Open Source · Made in Germany · GDPR-Compliant

Your passwords,
under your control.

Keestash is a zero-knowledge password manager built in Germany. Use our European cloud — or deploy the open source server on your own infrastructure.

🇩🇪 Hosted in Germany
Zero-Knowledge Encryption
GDPR Compliant
MIT / AGPLv3 Open Source
AGPLv3
Open Source License
AES-256
Client-Side Encryption
🇩🇪 DE
Data Hosted in Germany
§ GDPR
Art. 25 Compliant

Everything you need to stay secure

Keestash combines strong encryption, team collaboration, and self-hosting freedom in a single open-source package.

End-to-End Encrypted

Your master key never leaves your device. Keestash encrypts everything locally before syncing — we cannot read your passwords even if we wanted to.

Self-Host or Cloud

Run Keestash on your own server with Docker in minutes, or use our managed European cloud. Your choice — switch anytime, export your data whenever.

Team Sharing

Share credentials securely within your organisation. Manage access by role, revoke sharing instantly, and maintain a full audit trail.

Password Health

Instantly detect weak, reused, and potentially compromised passwords. Keestash's health dashboard gives you an actionable security score.

Open Source Server

The Keestash server backend is published under AGPLv3 on GitHub. Audit every line of encryption logic, deploy it yourself, or contribute. No black boxes.

GDPR by Design

Built from the ground up to meet European data-protection standards. Data hosted in Germany, no third-party trackers, right to deletion included.

Your data stays in Germany.

We built Keestash in Germany because we believe European data-protection standards are the gold standard. Here's what that means for you:

  • Hosted on German servers
    All cloud data resides in data centres subject to German and EU law — never outside the EEA.
  • GDPR compliant by design
    Right to access, right to deletion, data portability — all built in, not bolted on.
  • No third-party trackers
    No Google Analytics, no Facebook Pixel, no hidden telemetry. We don't track visitors or users.
  • Zero-knowledge architecture
    We cannot access your vault even if compelled. Encryption happens on your device before data ever reaches our servers.
Read our Privacy Policy
🇩🇪
Made in Germany

Engineering and operations based in Germany, covered by German and EU law.

GDPR Article 25 Compliant

Data protection by design and by default — not an afterthought.

🔓
Auditable Open Source

Independent security researchers can audit every line. No security through obscurity.

Simple, transparent pricing

No hidden fees. No surprise bills. Free forever if you self-host.

Self-Hosted
Run on your own infrastructure
€0
forever, open source

  • Unlimited passwords
  • Full source code access
  • Community support
  • Docker-ready
Team
For organisations and growing teams
€9.99
per user / month

  • Everything in Cloud Pro
  • Shared password vaults
  • Role-based access control
  • Audit log
  • Dedicated support

Keestash is open source.

Inspect, fork, contribute. Security through transparency, not obscurity. Licensed under MIT / AGPLv3.

Take back control of your passwords.

Join thousands of users and teams who trust Keestash to keep their credentials safe — open source, made in Germany.