Suggestions appear as you type. Use the up and down arrows to choose one and Enter to open it.

This page's audience our own tag's counts — open to see them
–Visits
–Page views
–Clicks to vendors
–Time on page
–Reading now
Clicks to vendors, by tool
  • –
Top countries
  • –
Devices
  • –

– · visits, page views and clicks counted by our own tag, which counts more than our checked analytics; every figure rounded down · how we count

PWM

Free#18 of 25 in Active Directory Management SoftwareSelf-Service Password Reset Software

PWM: A focused, self-hosted password platform for LDAP and Active Directory environments. Ranked #18 of 25 in Active Directory Management Software by our editors (6.8/10); pricing: Open source; best for open-source LDAP and AD password self-service.

6.8/10Editor score
Visit PWM
PWM6.8 Visit PWM

At a glance

  • Editor score
    6.8 / 10
  • Pricing
    Open source
  • Best for
    Open-source LDAP and AD password self-service
  • Paid from
    Free
  • Deployment
    On_premises
  • Facts checked
    22 Sep 2026
PWM screenshot

  • Where it wins

    • Supports Active Directory, OpenLDAP, eDirectory, and generic LDAP deployments
    • Offers recovery through email, SMS, TOTP, OAuth, and LDAP verification
    • Includes helpdesk resets, auditing, statistics, logs, and REST APIs

  • Where it doesn't

    • Self-hosted deployment requires an organization's own installation and operation
    • Focuses on password self-service rather than broader directory lifecycle management
    • More than 500 configurable settings may require careful administration

Our verdict on PWM

PWM is an open-source, web-based password self-service application for organizations running LDAP directories. It supports Microsoft Active Directory, OpenLDAP, eDirectory, and generic LDAP deployments, with password changes, configurable policy enforcement, forgotten-password recovery, account activation, first-time password assignment, and new-user registration. Helpdesk users can reset passwords and clear account lockouts, while end users can access the service through a web interface. PWM is suited to teams that need a focused password service across mixed directory environments and prefer self-hosted software.

Its strongest fit is breadth within password self-service. Recovery can use email, SMS, TOTP, OAuth, or LDAP verification, and the platform also covers registration, activation, account creation, and helpdesk workflows. Administrators get audit records, statistics, online logs, and user debugging, while REST APIs support password, policy, and user-attribute operations. Integrations include LDAP, Microsoft Active Directory, OpenLDAP, eDirectory, OAuth, CAS, and the REST API, giving PWM a practical place in directory-centered environments with existing identity services.

Deployment is self-hosted and available as a Java WAR, executable JAR, or Docker image. A web-based configuration manager exposes more than 500 configurable settings, which provides control over directory behavior, policies, recovery, and workflows but also makes administration a significant part of adoption. PWM should suit organizations seeking open-source password self-service with auditing and API access across LDAP and AD. Teams looking for a broader directory management suite with lifecycle automation, delegated administration, or wider reporting should consider a product with that broader focus instead.

Your product? Our editors can test PWM in depth and publish a review, labelled as paid · from $149/mo →

PWM pricing

Plans Open sourceFree Free to use — no paid tier required for the core job.
See plans on github.com

PWM fact sheet

Free planNot verified
Paid fromFree
DeploymentOn_premises
Delegated administrationNot verified
AD auditingYes
Lifecycle automationNot verified
ReportingYes
Password self-serviceYes
DeploymentSelf-hosted
PlatformsWeb
SupportCommunity, Docs
Built forSmall business, Mid-market, Enterprise (editorial estimate)
Integrations7 integrations: LDAP, Microsoft Active Directory, OpenLDAP, eDirectory, OAuth, CAS …
PricingOpen source
Websitegithub.com
Facts checked22 Sep 2026

PWM integrations

PWM lists 7 integrations on its own site.

  • LDAP
  • Microsoft Active Directory
  • OpenLDAP
  • eDirectory
  • OAuth
  • CAS
  • REST API

Alternatives to PWM

See all PWM alternatives →

Also Ranked In

PWM is ranked in 2 of our directories.

Used PWM? Be the first to review it

The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used PWM for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.

Write a reviewTwo minutes · verified accounts only · read by an editor before it appears

Reviews come only from verified accounts. Sign in or create an account first — your e-mail is never shown.

Your rating

0 characters · at least 80, up to 3,000

Posted from your verified account. Reviews appear after an editor reads them, usually within two working days.

Featured on iTechGuides

Featured on iTechGuides — PWM 6.8/10

PWM is listed in our Active Directory Management Software directory. Add the badge to your site — it links back to this page.

<a href="https://www.itechguides.com/products/pwm/"><img src="https://www.itechguides.com/best/badge/pwm.svg" alt="Featured on iTechGuides" width="230" height="46"></a>

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated · How we research and update