codPass: Your secrets manager. Open, auditable, in your hands.

Here, open source is a security feature

For a secrets manager in particular, open source code is not a marketing add-on but hands-on quality assurance. codPass is developed transparently and in full license compliance.

• Verifiable security mechanisms instead of an opaque black box
• Community-ready instead of proprietary lock-in structures
• Long-term independence from any single vendor

Modernized with a security focus

codPass has been thoroughly reworked, not cosmetically but at its core.

• Comprehensive security analysis combining code review and architecture assessment
• Implementation of the identified security fixes
• Update to current PHP versions
• Modernized user interface, structurally prepared for future extensions

Multi-factor in one place: OTP built in

Passwords and one-time codes belong together, so codPass manages them together.

• OTP management: TOTP and HOTP one-time codes bundled with password management
• Structured multi-factor authentication in one central place, without switching tools

Standalone-ready - today

codPass runs fully independently as a dedicated password and secrets manager. Ideal for organizations that need a lean, self-contained solution without another platform running in the background.

• A dedicated service, ready for production right away
• Full control over your data, operated in-house
• No dependency on external cloud services

COD integration: in preparation

codPass will become a native part of the COD platform, with multi-tenancy, role logic and cross-cutting governance. Over time, this creates a central secrets layer within the COD ecosystem, scalable from a single site to a multi-tenant environment.

Note: The native COD integration is in preparation. Today, codPass runs standalone.