Firefly III
firefly-iii.org Self-hostedA free and open source personal finance manager. Firefly III features a clean and clear UI, is easy to set up and use, and is backed by a strong community. Regular updates bring new features, improvements, and fixes. There's also a hass.io addon, and compatibility with Home Assistant. Ensure your server is securely configured.
- Homepage: firefly-iii.org
- GitHub: github.com/firefly-iii/firefly-iii
- Web info: web-check.xyz/check/firefly-iii.org
Firefly III Source Code
Author
Description
Firefly III: a personal finances manager
Homepage
https://firefly-iii.org/License
AGPL-3.0
Created
28 Jun 14
Last Updated
30 Jun 26
Latest version
Primary Language
PHP
Size
317,058 KB
Stars
23,865
Forks
2,200
Watchers
23,865
Language Usage
Star History
Top Contributors
-
@JC5 (20753)
-
@dependabot[bot] (844)
-
@github-actions[bot] (788)
-
@mergify[bot] (150)
-
@SDx3 (131)
-
@sephrat (52)
-
@roberthorlings (44)
-
@lguima (40)
-
@Sobuno (27)
-
@michaelhthomas (18)
-
@bnw (17)
-
@tasnim0tantawi (17)
-
@hamuz (16)
-
@tonicospinelli (13)
-
@zjean (13)
-
@GeoffreyFrogeye (9)
-
@rubenverhoef (9)
-
@patrickkostjens (8)
-
@ctrl-f5 (8)
-
@vbali (7)
-
@dakennguyen (7)
-
@pkoziol (7)
-
@webenhanced (6)
-
@LBreda (6)
-
@canoine (6)
-
@devlearner (6)
-
@niekvanderkooy (6)
-
@tomershvueli (5)
-
@bpatath (5)
-
@Maxco10 (5)
-
@Zsub (5)
-
@achembarpu (5)
-
@SanderKleykens (4)
-
@alex6480 (4)
-
@lastlink (4)
-
@RonaldvanMeer (4)
-
@ebbz (4)
-
@JeroenED (4)
-
@hoshsadiq (3)
-
@maksimkurb (3)
-
@tomwerf (3)
-
@StillLoading (3)
-
@stevewasiura (3)
-
@softbrix (3)
-
@scrutinizer-auto-fixer (3)
-
@Mortalife (3)
-
@weimdall (3)
-
@klepek (3)
-
@dennisenderink (3)
-
@claystation (3)
-
@okaufmann (2)
-
@paul999 (2)
-
@stewartmalik (2)
-
@timendum (2)
-
@vonsogt (2)
-
@vicmosin (2)
-
@anmol26s (2)
-
@Johnny-Malizia (2)
-
@mateuszkulapl (2)
-
@psychowood (2)
-
@glmdev (2)
-
@emansih (2)
-
@elamperti (2)
-
@rubenvanerk (2)
-
@naveensrinivasan (2)
-
@maroux (2)
-
@eddybrando (2)
-
@antoniomrfranco (2)
-
@ErikFontanel (2)
-
@fedemic (2)
-
@Flightkick (2)
-
@GeorgeHahn (2)
-
@gian21391 (2)
-
@mindlessroman (2)
-
@DieBauer (2)
-
@alazare619 (2)
-
@ms32035 (2)
-
@MihataBG (2)
-
@SeminarOpenCLGRP7 (2)
-
@NathanPERIER (2)
-
@R1DEN (1)
-
@mansuf (1)
-
@ricketyboo (1)
-
@SuperSandro2000 (1)
-
@bsedin (1)
-
@shashankmc (1)
-
@simonsmiley (1)
-
@skuzzle (1)
-
@stevietv (1)
-
@xnyhps (1)
-
@schoentoon (1)
-
@pascalj (1)
-
@nhaarman (1)
-
@nicosomb (1)
-
@nicoschreiner (1)
-
@nick322 (1)
-
@mconway (1)
-
@mfix22 (1)
-
@melroy89 (1)
-
@mgrove36 (1)
Recent Commits
-
Merge pull request #12422 from firefly-iii/develop 🤖 Automatically merge the PR into the main branch.
-
Merge pull request #12421 from firefly-iii/release-1782840449 🤖 Automatically merge the PR into the develop branch.
-
🤖 Auto commit for release 'v6.6.5' on 2026-06-30
-
Fix version in changelog.
-
Update changelog.
-
Fix workflow.
-
Update security.md to specify SSRF and DNS issues Clarified security advisory guidelines regarding SSRF and DNS/hostname issues. Signed-off-by: James Cole <[email protected]>
-
Merge pull request #12417 from firefly-iii/develop 🤖 Automatically merge the PR into the main branch.
-
Merge pull request #12416 from firefly-iii/release-1782825282 🤖 Automatically merge the PR into the develop branch.
-
🤖 Auto commit for release 'v6.6.4' on 2026-06-30
-
Fix changelog.
-
Merge pull request #12415 from firefly-iii/release-1782824754 🤖 Automatically merge the PR into the develop branch.
-
🤖 Auto commit for release 'develop' on 2026-06-30
-
Update changelog.
-
Merge branch 'develop' of github.com:firefly-iii/firefly-iii into develop
-
Fix https://github.com/firefly-iii/firefly-iii/issues/12353
-
Merge pull request #12414 from firefly-iii/release-1782823891 🤖 Automatically merge the PR into the develop branch.
-
🤖 Auto commit for release 'develop' on 2026-06-30
-
Fix https://github.com/firefly-iii/firefly-iii/issues/12356
-
Fix https://github.com/firefly-iii/firefly-iii/issues/12370
-
Also block command thingie.
-
Stop access to install page.
-
Merge pull request #12409 from firefly-iii/dependabot/npm_and_yarn/develop/vite-8.1.0 Bump vite from 8.0.16 to 8.1.0
-
Merge pull request #12406 from firefly-iii/dependabot/composer/develop/rector/rector-2.5.2 Bump rector/rector from 2.4.4 to 2.5.2
-
Merge pull request #12412 from firefly-iii/release-1782709367 🤖 Automatically merge the PR into the develop branch.
-
🤖 Auto commit for release 'develop' on 2026-06-29
-
Fix mago issues.
-
Bump vite from 8.0.16 to 8.1.0 Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 8.0.16 to 8.1.0. - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/[email protected]/packages/vite) --- updated-dependencies: - dependency-name: vite dependency-version: 8.1.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>
-
Bump rector/rector from 2.4.4 to 2.5.2 Bumps [rector/rector](https://github.com/rectorphp/rector) from 2.4.4 to 2.5.2. - [Release notes](https://github.com/rectorphp/rector/releases) - [Commits](https://github.com/rectorphp/rector/compare/2.4.4...2.5.2) --- updated-dependencies: - dependency-name: rector/rector dependency-version: 2.5.2 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>
-
Fix https://github.com/firefly-iii/firefly-iii/issues/12396
Firefly III Security
Security Advisories (4)
- medium Patched
GHSA-6jq6-x4cx-qvcm Stored XSS in Audit Log Entry view via piggy bank name (ale.twig)
- low Patched
GHSA-5q8v-j673-m5v4 User API endpoints expose all users' information to any authenticated user (IDOR)
- medium Patched
CVE-2024-37893 MFA bypass in oauth flow
- medium Patched CVSS 4
GHSA-29w6-c52g-m8jc C5 Firefly III 6.1.6 CSV Injection.
Firefly III Website
Website
Firefly III - A free and open source personal finance manager
Firefly III
Redirects
Does not redirect
Security Checks
All 65 security checks passed
Server Details
- IP Address 104.21.62.170
- Location San Francisco, California, United States of America, NA
- ISP CloudFlare Inc.
- ASN AS13335
Associated Countries
-
US -
DE -
CH
Safety Score
Website marked as safe
100%
Blacklist Check
www.firefly-iii.org was found on 0 blacklists
- AntiSocial Blacklist
- Artists Against 419
- Badbitcoin
- Bambenek Consulting
- CERT Polska
- CoinBlockerLists
- CRDF
- CryptoScamDB
- EtherAddressLookup
- EtherScamDB
- Fake Website Buster
- MetaMask EthPhishing
- NABP Not Recommended Sites
- OpenPhish
- PetScams
- PhishFeed
- PhishFort
- Phishing.Database
- PhishStats
- PhishTank
- Phishunt
- RPiList Not Serious
- Scam.Directory
- SecureReload Phishing List
- Spam404
- StopGunScams
- Suspicious Hosting IP
- ThreatFox
- ThreatLog
- TweetFeed
- URLhaus
- ViriBack C2 Tracker
Website Preview
Firefly III Reviews
More Secure Budgeting
-
A local-first personal finance app
-
Privacy-first cross-platform personal expense tracker (Android/iOS/Web) with offline-first design. Multi-cloud sync options — self-hosted BeeCount Cloud, iCloud, Supabase, WebDAV or S3 — keep data under user control.
-
A lightweight, self-hosted personal finance app for recording daily transactions and analyzing spending patterns. Self-hosted, with all data staying on your own server. Supports 2FA and OICD.
-
A full-featured cross-platform accounting application suitable for personal and small business finance. Stable and reliable, GnuCash offers a comprehensive suite of financial management tools. Available for Windows, Mac, Linux, and Android.
-
Utilizes plain text files and scriptable, command-line-friendly software for bookkeeping/accounting, offering full control over data. Popular tools include Ledger, hledger, and Beancount among others, providing a flexible and vendor-independent approach to accounting.
-
A self-hosted, opensource, privacy-first portfolio tracking and accounting tool for crypto and more. Support for all 3 major Operating systems and docker. The tool focus is on data self-sovereignty.
About the Data: Firefly III
API
You can access Firefly III's data programmatically via our API. Simply make a GET request to:
https://api.awesome-privacy.xyz/v1/services/firefly-iiiThe REST API is free, no-auth and CORS-enabled. To learn more, view the API Docs or read the API Usage Guide.
Share Firefly III
Help your friends compare Secure Budgeting, and pick
privacy-respecting software and services.
Share Firefly III and Awesome Privacy with your network!