AliasVault combines a zero-knowledge password manager with a built-in email alias server in a single self-hosted package. Credentials and aliases are end-to-end encrypted before they leave your browser, so the server never sees plaintext vault data. The alias server lets you generate per-site email addresses that forward to your real inbox, adding identity compartmentalization alongside password management.
AliasVault
aliasvault.net
The combination of a password vault and email aliasing in one self-hosted install is a genuinely useful pairing: you get credential isolation and identity isolation together, without paying for separate services like Bitwarden plus SimpleLogin. Zero-knowledge E2E encryption means self-hosting does not require you to fully trust your own server security for vault confidentiality. The honest catch is maturity: AliasVault is actively developed but newer than established alternatives, and the AGPLv3 license requires source disclosure if you modify and host it publicly. For privacy-focused self-hosters comfortable running their own infrastructure, it is one of the more complete solutions available.
Listed in
AliasVault alternatives
Free to use, even commercially. Changes must be published under the same license, and running a modified version as a network service counts as distributing it.
Permits
- Commercial use
- Modification
- Distribution
- Patent use
- Private use
Requires
- Disclose source
- Network use is distribution
- Same license
- State changes
- License and copyright notice
Does not provide
- Liability cover
- Warranty
Why it matters: The network clause is the point. Anyone who runs a modified version as a hosted service has to publish those changes, so the code handling your data stays inspectable. This is why privacy-first projects reach for AGPL.
Plain-language summary of the project's license, not legal advice. Read the full text for the exact terms.