Your company's passwords, locked in your own vault.
PAM-PASS runs on your server. Every password is encrypted in the browser before it is saved, so the server — and anyone who breaks into it — only ever holds ciphertext.
Installs on Ubuntu with one script · No card needed for the trial
The same password, seen from two sides.
Left is what you see after unlocking your vault. Right is the row PAM-PASS keeps in its database. Without your vault passphrase, the right side cannot be turned back into the left.
What you see
- Title
- Company GitHub
- Username
- devops@example.com
- Password
- Kp7m-Qx3t-Ru9e-Wa2z
- One-time code
- 284 913
- Shared with
- DevOps team (4 people)
What the server stores
- name_ct
- wcBMA8Xk2a9xQ1oBCAC4v0n…
- secret_ct
- 0sAFAQgAJgUCZx7…p3e0v
- key_epoch
- 3
- wrapped_key
- c1f09a2e77d4…(one per person)
- vault
- 7c3e9f02-4b1a-4c8e-…
This is also why nobody can reset your vault passphrase for you. Keep your recovery kit somewhere safe: it is the only spare key. The example values on this page are made up.
Everything a team needs to stop sharing passwords in chat.
Built for companies that want to own their data: one server, many teams, clear rules for who can open what.
A vault for every person and every team
Logins, notes, cards, identities, SSH keys, one-time codes and attachments up to 8 MB. Folders, tags, favourites, full history and a trash you can restore from.
Fills passwords for you, only on the right site
Browser extension for Chrome, Edge and Firefox. It refuses look-alike domains and forms that would send your password elsewhere.
Share without sending
Give a team access to a vault. Each person gets their own encrypted copy of the key; removing someone re-keys the vault.
Sign in safely
Authenticator app, passkeys and one-use recovery codes. Mandatory for owners and admins.
Bring your old passwords
Import from Bitwarden, 1Password, LastPass, KeePass, Chrome, Firefox and more — parsed in your browser.
Backups you can restore
Encrypted vault backups for users; full server backup and restore scripts for the operator.
An admin console that answers "who has access?"
Users, companies, roles, policies, access reviews, security reports and an audit log you can export. Reset a lost phone or password in two clicks — without ever seeing anyone's secrets.
Emergency access
Name a trusted colleague who can ask for your vault after a waiting period you can refuse.
Who can open your passwords?
A plain answer, because this is the question that matters.
| Action | You | Your team (when shared) | Your server admin | Veloxise | Someone who steals the database |
|---|---|---|---|---|---|
| Read a password in your vault | Yes | Only shared vaults | No | No | No |
| Reset your sign-in password or two-factor | Yes | No | Yes, audited | No | No |
| Recover a lost vault passphrase | With your recovery kit | No | No | No | No |
From empty server to first vault in an afternoon.
Copy and run the installer
On Ubuntu 24.04 or 26.04. It installs PHP, nginx, MySQL and HTTPS.
Finish setup in the browser
Setup code, database, e-mail and the first administrator.
Create your encryption key
Choose a vault passphrase and save the recovery kit offline.
Invite your team
By e-mail, or create accounts directly from the admin console.
sudo bash deployment.sh
# then open the address it prints and follow the setup wizard
Start free. Pay when the team grows.
Every plan is self-hosted and includes end-to-end encryption. Business is priced per user, billed yearly — in rupees or US dollars.
Community
For small teams trying PAM-PASS on their own server.
Free forever · up to 10 users · 1 company
- Personal and shared vaults
- Browser extension and autofill
- Two-factor and passkeys
- Import from other password managers
- Encrypted vault backup
Business
For companies that need control, reports and support.
Billed yearly · from 10 users
₹23,880 a year for 10 users$360 a year for 10 users
- Everything in Community
- Unlimited users and companies
- Admin console: users, roles, policies
- Audit log, reports and exports
- Access reviews and emergency access
- E-mail support, next business day
Enterprise
For larger rollouts across several servers or sites.
Yearly agreement · volume pricing from 250 users
- Everything in Business
- Several servers under one licence
- Installation and migration help
- Priority support with response times
- Staged upgrades with our engineers
Prices in Indian rupees exclude GST (18%).Prices in US dollars. Payment is offline — bank transfer or UPI (SWIFT for USD). 30-day trial, no card needed.
Move your team's passwords out of spreadsheets this week.
Try Business free for 30 days on your own server, or start with the free Community plan. Upgrade with a licence key when you need more — nothing to migrate.