SecuFocus
PasswordsGetting started & analysis

Psono: a team vault, encrypted before the server

Psono is an open-source password manager for teams, self-hosted or as a service. The stated encryption happens in the client, before upload.

Before you get started

What to expect

Psono presents itself as an open-source manager for companies, self-hosted or offered as a service. The site says vault data is encrypted in the client before it is stored. This is not a turnkey family vault: it needs a server, accounts and someone who maintains the whole system.

Useful when several people share access

Psono is aimed at teams and organisations. Encrypted sharing and hosting on your own machines make sense if you do not want an organisation’s secrets in a consumer vault. For one person, running a server is often heavier than the use.

The site describes clients for macOS, Windows, Linux, iOS, Android and the Chrome, Firefox and Edge browsers. The sync it describes goes through the server you operate, or through the project’s hosted offer. Those two do not give the same control.

Encrypted in the client, not magically out of reach

Psono says vault data is encrypted on the client before it is sent, then stored encrypted and decrypted by the client in use. A server administrator then sees the infrastructure, not the vault contents, if that description holds. They do see who signs in, and they can interrupt the service.

The code is presented as auditable. Self-hosting gives you the server. It also gives you updates, backups and admin accounts. An encrypted vault on a forgotten server is not an available vault.

Do not confuse the public product with a private deployment

This page is about the product published at psono.com. It does not describe a particular deployment, or a vault already in service somewhere. Editions, support and availability commitments are on the site, not in a summary.

Before a team trial, create two test accounts, share a secret, remove access, and check that the other person no longer sees it. That scenario matters more than a screenshot.

From the provider

Psono

Downloads, compatibility and current terms.

Official website

Check and explore

Sources for this article

Numbers connect each reference to the passages that use it. Dates show when the documentation was consulted.

This article draws on the sources above. The exercises are for you to try on your devices; SecuFocus does not present them as tests carried out by its editorial team. Interfaces and features can change. Method and corrections.

Cite this article

Keep this reference with the article when you save or share it.