A password manager you run yourself.
Veloxise Vault gives your company vaults, sharing, autofill and an admin console — on your own server, with encryption that happens before anything is saved.
Vaults for people and for teams
Every person gets a private vault. Teams share vaults with exactly the people who need them.
- Logins, secure notes, cards, identities and SSH keys
- One-time codes (TOTP) stored next to the login
- Attachments up to 8 MB, encrypted like everything else
- Folders, tags, favourites, item history and a restorable trash
Autofill that checks where it is
The browser extension for Chrome, Edge and Firefox fills a password only when the site matches the saved address exactly.
- Refuses look-alike domains
- Does not fill forms that send the password to another site
- Unlocks with your vault passphrase; locks itself again after a while
- Talks only to your own Veloxise Vault server
Sharing without copying secrets around
A shared vault has its own key. Each member receives a copy of that key encrypted for them — the server never sees the key itself.
- Share with groups or single people
- Removing someone re-keys the vault
- Every share and removal is logged
Sign-in that resists stolen passwords
Two-factor sign-in with an authenticator app or a passkey, plus one-use recovery codes. Owners and administrators must use it.
- Authenticator apps (TOTP) and passkeys
- Recovery codes shown once
- Repeated failed sign-ins are slowed down
- Security alerts when something unusual happens
An admin console for the whole company
Run one server for several companies or departments, each with its own members, roles and rules.
- Create accounts, disable them, reset sign-in and two-factor
- Roles: owner, admin, auditor, group manager, member
- Security policies, access reviews and reports
- A dashboard with the numbers that matter
An audit trail you can trust
Every important action is written to a chained log: each entry contains the fingerprint of the one before, so a removed or edited entry shows.
- Exportable for auditors
- Separate chains per company and for the server
- Readable labels, not just codes
Bring what you already have
Import from Bitwarden, 1Password, LastPass, KeePass, Chrome, Firefox and others. Files are read in your browser; plain passwords never travel to the server.
- Export again at any time — no lock-in
- Encrypted vault backups for every person
- Server backup and restore scripts for the operator
Also included
Emergency access
Name a trusted colleague who may request your vault. You can refuse during the waiting period.
Six languages
English, German, Spanish, French, Arabic and Traditional Chinese.
API tokens
Scoped tokens for scripts and integrations, revocable at any time.
One-script install
Ubuntu 24.04 or 26.04; a guided setup in the browser. Docker Compose is available too.
Desktop app and command line
Optional companions for people who prefer them. The web app and the extension cover everything.
Your data stays yours
No telemetry to us. Your server never needs to contact Veloxise to work.
See it on your own server.
The trial is the full Business plan for 30 days. When you buy, the same licence key simply continues.