprise-grade backup and disaster recovery capabilities to safeguard your data.
Example: A deployment with 1,000 users and 5,000 passwords generates a 10GB database, but backup archives require only 0.5GB, making it practical to maintain multiple copies.
Passwork’s architecture is designed to scale horizontally, ensuring consistent performance as your user base grows.
Passwork handles increased load seamlessly, ensuring reliable performance for enterprises of any size.
Passwork’s self-hosted model delivers predictable costs and long-term savings compared to subscription-based cloud solutions.
Passwork’s licensing model allows enterprises to plan their budgets effectively without hidden fees.
Passwork simplifies migration with comprehensive tools and support, ensuring minimal disruption during the transition.
Passwork ensures business continuity and data integrity throughout the migration process.
Make sure to check your firewall settings and your spam folder as the message contains links. If you have not received the instructions, please contact us by [email protected]
Please click the button below to change the language
Switch to English
No credit card required
