PrivacyTools.io
AliasVault logo

AliasVault

aliasvault.net

AliasVault combines a zero-knowledge password manager with a built-in email alias server in a single self-hosted package. Credentials and aliases are end-to-end encrypted before they leave your browser, so the server never sees plaintext vault data. The alias server lets you generate per-site email addresses that forward to your real inbox, adding identity compartmentalization alongside password management.

Screenshot of the AliasVault website
Our take

The combination of a password vault and email aliasing in one self-hosted install is a genuinely useful pairing: you get credential isolation and identity isolation together, without paying for separate services like Bitwarden plus SimpleLogin. Zero-knowledge E2E encryption means self-hosting does not require you to fully trust your own server security for vault confidentiality. The honest catch is maturity: AliasVault is actively developed but newer than established alternatives, and the AGPLv3 license requires source disclosure if you modify and host it publicly. For privacy-focused self-hosters comfortable running their own infrastructure, it is one of the more complete solutions available.

GitHub at a glance
aliasvault/aliasvault
Stars
2,857
Last commit
today
healthy
License
AGPL-3.0
Latest release
0.29.6
3d ago

Listed in

AliasVault alternatives

AliasVault license, in plain English
AGPL-3.0
Strong copyleft · network

Free to use, even commercially. Changes must be published under the same license, and running a modified version as a network service counts as distributing it.

Permits

  • Commercial use
  • Modification
  • Distribution
  • Patent use
  • Private use

Requires

  • Disclose source
  • Network use is distribution
  • Same license
  • State changes
  • License and copyright notice

Does not provide

  • Liability cover
  • Warranty

Why it matters: The network clause is the point. Anyone who runs a modified version as a hosted service has to publish those changes, so the code handling your data stays inspectable. This is why privacy-first projects reach for AGPL.

Plain-language summary of the project's license, not legal advice. Read the full text for the exact terms.