Onetime Secret is a web service with an open-source repository and an API that generates one-time-view, encrypted links for secrets. One-sentence value: Onetime Secret provides single-use, encrypted links to share sensitive text or credentials that auto-destroy after being read, avoiding persistent storage in chat, email, or logs. It targets individuals

Open-source secrets, certificates, and privileged-access platform that centralizes credentials, short-lived keys, PKI, and audit workflows for teams. It centralizes and secures API keys, environment variables, database credentials, TLS certificates, and SSH access with RBAC, rotation, and audit to reduce secret sprawl and hard-to-rotate credentials. It is suited for individual developers,

Vaultwarden is an unofficial, lightweight Rust implementation of the Bitwarden server API for self-hosted password management. It provides a Bitwarden-compatible server so desktop, mobile, and browser clients can use a self-hosted backend. The project focuses on low resource usage, small footprints, and simple single-node deployments. It targets personal makers, small

Logto is an open-source, developer-first Identity & Access Management (IAM) platform that handles authentication (AuthN) and authorization (AuthZ). It implements industry standards (OAuth 2.0, OpenID Connect, SAML), provides SDKs for many stacks, and can run as a managed cloud service or be self-hosted from the OSS codebase. This review

Passbolt is an open‑source, team‑focused password manager designed to be self‑hosted and to keep secrets encrypted end‑to‑end using OpenPGP. It stores and shares credentials with fine‑grained access controls, audit logs, browser extensions, native clients and automation APIs to support collaborative workflows in technical teams.

Keycloak is an open‑source identity and access management server that provides SSO, standards‑based authentication (OAuth2/OIDC, SAML), user federation (LDAP/AD), identity brokering, MFA and fine‑grained authorization. It exposes an admin console, user account UI, SDKs and extension points so you can centralize and standardize auth for

SuperTokens is an open-source authentication and session-management platform that you can run on your own infrastructure or use via a managed cloud offering. It provides a self-hostable core service, opinionated "recipes" for common auth flows (email/password, social OAuth, passwordless), frontend and backend SDKs, and secure-by-default session handling.

PrivateBin is a minimalist, self-hosted pastebin that encrypts data in the browser, so the server stores only ciphertext. It is designed for short-lived, secure sharing of text, code snippets, and small files without exposing contents to the server operator. It suits developers, security teams, journalists, and privacy-minded users who want

Authentik is an open-source, self-hosted identity provider designed for authentication, single sign-on (SSO), and granular access management across web applications and APIs. It is built for organizations that require strong user identity controls, particularly those who need flexible, centralized authentication for multiple internal or external services. This tool appeals to