Lemonade icon

Lemonade

Lemonade is an open-source password manager for developers to store passwords, .env files, API keys, and project secrets. Self-host on Firebase or use a hosted service.

Lemonade

Overview

Lemonade is an open-source password manager for developers that combines a standard credential vault with a workflow for managing project secrets. The homepage positions it around passwords, .env files, API keys, and other sensitive data that developers keep across apps and codebases.

The product can be self-hosted on a user’s own Firebase project or used as a hosted service. The site says both paths include the same core product, with open-source code under AGPLv3, browser extensions, encrypted storage, and tools for importing, searching, sharing, and recovering secrets.

Features

AES-256-GCM encryption

Store passwords, API keys, .env files, and other secrets in a vault encrypted with AES-256-GCM, with integrity verification mentioned on the homepage.

Env Vault

Import whole project folders and automatically detect files such as .env, .npmrc, credentials.json, AWS, GCP, and Firebase credentials, plus CLAUDE.md and AGENTS.md context files.

Browser extensions

Use Chrome and Firefox extensions for one-click autofill when signing in to sites or managing credentials.

Installable PWA

Install Lemonade as a PWA from the browser so it can be used without an app store download.

Sharing and emergency access

Share passwords securely with team members and set up emergency access with configurable waiting periods.

Import and export

Import from Bitwarden, 1Password, or CSV, and export data anytime to reduce lock-in.

Use cases

  • Store and sign in to accounts

    Keep personal and team credentials in one vault while using browser autofill and passkeys for day-to-day logins.

  • Manage project secrets

    Import a project folder and let Env Vault detect common secret files and developer context files before exporting them back to .env format when needed.

  • Share access safely

    Store shared credentials, grant access to teammates, and use emergency access for contingency scenarios with a waiting period.

  • Migrate without lock-in

    Move from another password manager by importing Bitwarden, 1Password, or CSV data, then export later if your setup changes.

  • Run your own deployment

    Use self-hosted deployment on your own Firebase project when you want the data and infrastructure to stay under your control.

Pros and Cons

Pros

  • Focuses on developer workflows such as .env files, API keys, and project-folder import.
  • Supports both self-hosting and a hosted option, with source code available under AGPLv3.
  • Includes Chrome and Firefox extensions, a PWA, and built-in tools for search, sharing, notes, TOTP, and password history.
  • Offers export and import paths from Bitwarden, 1Password, and CSV to reduce lock-in.

Cons

  • The pricing page is unavailable on the site, so plan details are limited to the homepage.
  • The site does not provide full documentation for integrations, admin controls, or hosting setup on the pages collected.

FAQ

What is Lemonade best suited for?

Lemonade is designed for passwords, secrets, and developer-oriented files such as .env files, API keys, credentials.json, and AI context files. The homepage does not describe it as a general-purpose consumer password manager.

Can I import or export my data?

The homepage says Lemonade can import from Bitwarden, 1Password, or CSV, and it also offers export so data is not locked in.

Does Lemonade work in the browser?

Yes. The homepage says Lemonade includes Chrome and Firefox extensions for one-click autofill, and it also has an installable PWA.

Is Lemonade self-hosted or hosted?

Yes. The site says you can self-host on your own Firebase project for free, or choose the hosted version for a one-time $29 payment.

Does Lemonade support teams?

The homepage mentions team-oriented features including secure sharing and emergency access, but it does not provide detailed team administration or permission-model documentation.

Quick Facts

Category
Password manager
Primary audience
Developers
Platform
Web app, Chrome extension, Firefox extension, PWA
Hosting options
Self-host on Firebase or use hosted service
Open source
AGPLv3
Source domain
lemonadepass.app