Secure Server Room
Password Express Logo

Secure, On-Premise
Self-Service Password Reset

Password Express is a free on-premises virtual appliance that provides Self-Service Password Reset (SSPR) for Active Directory, Microsoft Entra ID, and Google Workspace. It supports unlimited users with zero enrollment required.

Status
Windows Integration
Active Directory
Microsoft Entra ID
Google Workspace
Breach Protection

Community Appliance
Who Needs ManageEngine or Microsoft Entra Self-Service?

Password Express is a free on-premises virtual appliance that provides enterprise-grade Self-Service Password Reset (SSPR) without enterprise licensing costs.

Forever Free

Password Express Community Edition is free for unlimited users. There are no annual licensing fees, per-user costs, or hidden charges for internal business operations.

Lightweight & Fast

Password Express is a lean on-premises virtual appliance that runs on minimal hardware (2 vCPUs, 4GB RAM). It is significantly more efficient than bloated alternatives like ManageEngine or Microsoft Identity Manager.

Zero Bloat

Password Express focuses exclusively on Self-Service Password Reset (SSPR). It does not include unnecessary helpdesk modules, ticketing systems, or complex identity management features.

Zero Enrolment Self-Service Password Reset (SSPR)

The Problem with Traditional SSPR

Most Self-Service Password Reset (SSPR) tools require users to log in and register their contact details before they are allowed to reset a forgotten password. This creates a fatal paradox: if users get locked out on day one, the SSPR tool is completely useless.

Password Express eliminates this adoption barrier by implementing Zero Enrolment—the system instantly maps verified email addresses and mobile phone numbers directly from your existing directory (Active Directory, Microsoft Entra ID, or Google Workspace).

Deployment: 3 Steps

1
Deploy
Import the on-premises virtual appliance onto your local hypervisor (VMware, Hyper-V) or run as a Docker container.
2
Sync
Connect your identity source—Active Directory, Microsoft Entra ID (Azure AD), or Google Workspace—in under 5 minutes.
3
Reset
Users can reset passwords immediately using Multi-Factor Authentication (MFA) via SMS, Email OTP, or TOTP.

Notification Options

Password Express includes the Jadaptive Cloud Notification Service for delivering One-Time Passwords (OTP) without requiring third-party API integration.

100 Free Credits
Test user resets instantly.
Bring Your Own SMTP
Use your existing email server for free.
Bring Your Own Twilio
Use your own SMS gateway for free.

Advanced Multi-Factor Authentication (MFA)

Supported MFA Methods

Password Express supports a comprehensive range of Multi-Factor Authentication (MFA) methods for Self-Service Password Reset (SSPR):

  • Email OTP — Instant verification code delivery to verified email addresses
  • SMS OTP — Text message verification codes via Twilio or Jadaptive Cloud
  • TOTP — Time-based one-time passwords (Google Authenticator, Authy, Microsoft Authenticator)
  • Hardware Keys — YubiKey, FIDO2/WebAuthn (coming soon)

Breach Protection

When users reset their passwords, Password Express automatically checks the new password against billions of compromised credentials in the Have I Been Pwned database. This prevents users from setting passwords that have been exposed in previous data breaches.

Blocked: Password123

This password has been seen in 4,000+ data breaches and cannot be used.

Universal Directory Integration (Identity Bridge)

Active Directory

Password Express provides a full on-premises identity bridge for Active Directory (AD DS). The appliance communicates directly with your Domain Controllers locally. Your password hashes and user data never traverse the public internet.

Microsoft Entra ID

Password Express supports cloud-native integration with Microsoft Entra ID (formerly Azure AD). It is ideal for hybrid identity scenarios and cloud-first organizations using Microsoft 365.

Google Workspace

Password Express provides full support for Google Workspace (formerly G Suite) directory sync. It synchronizes users and credentials directly from your Google Admin console.

Data Center
ENTERPRISE EDITION

Built for MSPs & Large Organizations

Password Express Enterprise Edition supports multi-tenancy, allowing Managed Service Providers (MSPs) to deploy a single on-premises virtual appliance and serve multiple distinct Active Directory environments securely with complete data isolation.

Contact Sales for MSP Pricing

Simple, Transparent Licensing

From small businesses to large MSPs, Password Express has a licensing model that fits your requirements.

Community Appliance

Perfect for small businesses

Free

Forever free for unlimited users

  • Unlimited Users
  • Active Directory, Google Workspace, or Microsoft Entra ID
  • Advanced 2FA (MFA)
  • Password Breach Protection
  • Password Reminders
  • Community Support (Reddit)
POPULAR

Professional License

For growing organizations

Custom

Per user / year pricing

  • Everything in Community
  • Custom Branding (White-label)
  • Windows Credential Provider
  • Priority Email Support
  • SLA Guarantees

Enterprise License

For large MSPs & enterprises

Custom

Volume licensing available

  • Everything in Professional
  • Multi-Tenancy (Unlimited Tenants)
  • Dedicated Account Manager
  • 24/7 Phone Support
  • Custom Development

Password Express Quick Start

Get up and running in minutes with Docker

Docker Setup

Run the Password Express server with MongoDB using Docker Compose.

Prerequisites

  • Docker and Docker Compose

Quick Start

See compose file below.

docker compose -f "docker-compose.yml" up -d

This starts:

  • • MongoDB 7 on port 56017 (with replica set enabled)
  • • Password Express on port 56443

Access the web UI at: https://localhost:56443

Full Docker Instructions
Download Community Appliance

No form-fills, no sales chase, unlimited users for internal use.

Frequently Asked Questions

Technical questions about the on-premises Password Express appliance.

Do Active Directory passwords leave my network?

No. Password Express is an on-premises virtual appliance that communicates directly with your Domain Controllers locally. Your password hashes and user data never traverse the public internet to Jadaptive servers. The appliance is deployed within your security perimeter.

What are the system requirements for the appliance?

The Password Express appliance is lightweight and runs on minimal resources: 2 vCPUs, 4GB RAM recommended. It can be deployed as a virtual machine (OVA, VMware, Hyper-V) or as a Docker container on any standard server.

Can I upgrade from Community to Professional later?

Yes. Upgrading is seamless—you apply a new license key to your existing appliance to unlock Professional features like custom white-label branding and priority support, without reinstalling.

Why is the Password Express Community Edition free?

Password Express follows a "software is the gift, expertise is the paywall" model. The Community Edition is fully featured with unlimited users for internal business use. Jadaptive generates revenue from Professional and Enterprise tier support, SLA-backed services, and multi-tenant licensing for MSPs.

Can I use the Community Edition in an air-gapped environment?

No. The Community Edition requires an outbound internet connection for a daily cryptographic handshake with Jadaptive's licensing server. For completely offline or air-gapped deployments, you must purchase a Professional or Enterprise "Static" license, which disables this phone-home requirement.

Does Jadaptive have access to our passwords or directory data?

No. Password Express runs entirely within your security perimeter as an on-premises appliance. Your Active Directory, Microsoft Entra ID, or Google Workspace database remains 100% under your physical control. Jadaptive never sees, stores, or intercepts your passwords or user data. The daily licensing check only transmits high-level metadata (active user count, directory type).

How do I unlock custom branding on the free Community Edition?

Custom branding is typically a premium feature. However, you can unlock it on the Community Edition for free by sharing your Password Express experience on LinkedIn. Once you paste your public post URL containing your unique verification code into the appliance, the on-premise scraper verifies it and automatically enables custom branding.

Can MSPs use the Community Edition for their clients?

No. Under the EULA, the Community Edition is strictly licensed for internal business operations only. MSPs looking to host, manage, or resell Self-Service Password Reset services for third-party clients must upgrade to the Enterprise Edition, which supports multi-tenancy and white-labeling.

How does Zero Enrolment work? Are there notification costs?

Zero Enrolment automatically maps existing phone numbers and emails directly from your synced directory (AD, Microsoft 365, or Google Workspace), eliminating manual registration. The appliance includes 100 free Jadaptive Cloud Notification credits. When those run out, you can purchase low-cost credit top-ups (~$0.08 per credit) or configure your own SMTP server or Twilio account for free.

Does the Community Edition support legacy security questions?

No. Security questions are an outdated and vulnerable authentication method. The Community Edition is secure-by-design and focuses strictly on modern Multi-Factor Authentication (MFA): OTP, TOTP, and hardware keys. Support for legacy security questions is reserved for Professional and Enterprise tiers.

What support is included with the free Community Edition?

The Community Edition is self-supported via our official subreddit r/jadaptive, where Jadaptive engineers and community members offer best-effort assistance. For mission-critical deployments requiring guaranteed SLAs and direct engineering support, Professional and Enterprise tiers are available.

Can users reset passwords from the Windows login screen?

Yes, but this requires the Windows Credential Provider integration, which is a Professional and Enterprise tier feature. This integration places a secure password reset button on the Windows login or lock screen, allowing locked-out users to reset credentials without needing another device.