AliasVault: Open-Source E2EE Password & (Email) Alias Manager

Privacy Project Showcase
1

Hi PrivacyGuides!

I’m excited to introduce AliasVault, an open-source password and (email) alias manager designed to protect your privacy online.

AliasVault combines password management with unique identity generation, including email aliases, to help you compartmentalize your online presence. This helps in preventing third parties (e.g. data brokers) from creating shadow profiles of you, a common issue when the same email address is used across multiple services. AliasVault is end-to-end encrypted, fully self-hostable, and designed with privacy-first principles at its core.

This project was recently mentioned by a PrivacyGuides.net user in another forum section, and I’m happy to now formally present it here to gather feedback from privacy enthusiasts like you. Shortly about me: I’m Leendert, a software developer with over 15 years of experience and a long term privacy enthusiast myself. As an example of this I’ve been running SpamOK.com, a free temp email service since 2013.

Over the past year, I’ve poured my heart into AliasVault, dedicating much of my free time to creating a tool that empowers people to take control of their digital identities.

AliasVault is completely free and open-source under the MIT license because I believe privacy is a right, not a privilege. While I plan to introduce optional convenience features for the cloud version in the future (for a small fee to cover upkeep and aid future development), the self-hosted version will always remain free and accessible.

I’d love your help, whether by trying it out, sharing it with friends, or simply offering feedback / advice.

Key Features:

  • Unique Identities & Passwords: Generate unique email aliases and strong passwords for every service.
  • Self-Hosted Email Server: Create and manage aliases without relying on third-party services.
  • Zero-Knowledge Design: AES-256-GCM and Argon2id encryption ensure your data is secure. Your master password never leaves your device.
  • Open-Source & Self-Hostable: Review, audit, and deploy AliasVault on your own infrastructure. Installation is quick with Docker (also supports ARM for Raspberry Pi).
  • Official Cloud Version: For convenience, a fully-supported hosted option is available.

Try it Out:

I’m also proud to share that a community member created an independent in-depth review and self-hosting tutorial for AliasVault. Check it out on YouTube: https://www.youtube.com/watch?v=T7IqvNj5b2M

Future Plans:

I’m working to meet all PrivacyGuides’ recommended criteria for listing, with the security audit being a top priority. Transparency, open-source availability, and privacy-first practices are core to AliasVault.

Here are some of the short-term priorities (< 4-6 months):

  • Security Audit: I’m actively exploring options with independent auditors and have applied for grants to support this effort. Hope to be able to share progress on this in the coming weeks.
  • Feature Roadmap: The up-to-date roadmap is published on GitHub, but the biggest things being worked on right now are:
    • Creating browser extensions (Chrome/Firefox) with autofill mechanism. Already making good progress on this and it’s looking really nice, hope to have the first version out in the next two weeks.
    • Custom domain support on cloud version
    • Allow importing passwords from other password managers

Additional plans for the longer-term:

  • Adding native mobile apps (iOS/Android)
  • Team / organization features (sharing passwords/aliases)
  • Integrating disposable phone number service for SMS confirmation

Feedback

I’d love to hear your thoughts:

  • Would AliasVault fit into your privacy toolkit?
  • What features or improvements would you prioritize?
  • How can I make it easier for self-hosters and privacy advocates to adopt?

Your feedback will directly shape AliasVault’s development, so please share your thoughts. Thank you for taking the time to read about AliasVault, much appreciated! Looking forward to your input! :pray:

15 Likes
2

It looks interesting, I’ll try it out. Is it also based in the Netherlands like your other project? I’d rather use something that’s under GDPR.

3

Thanks for giving it a try! Both of my projects are hosted on my own servers with Hetzner in Germany, so yes, they are fully compliant with GDPR data protection regulations.

3 Likes
4

You’ve made a perfect solution! I can deal with the lack of TOTP support since I don’t recommend keeping it in your primary password manager anyways.

5

Thanks for your feedback :slight_smile:. I do hope to add TOTP support to the client in the near future, which shouldn’t be too hard as AliasVault already has TOTP functionality built-in for it’s own 2FA.

I’m also making good progress on the browser extension, I’m estimating I’ll have the Chrome version out somewhere next week. This will make using AliasVault a lot easier with smart autofill, and being able to create an alias + email for a website with just one click when you’re on the signup form. I’ll post an update on it when it’s available.

4 Likes
6

Yay! for the new upcoming updates!

Please also release the .xpi file for Firefox at-least if Mozilla takes long to publish it for Firefox. Btw, I hope you will also make and release one for Firefox?!

7

How can the account be deleted? I wanted to delete the one I set up to try creating a different kind of vault from the beginning, but I can’t see how to delete the existing one.

8

Yes, I second this. Being able to delete should be easy and one or two clicks at most - and be made available soon. I hope it is.

2 Likes
9

@delosmzp Yes after the Chrome extension is done I’ll focus on adapting it to support Firefox next. If publishing on the app store takes too long I’ll make sure to publish the files separately too.

@Sectional2932 Good point! Account deletion is currently only supported on the self-hosted version through the admin panel. The cloud version does not have a self-delete option yet. There is already an issue for this on GitHub: Add user delete account option to client app · Issue #373 · lanedirt/AliasVault · GitHub. I’ll try to get this feature included on the next release which should be published in the next few days. :slight_smile: If you wish to have your account deleted on the cloud version immediately then feel free to send me a PM and I can do it for you.

1 Like