AliasVault

Awesome Privacy➔ Essentials➔ Password Managers➔ AliasVault

End-to-end encrypted open source password and alias manager with built-in email server. AliasVault protects your privacy by creating alternative identities, passwords and email addresses for every website you use. Use the cloud version, or self-host and deploy within minutes via Docker.

Homepage:aliasvault.net
GitHub:github.com/lanedirt/aliasvault
Discord:DsaXMTEtpF
Web info:web-check.xyz/check/aliasvault.net

Open Source

AliasVault Source Code

Author

aliasvault

Description

Privacy-first password manager with built-in email aliasing. Fully encrypted and self-hostable.

#alias#argon2id#blazor#browser-extension#docker#dotnet#email-server#password-manager#react#srp#wasm

Homepage

https://www.aliasvault.com

Repository

LicenseAGPL-3.0
Created31 May 24
Primary languageTypeScript
Size56,009 KB
Stars3,144
Forks108
Watchers3,144

Language Usage

Project Health

Last commit2 days ago
Open issues187
Latest release0.30.7

Top Contributors

Recent Commits

Leendert de Borst(29 Sept 26)
Update AttachmentUploader.tsx translations
Leendert de Borst(29 Sept 26)
Update core/rust src dir structure
Leendert de Borst(29 Sept 26)
Regenerate native Android translations on app build
Leendert de Borst(29 Sept 26)
Update translations and cleanup/remove old app-specific translations
Leendert de Borst(29 Sept 26)
Tweak update required web app flow
Leendert de Borst(29 Sept 26)
Update mobile app animated LoadingIndicator
Leendert de Borst(29 Sept 26)
New Crowdin updates (#2436)
Leendert de Borst(29 Sept 26)
Refactor languages.json to separate UI languages from total list used for e.g. identity generator as well (#2437)
Leendert de Borst(29 Sept 26)
Update mobile app error handling and display (#2437)
Leendert de Borst(29 Sept 26)
Update browser extension error handling and display (#2437)
Leendert de Borst(29 Sept 26)
Update web app error handling and display (#2437)
Leendert de Borst(29 Sept 26)
Refactor core/client and Rust error handling to use uniform app error codes and translations (#2437)
AronMav(29 Sept 26)
fix(favicon): refresh user-agent pool and derive Sec-CH-UA from chosen UA The favicon fetcher's user-agent pool was pinned to Chrome 119/120 and Firefox 121 (Dec 2023). Stale UA majors are a cheap bot-protection heuristic to trip and contribute to favicon extraction failures. Refresh the pool to Chrome 150/151 and Firefox 152. Derive the Sec-CH-UA version list from the actually selected user agent major and match the platform hint to the UA's platform token, so client hints can no longer contradict the User-Agent string. The server-side FaviconExtractor is shared by both the single-fetch and bulk extraction paths.
Leendert de Borst(28 Sept 26)
Restore web app loading screen quotes and add percentage load check
Leendert de Borst(28 Sept 26)
Update sync-hints.mjs
Leendert de Borst(28 Sept 26)
Fix tests (#2434)
Leendert de Borst(28 Sept 26)
Update bump-versions.sh script (#2434)
Leendert de Borst(28 Sept 26)
Add linting to core/i18n (#2434)
Leendert de Borst(28 Sept 26)
Update all mobile app translation key references and point to new core/i18n (#2434)
Leendert de Borst(28 Sept 26)
Update all browser extension app translation key references and point to new core/i18n (#2434)
Leendert de Borst(28 Sept 26)
Move language definitions from core/models to core/i18n (#2434)
Leendert de Borst(28 Sept 26)
Determine available languages in web app via core/i18n (#2434)
Leendert de Borst(28 Sept 26)
Update all web app translation key references and point to new core/i18n package (#2434)
Leendert de Borst(28 Sept 26)
Update nl.json (#2434)
Leendert de Borst(28 Sept 26)
Add core/i18n scripts (#2434)
Leendert de Borst(28 Sept 26)
Update Crowdin config to point to new centralized translation files (#2434)
Leendert de Borst(28 Sept 26)
Add centralized translations migrated from existing apps (#2434)
Leendert de Borst(28 Sept 26)
Merge pull request #2433 from aliasvault/2413-migrate-current-web-app-from-blazor-wasm-to-react Port current web app from Blazor WASM to React
Leendert de Borst(28 Sept 26)
New Crowdin updates (#2431) * New translations sharedresources.en.resx (Romanian) [ci skip] Update translations from Crowdin [ci skip] * New translations sharedresources.en.resx (French) [ci skip] Update translations from Crowdin [ci skip] * New translations sharedresources.en.resx (Spanish) [ci skip] Update translations from Crowdin [ci skip] * New translations sharedresources.en.resx (Bulgarian) [ci skip] Update translations from Crowdin [ci skip] * New translations sharedresources.en.resx (Danish) [ci skip] Update translations from Crowdin [ci skip] * New translations sharedresources.en.resx (German) [ci skip] Update translations from Crowdin [ci skip] * New translations sharedresources.en.resx (Finnish) [ci skip] Update translations from Crowdin [ci skip] * New translations sharedresources.en.resx (Irish) [ci skip] Update translations from Crowdin [ci skip] * New translations sharedresources.en.resx (Hebrew) [ci skip] Update translations from Crowdin [ci skip] * New translations sharedresources.en.resx (Hungarian) [ci skip] Update translations from Crowdin [ci skip] * New translations sharedresources.en.resx (Italian) [ci skip] Update translations from Crowdin [ci skip] * New translations sharedresources.en.resx (Korean) [ci skip] Update translations from Crowdin [ci skip] * New translations sharedresources.en.resx (Dutch) [ci skip] Update translations from Crowdin [ci skip] * New translations sharedresources.en.resx (Polish) [ci skip] Update translations from Crowdin [ci skip] * New translations sharedresources.en.resx (Russian) [ci skip] Update translations from Crowdin [ci skip] * New translations sharedresources.en.resx (Swedish) [ci skip] Update translations from Crowdin [ci skip] * New translations sharedresources.en.resx (Turkish) [ci skip] Update translations from Crowdin [ci skip] * New translations sharedresources.en.resx (Ukrainian) [ci skip] Update translations from Crowdin [ci skip] * New translations sharedresources.en.resx (Chinese Simplified) [ci skip] Update translations from Crowdin [ci skip] * New translations sharedresources.en.resx (Urdu (Pakistan)) [ci skip] Update translations from Crowdin [ci skip] * New translations sharedresources.en.resx (Vietnamese) [ci skip] Update translations from Crowdin [ci skip] * New translations sharedresources.en.resx (Portuguese, Brazilian) [ci skip] Update translations from Crowdin [ci skip] * New translations sharedresources.en.resx (Indonesian) [ci skip] Update translations from Crowdin [ci skip] * New translations sharedresources.en.resx (Burmese) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (Romanian) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (French) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (Spanish) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (Bulgarian) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (Danish) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (German) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (Finnish) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (Irish) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (Hebrew) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (Hungarian) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (Italian) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (Korean) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (Dutch) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (Polish) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (Russian) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (Swedish) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (Turkish) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (Ukrainian) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (Chinese Simplified) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (Urdu (Pakistan)) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (Vietnamese) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (Portuguese, Brazilian) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (Indonesian) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (Burmese) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (Romanian) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (French) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (Spanish) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (Bulgarian) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (Danish) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (German) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (Finnish) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (Irish) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (Hebrew) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (Hungarian) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (Italian) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (Korean) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (Dutch) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (Polish) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (Russian) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (Swedish) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (Turkish) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (Ukrainian) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (Chinese Simplified) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (Urdu (Pakistan)) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (Vietnamese) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (Portuguese, Brazilian) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (Indonesian) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (Burmese) [ci skip] Update translations from Crowdin [ci skip] * New translations sharedresources.en.resx (French) [ci skip] Update translations from Crowdin [ci skip] * New translations sharedresources.en.resx (Spanish) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (French) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (Spanish) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (French) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (Spanish) [ci skip] Update translations from Crowdin [ci skip] * New translations sharedresources.en.resx (Irish) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (Irish) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (Irish) [ci skip] Update translations from Crowdin [ci skip] * New translations sharedresources.en.resx (German) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (German) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (German) [ci skip] Update translations from Crowdin [ci skip] * New translations sharedresources.en.resx (Chinese Simplified) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (Chinese Simplified) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (Chinese Simplified) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (Chinese Simplified) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (Chinese Simplified) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (Chinese Simplified) [ci skip] Update translations from Crowdin [ci skip] * New translations sharedresources.en.resx (Danish) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (Danish) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (Chinese Simplified) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (Danish) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (Chinese Simplified) [ci skip] Update translations from Crowdin [ci skip] * New translations sharedresources.en.resx (Romanian) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (Romanian) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (Romanian) [ci skip] Update translations from Crowdin [ci skip] * New translations sharedresources.en.resx (Italian) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (Italian) [ci skip] Update translations from Crowdin [ci skip] * New translations en.json (Italian) [ci skip] Update translations from Crowdin [ci skip]
Leendert de Borst(28 Sept 26)
Tweak browser extension to let popup initialize its vault directly instead of going through background (#2413)

AliasVault Security

Security Advisories (5)

mediumPatchedCVSS 6.3
CVE-2026-94621Server-Side Request Forgery via DNS rebinding in Favicon Extraction
16 Aug 26
highPatchedCVSS 8.1
CVE-2026-55587Missing Origin and RP Validation in Browser Extension Passkey Provider
18 Jun 26
criticalPatchedCVSS 9.3
CVE-2026-26266Cross-Site Scripting (XSS) via Email HTML Rendering
01 Mar 26
mediumPatchedCVSS 6.1
CVE-2026-22694Missing Origin Validation in Android Passkey Credential Provider
14 Jan 26
highPatchedCVSS 7.7
CVE-2025-59344Server-Side Request Forgery via Favicon Extraction
19 Sept 25

AliasVault Website

Website

Redirects

Redirects to https://www.aliasvault.com/

Security Checks

1 security checks failed (64 passed)

External Redirect Detected

Server Details

IP Address85.17.151.64
LocationAmsterdam,Noord-Holland,Netherlands (Kingdom of the),EU
ISPLeaseweb Netherlands B.V.
ASNAS60781

Associated Countries

Safety Score

Website marked as safe

100%

Blacklist Check

www.aliasvault.net was found on 0 blacklists

AntiSocial Blacklist
Artists Against 419
Badbitcoin
Bambenek Consulting
CERT Polska
CoinBlockerLists
CRDF
CryptoScamDB
EtherAddressLookup
EtherScamDB
Fake Website Buster
MetaMask EthPhishing
NABP Not Recommended Sites
OpenPhish
PetScams
PhishFeed
PhishFort
Phishing.Database
PhishStats
PhishTank
Phishunt
RPiList Not Serious
Scam.Directory
SecureReload Phishing List
Spam404
StopGunScams
Suspicious Hosting IP
ThreatFox
ThreatLog
TweetFeed
URLhaus
ViriBack C2 Tracker

Website Preview

View full report atweb-check.xyz

AliasVault Socials

AliasVault Reviews

More Password Managers

2of3 by Ente
2of3.ente.com
Turn a recovery key, password, or other secret into 3 cards you can keep in different places. Open-source, client-side only, with an offline recovery page.

Open Source Source
View 2of3 by Ente Report
Bitwarden
(Self-Hosted)
bitwarden.com
Fully-featured, open source password manager with cloud-sync. Bitwarden is easy-to-use with a clean UI and client apps for desktop, web and mobile. See also Vaultwarden, a self-hosted, Rust implementation of the Bitwarden server and compatible with upstream Bitwarden clients.

Open Source bitwarden/server
View Bitwarden Report
KeePass
keepass.info
Hardened, secure and offline password manager. Does not have cloud-sync baked in, deemed to be gold standard for secure password managers. KeePass clients: Strongbox (Mac & iOS), KeePassium (Mac & iOS), KeePassDX (Android), KeeWeb (Web-based/ self-hosted), KeePassXC (Windows, Mac & Linux), see more KeePass clients and extensions at awesome-keepass by @lgg.

Security Audited Open Source Source
View KeePass Report
LessPass
(Self-Hosted)
lesspass.com
LessPass is a little different, since it generates your passwords using a hash of the website name, your username and a single main-passphrase that you reuse. It omits the need for you to ever need to store or sync your passwords. They have apps for all the common platforms and a CLI, but you can also self-host it.

Open Source lesspass/lesspass
View LessPass Report
PaperVault
papervault.xyz
Store secrets and passwords on encrypted paper with distributed keys. Designed to last generations. Open source, client-side only, works offline.

Open Source boazeb/papervault
View PaperVault Report
Pass
passwordstore.org
The Standard Unix Password Manager

Open Source Source
View Pass Report
ProtonPass
proton.me/pass
From the creators of ProtonMail, ProtonPass is a new addition to their suite of services. They have a full collection of user-friendly native mobile and desktop apps. ProtonPass is one of the few "trustworthy" providers that also offers a free plan.

Open Source protonpass/android-pass
View ProtonPass Report

About the Data: AliasVault

Change History

Amended Mar 15, 2026 (description) by @ltguillaume #427
Added Mar 14, 2026 by @lanedirt #303

Edit AliasVault Data

You can edit AliasVault's entry in this section of awesome-privacy.yml by submitting a PR to our GitHub repo.
Note that some of the information shown above has been aggregated from external sources, a list of these can be found data documentation.

Origin Data

Modify Data

Delete AliasVault Submit Edit to AliasVault Add alternative

API

You can access AliasVault's data programmatically via our API. Simply make a GET request to:

https://api.awesome-privacy.xyz/v1/services/aliasvault

The REST API is free, no-auth and CORS-enabled. To learn more, view the API Docs or read the API Usage Guide.

Share AliasVault

Help your friends compare Password Managers, and pick privacy-respecting software and services.
Share AliasVault and Awesome Privacy with your network!

← Previous

Pass

View Password Managers (8)

PaperVault