TeamPass
Hosting

Teampass is one of those applications I have a complicated relationship with. On one hand, every IT team needs a proper password manager and Teampass is one of the best self-hosted options available. On the other hand, getting Teampass set up correctly, configured securely, and running with sensible policies is genuinely more work than people expect, and the cost of doing it badly is bigger than for almost any other application we host. A leaky CMS is embarrassing. A leaky password vault is a disaster.

What works well: the encryption model is sensible, with per-user RSA keys protecting access to shared items rather than a single master key for the whole instance. Two-factor authentication is supported and should be mandatory. The folder and role-based access control is granular enough to model real organisational structures. LDAP and Active Directory integration works and is the right choice for any team larger than about ten people because manual user management gets old fast.

What needs serious care: the initial encryption setup, the SaltKey handling, and the backup-and-restore procedure are all non-trivial. If you back up the database without also backing up the SaltKey file in the right way, you have an unrecoverable backup the day you actually need it. If you let admins reset their own 2FA without proper oversight, you\'ve undermined a chunk of your security model. The Teampass documentation is good but you have to read it properly, not skim it.

"Teampass is excellent if you treat it with the respect a password vault deserves. Read the docs end to end, configure 2FA before anything else, test your backup-and-restore on a staging copy, and don\'t let it run on a host that doesn\'t support TLS properly. If you\'re going to run a vault, run it properly."

Mark McNeece, Founder, 365i Hosting

From a hosting perspective, Teampass is well-behaved technically. Our shared hosting at £5.99/mo handles small team deployments comfortably. PHP 8.3, MySQL 8, 256MB memory, free SSL across the whole vault URL (non-negotiable for a password manager, ever), and our autoscaling cloud platform with unlimited LVE resources cover small-to-medium teams. For larger teams (50+ users) or anywhere with strict regulatory requirements (financial services, healthcare, public sector), our cloud hosting at £9.99/mo provides dedicated resources and the kind of predictable performance audit committees like to see in their reports.

Two specific operational notes. First, the SaltKey file lives outside the database and outside the standard application backup path. We can include it in our daily backup but we need to know it exists, so flag this when you migrate or install via our support team. Without the SaltKey, your encrypted credentials are unrecoverable. Second, if you\'re using LDAP integration, the LDAP connection itself wants TLS. Plain LDAP is no longer acceptable for a password manager in any setting.

From a hosting-side security point of view, we apply free SSL by default, daily backups with 30-day retention, file-permission hardening, and platform-level WAF rules. For Teampass specifically we\'d strongly recommend IP-restricting admin access where possible, enabling fail2ban-style brute-force protection on the login endpoint via a community plug-in, and reviewing your audit log monthly. Self-hosted password management is a serious responsibility; if your organisation isn\'t ready to take that responsibility seriously, a hosted SaaS like 1Password Business or Bitwarden Cloud is genuinely the better answer.