aliasvault: Manage Passwords and Email Aliases Privately

Overview

AliasVault combines password and identity management with email aliasing. Instead of reusing an email address across websites, users can create aliases and manage them alongside credentials in an end-to-end encrypted vault.

It is aimed at people who want a privacy-focused alternative to conventional password managers, including those who prefer to run the service on their own server. Web, mobile, and browser-extension clients support use across devices.

Key Features

• Store passwords and other credentials in an end-to-end encrypted vault.
• Create and manage email aliases through a built-in email server.
• Use browser extensions with autofill on supported browsers.
• Generate and store TOTP authentication codes.
• Import passwords from traditional password managers.
• Use native iOS and Android apps, as well as the web app.
• Self-host with Docker using an install script or Docker Compose.
• Manage passkeys and organize data with folders and flexible credential types.

Use Cases

• Individuals who want unique email addresses for sign-ups while keeping credentials in one vault.
• Privacy-conscious users who want an encrypted password manager with an alias service in the same product.
• Homelab users who can operate Docker services and want to self-host their password and email-alias management.
• People switching from another password manager who want to import existing passwords and use browser autofill.

Getting Started

Try the hosted web app at app.aliasvault.com, or install the self-hosted version with Docker:

curl -L -o install.sh https://github.com/aliasvault/aliasvault/releases/latest/download/install.sh
chmod +x install.sh
./install.sh install

See the README and installation guide for setup details and other installation options.

Considerations

• Self-hosting requires Docker 20.10 or later, 64-bit Linux, and the README lists minimum requirements of 1 vCPU, 1 GB RAM, and 16 GB disk.
• The project is actively developed, and its README describes the roadmap as including usability work, hardware-key support, and family or team sharing.
• The AGPL-3.0 license has obligations relevant to modified software made available over a network. Review the license before incorporating or hosting modified versions.
• The README describes a zero-knowledge design, but this project analysis does not independently audit its security implementation.