Firefly III

firefly-iii.org
Firefly III

A free and open source personal finance manager. Firefly III features a clean and clear UI, is easy to set up and use, and is backed by a strong community. Regular updates bring new features, improvements, and fixes. There's also a hass.io addon, and compatibility with Home Assistant. Ensure your server is securely configured.

Open Source

Firefly III Source Code

Author

firefly-iii

Description

Firefly III: a personal finances manager

#accounting#budget#budgeting#budgets#cash-flow#cashflow#credit-card#docker#expenses#finance#finances#financial#linux#money#paycheck#personal-finance#php#php7

Homepage

https://firefly-iii.org/

Repository

  • LicenseAGPL-3.0
  • Created28 Jun 14
  • Primary languagePHP
  • Size320,447 KB
  • Stars24,793
  • Forks2,315
  • Watchers24,793

Language Usage

Language Usage

Project Health

  • Last commit6 days ago
  • Open issues173
  • Latest releasev6.7.6

Recent Commits

  • github-actions[bot](28 Sept 26)

    Merge pull request #12914 from firefly-iii/develop 🤖 Automatically merge the PR into the main branch.

  • github-actions[bot](28 Sept 26)

    Merge pull request #12913 from firefly-iii/release-1790572120 🤖 Automatically merge the PR into the develop branch.

  • JC5(28 Sept 26)

    🤖 Auto commit for release 'v6.7.6' on 2026-09-28

  • github-actions[bot](28 Sept 26)

    Merge pull request #12912 from firefly-iii/release-1790571376 🤖 Automatically merge the PR into the develop branch.

  • JC5(28 Sept 26)

    🤖 Auto commit for release 'develop' on 2026-09-28

  • James Cole(28 Sept 26)

    Remove empty lines.

  • James Cole(28 Sept 26)

    Merge branch 'main' into develop

  • James Cole(28 Sept 26)

    Fix #12908

  • James Cole(28 Sept 26)

    Merge pull request #12911 from firefly-iii/dependabot/npm_and_yarn/develop/prettier-3.9.9 Bump prettier from 3.9.8 to 3.9.9

  • dependabot[bot](28 Sept 26)

    Bump prettier from 3.9.8 to 3.9.9 Bumps [prettier](https://github.com/prettier/prettier) from 3.9.8 to 3.9.9. - [Release notes](https://github.com/prettier/prettier/releases) - [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md) - [Commits](https://github.com/prettier/prettier/compare/3.9.8...3.9.9) --- updated-dependencies: - dependency-name: prettier dependency-version: 3.9.9 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>

  • github-actions[bot](28 Sept 26)

    Merge pull request #12910 from firefly-iii/release-1790565479 🤖 Automatically merge the PR into the develop branch.

  • JC5(28 Sept 26)

    🤖 Auto commit for release 'develop' on 2026-09-28

  • github-actions[bot](27 Sept 26)

    Merge pull request #12900 from firefly-iii/develop 🤖 Automatically merge the PR into the main branch.

  • github-actions[bot](27 Sept 26)

    Merge pull request #12899 from firefly-iii/release-1790506773 🤖 Automatically merge the PR into the develop branch.

  • JC5(27 Sept 26)

    🤖 Auto commit for release 'v6.7.5' on 2026-09-27

  • github-actions[bot](27 Sept 26)

    Merge pull request #12898 from firefly-iii/release-1790506320 🤖 Automatically merge the PR into the develop branch.

  • JC5(27 Sept 26)

    🤖 Auto commit for release 'develop' on 2026-09-27

  • James Cole(27 Sept 26)

    Fix more errors.

  • James Cole(27 Sept 26)

    Fix phpstan issues.

  • James Cole(27 Sept 26)

    Fix #12897

  • James Cole(27 Sept 26)

    Add some middleware configuration.

  • James Cole(27 Sept 26)

    Also show errors for webhook triggers.

  • James Cole(27 Sept 26)

    Add map to chart.

  • James Cole(27 Sept 26)

    Clean up controller and make sure hidden amounts are respected.

  • James Cole(26 Sept 26)

    Fix a second link.

  • github-actions[bot](26 Sept 26)

    Merge pull request #12895 from firefly-iii/release-1790452229 🤖 Automatically merge the PR into the develop branch.

  • JC5(26 Sept 26)

    🤖 Auto commit for release 'develop' on 2026-09-26

  • James Cole(26 Sept 26)

    Fix view with link.

  • James Cole(26 Sept 26)

    Fix viewrange.

  • github-actions[bot](26 Sept 26)

    Merge pull request #12893 from firefly-iii/release-1790445545 🤖 Automatically merge the PR into the develop branch.

Firefly III Security

4.6/10

Repo Security Summary

Updated 24 Aug 26

  • Token-PermissionsN/A
  • Code-Review0/10
  • Maintained10/10
  • PackagingN/A
  • Dangerous-WorkflowN/A
  • CII-Best-Practices2/10
  • Binary-Artifacts10/10
  • Security-Policy0/10
  • Pinned-DependenciesN/A
  • License10/10
  • Signed-Releases8/10
  • Fuzzing0/10
  • Branch-Protection3/10
  • SAST0/10

Security Advisories (5)

  • highPatched

    GHSA-3wcx-g7jc-h9vcFirefly III API Preferences endpoint allows blocked users to self-unblock via arbitrary preference name setting

  • mediumPatched

    GHSA-6jq6-x4cx-qvcmStored XSS in Audit Log Entry view via piggy bank name (ale.twig)

  • lowPatched

    GHSA-5q8v-j673-m5v4User API endpoints expose all users' information to any authenticated user (IDOR)

  • mediumPatched

    CVE-2024-37893MFA bypass in oauth flow

  • mediumPatchedCVSS 4

    GHSA-29w6-c52g-m8jcC5 Firefly III 6.1.6 CSV Injection.

Firefly III Website

Website

Firefly III - A free and open source personal finance manager

Firefly III

Redirects

Does not redirect

Security Checks

All 65 security checks passed

Server Details

  • IP Address172.67.137.142
  • LocationSan Francisco,California,United States of America,NA
  • ISPCloudFlare Inc.
  • ASNAS13335

Associated Countries

  • USUS
  • DEDE

Safety Score

Website marked as safe

100%

Blacklist Check

www.firefly-iii.org was found on 0 blacklists

  • AntiSocial Blacklist
  • Artists Against 419
  • Badbitcoin
  • Bambenek Consulting
  • CERT Polska
  • CoinBlockerLists
  • CRDF
  • CryptoScamDB
  • EtherAddressLookup
  • EtherScamDB
  • Fake Website Buster
  • MetaMask EthPhishing
  • NABP Not Recommended Sites
  • OpenPhish
  • PetScams
  • PhishFeed
  • PhishFort
  • Phishing.Database
  • PhishStats
  • PhishTank
  • Phishunt
  • RPiList Not Serious
  • Scam.Directory
  • SecureReload Phishing List
  • Spam404
  • StopGunScams
  • Suspicious Hosting IP
  • ThreatFox
  • ThreatLog
  • TweetFeed
  • URLhaus
  • ViriBack C2 Tracker

Website Preview

Website preview

Firefly III Reviews

More Secure Budgeting

About the Data: Firefly III

Edit Firefly III Data

You can edit Firefly III's entry in this section of awesome-privacy.yml by submitting a PR to our GitHub repo.
Note that some of the information shown above has been aggregated from external sources, a list of these can be found data documentation.

Origin Data

Modify Data

API

You can access Firefly III's data programmatically via our API. Simply make a GET request to:

https://api.awesome-privacy.xyz/v1/services/firefly-iii

The REST API is free, no-auth and CORS-enabled. To learn more, view the API Docs or read the API Usage Guide.

Share Firefly III

Help your friends compare Secure Budgeting, and pick privacy-respecting software and services.
Share Firefly III and Awesome Privacy with your network!