In this Techlore Talks interview, I sat down with Remy Berto, co-founder of Passbolt, to dig into a problem most people don’t think about: in many password managers, your “master password” effectively becomes the encryption key. That means it can be phished, guessed, or brute-forced in ways that put the whole vault at risk. Passbolt’s approach is different: it relies on a random private key to decrypt secrets, which raises the security bar (with some usability trade-offs). We also zoom out and cover password manager basics and why they matter—especially against the most common, unsophisticated attacks like phishing and password reuse. Remy explains how Passbolt is optimized for teams and businesses that need granular sharing, least-privilege permissions, and auditability (including the idea of only downloading a secret when you actually use it). We get into why self-hosting still matters for many orgs—governments, regulated industries, and privacy-conscious companies—and how open source transparency, audits, and published reports can help organizations make more informed security decisions.