Here at Daves Computer Tips, we have long been proponents of password managers. We list both KeePass and Bitwarden as recommended software. However, concerns about Bitwarden enshittification have recently led me to switch from Bitwarden to 1Password. Although 1Password is one of the best password managers, it is not free. Let’s take a look at a new addition to the password-manager market: AliasVault.
AliasVault combines password and passkey management with email aliases, virtual identities, two-factor authentication (2FA), and self-hosting into a single privacy-focused platform.
More Than A Password Manager
AliasVault does what you would expect from a modern password manager. It can generate and store passwords, autofill credentials in supported browsers, and store passkeys. It also includes a built-in authenticator, which is usually a premium feature, for storing and generating two-factor authentication codes.
The service supports web, mobile, and browser-extension access, with extensions available for browsers including Chrome, Firefox, Edge, and Safari. AliasVault also supports offline access, allowing you to use your vault without an internet connection and synchronize your data once connectivity is restored.
AliasVault allows importing data from a number of established password managers including: 1Password, Bitwarden, KeePass, KeePassXC, Proton Pass, Dashlane, and browser-based password stores.
Email Aliases & Virtual Identities
DCT readers of my articles on using email aliases with Bitwarden and using email aliases like a super user know that I am an advocate for using email aliases to protect your privacy and security. AliasVault has a built-in email alias system.
Rather than giving every website your primary email address, you can create a unique address for different services. Messages sent to those addresses can then be received directly within AliasVault. This can reduce exposure of your real email address and makes it easier to identify which service may have exposed an address if spam subsequently appears.
AliasVault also allows users to create virtual identities containing details such as names and usernames, which can be useful when signing up for services that do not need to know your real identity.
Privacy And Encryption
On paper, AliasVault’s architecture appears to be well-designed, following modern password manager practices. The project has a zero-knowledge, end-to-end encrypted architecture. The vault is encrypted on the user’s device before it is uploaded, and the master password is never transmitted to the server.
Argon2id is used as the password-based key derivation function. This is also used by Bitwarden (and many others). It is resistant to GPU cracking and much stronger than older PBKDF2 designs. AES-256-GCM is the current standard authenticated encryption mode.
Self Hosting
The software is open source, allowing the code to be inspected publicly. In addition, users can self-host AliasVault using Docker rather than using the company’s hosted service. Self-hosting is an advantage for technically experienced users, although it transfers responsibility for server security, updates, backups, and configuration from AliasVault to the user.
Still In Beta
AliasVault is still a 0.x beta product. According to its roadmap, the public beta began in December 2024, and an external security audit and official version 1.0 release are planned for Q4 2026. Consequently, while the project has published considerable information about its security architecture, it has not completed an independent audit. This is something I would like to see before entrusting my password collection to a relatively new password manager.
Unlike my review of PearPass, AliasVault’s architecture follows a more conventional design. However, strong security principles, an open-source codebase, and published security documentation are not substitutes for an independent professional audit.
Pricing
The core version of AliasVault is free, whether using the official hosted service or self-hosting it. Premium features are planned for the future.
Bottom Line
AliasVault is an interesting newcomer to the password-manager market. With its combination of passwords, passkeys, 2FA, email aliases, virtual identities, offline access, and self-hosting, it gives it a broader privacy focus than a conventional password manager. AliasVault is free, with a broad feature set, and its architecture is encouraging. This is an appealing alternative.
However, in my opinion, AliasVault is too new to be used confidently as one’s password manager at this early stage. AliasVault is still in beta and has not yet undergone the independent security audit planned for its version 1.0 release.
As always, if you have any helpful suggestions, comments, or questions, please share them with us.
—
