About this extension

Passbolt is an open source password manager designed for collaboration. You can securely generate, store, manage and monitor your team credentials.

Get access to all of your logins and passwords from multiple browsers or even your mobile phone. Create strong random passwords, thanks to the fully customizable password generator, and share them instantly with your team.

Passbolt is built on top of an open API made for developers and agile teams. Passbolt is extensible and yet usable by everyone. No technical knowledge is required to use it.

This is why Passbolt is trusted by small businesses, as well as government offices, regulated industries, and privacy-conscious organizations:

Boost collaboration & productivity:
- Easily share one password, or a folder with a single user or a group of users;
- Use personal or shared tags to identify passwords and secrets;
- Give specific access rights to a user or group;
- Get detailed reporting on access & change history.

Security by design. Audited and certified:
- True end-to-end encryption;
- Interoperable cryptography based on OpenPGP;
- Full control your own encryption key;
- Access revocation that actually works;
- Regularly audited by independent auditors.

Made in Europe.  Privacy by default:
- Host it in our cloud, located in Europe;
- Or self-host it for full data ownership;
- No tracker, no strings attached.

Passbolt source code comes under an AGPL license (yes even the commercial version) and is publicly available. You are free to audit it, contribute to it, or redistribute it.

This add-on is required to use the software, in order to provide advanced security features as well as functionality such as password auto filling on web pages.

Get started now:
https://www.passbolt.com/cloud/signup

Check out the source code:
https://github.com/passbolt

Rate your experience

Report this add-on

Release notes for 4.11.0

Passbolt v4.11.0 introduces beta support for encrypted metadata in the administration settings, laying groundwork for the upcoming v5 release and its new resource format. This beta feature allows developers and integrators to explore and adapt their systems ahead of the transition.

This release also resolves a security issue where an attacker could modify the Passbolt URL in certain emails if an administrator’s configuration was invalid. Additionally, role-based access control is now enforced for the “Copy to Clipboard” feature in the browser extension. Vulnerabilities in dependencies—though not directly impacting Passbolt—have been addressed as well.

As one of the final updates in the v4 series, this version prepares administrators for v5. While v4.11.0 does not require PHP 8.2, v5 will. We recommend beginning to plan or upgrade PHP to ensure a smooth transition. If a server migration is needed, please consult the online documentation.

Thank you to the community for your feedback and support.

## Browser extension
### Added
- PB-37669: WP5-1.1 Implement save method in ServiceWorker
- PB-37670: WP5-1.2 Implement SaveMetadataSettingsService in the Service Worker to handle saving of metadata types settings
- PB-37671: WP5-1.3 Implement SaveMetadataTypesSettingsController in the Service Worker to expose metadata types settings save functionality to the content code
- PB-37672: WP5-1.4 Implement MetadataSettingsBextService in the Content Code to handle Service Worker requests that handles metadata types settings
- PB-37673: WP5-1.5 Add MetadataTypesSettingsEntity in the Content Code to support the metadata types settings form data
- PB-37676: WP5-1.6 Implement DisplayContentTypesMetadataAdministrationActions in the content Code to support content types metadata administration actions
- PB-37677: WP5-1.7 Implement DisplayContentTypesMetadataAdministration in the Content Code to display the metadata content types administration form
- PB-38019: WP5-1.8 Implement entity v2 required getter, setter, and comparison function to handle form data
- PB-38020: WP5-1.9 Add allow_v4_v5_upgrade property to metadata types settings entity
- PB-38021: WP5-1.10 Implement verifyDataHealth on MetadataTypesSettingsFormEntity to verify the settings health and help prevent problematic situations
- PB-38022: WP5-2.2 Metadata keys collection shouldn’t try to decrypt metadata private key that are not encrypted
- PB-38093: WP5-2.1 Make ExternalGpgKeyEntity and ExternalGpgCollection accessible to the content code
- PB-38105: WP5-2.3 Add support of expired on metadata key entity
- PB-38106: WP5-2.4 Find all metadata keys for session storage should not retrieve deleted keys
- PB-38108: WP5-2.5 Apply style on content types encrypted metadata administration screen
- PB-38111: WP5-2.6 Implement MetadataKeysServiceWorkerService in the Content Code to request the Service Worker to retrieve metadata keys
...

Used by