jadaptive/password-express repository overview

⁠Password Express

Free self-service password reset for Active Directory. No user limits.

Password Express gives users a simple, secure way to reset forgotten Active Directory passwords and unlock their accounts without contacting the help desk.

Deploy it yourself with Docker, connect it to Active Directory, and give users a browser-based self-service password reset experience protected by multi-factor authentication.

No per-user licensing. No artificial user limits.

⁠What can it do?

Password Express enables users to:

• Reset forgotten Active Directory passwords
• Unlock locked Active Directory accounts
• Change passwords securely through a browser
• Verify their identity before performing password operations
• Use multi-factor authentication during account recovery

For IT teams, that means fewer password-related help desk calls, less employee downtime, and a self-hosted password recovery service that remains under your control.

⁠Why Password Express?

⁠Free and unlimited

Run Password Express for as many users as you need.

There are no artificial user limits and no registration or trial period. Download it, deploy it and use it.

⁠Reduce password reset tickets

Forgotten passwords and locked accounts shouldn't require somebody from IT to intervene.

Password Express lets users resolve common password and account problems themselves while maintaining appropriate identity verification.

⁠Built for Active Directory

Password Express is designed for organisations using Microsoft Active Directory, providing self-service password reset (SSPR) and account recovery directly against your existing directory.

⁠Self-hosted

Password Express runs inside your own infrastructure. You retain control over your directory integration, authentication and user data rather than handing password recovery to another cloud service.

⁠Multi-factor authentication

Protect password resets and account recovery with additional identity verification rather than relying solely on information an attacker may already know.

⁠Who is it for?

Password Express is ideal for organisations that:

• Use Microsoft Active Directory
• Want to reduce password-related help desk tickets
• Need self-service password reset without per-user licensing
• Prefer self-hosted infrastructure
• Want MFA-protected account recovery
• Need an SSPR solution that can scale without artificial user limits

⁠Docker Setup

Run Password Express with MongoDB using Docker Compose.

⁠Prerequisites

• Docker
• Docker Compose

⁠Quick Start

Create a docker-compose.yml using the Compose file below and start Password Express:

docker compose -f "docker-compose.yml" up -d

This starts:

• MongoDB 8.3.8 on port 56017 with a replica set enabled
• Password Express on HTTPS port 56443
• Windows Connect on port 56222

Access the Password Express web UI at:

https://localhost:56443

Your browser may display a certificate warning when accessing a new local installation over HTTPS.

⁠Stop

To stop Password Express and MongoDB:

docker compose -f "docker-compose.yml" down

⁠Configuration

Edit docker-compose.yml to change ports or other settings.

Key environment variables for the Password Express container:

The supplied Docker Compose configuration overrides the MongoDB URL so Password Express connects to the MongoDB container using:

mongodb://mongodb:56017

⁠Volumes

These are persisted as Docker volumes so configuration survives container restarts.

⁠Data Persistence

MongoDB data is stored in the mongodb_data Docker volume.

To reset all data:

docker compose -f "docker-compose.yml" down
docker volume rm nodal-community_mongodb_data

⁠Docker Compose File

services:
  mongodb:
    image: mongo:8.3.8
    container_name: password-express-mongodb
    command: ["--replSet", "rs0", "--bind_ip_all", "--port", "56017"]
    networks:
      - password-express-net
    volumes:
      - mongodb_data:/data/db

  mongodb-init:
    image: mongo:8.3.8
    container_name: password-express-mongodb-init
    networks:
      - password-express-net
    depends_on:
      - mongodb
    restart: "no"
    entrypoint: >
      bash -c "
        echo 'Waiting for MongoDB to be ready...';
        until mongosh --host mongodb --port 56017 --quiet --eval 'db.runCommand({ping:1})' >/dev/null 2>&1; do
          sleep 1;
        done;
        echo 'Initialising replica set...';
        mongosh --host mongodb --port 56017 --quiet --eval '
          try { rs.status() }
          catch (err) { rs.initiate({_id:\"rs0\",members:[{_id:0,host:\"mongodb:56017\"}]}) }
        ';
        echo 'MongoDB replica set ready.';
        sleep 99999d
      "

  password-express:
    image: jadaptive/password-express:stable
    container_name: password-express
    networks:
      - password-express-net
    ports:
      - "56443:56443/tcp"
      - "56222:56222/tcp"
    depends_on:
      - mongodb-init
    environment:
      - PASSEX_HTTPS_SERVER_PORT=56443
      - PASSEX_MONGODB_URL=mongodb://mongodb:56017
      - PASSEX_WINDOWS_CONNECT_PORT=56222
    volumes:
      - password_express_conf:/opt/password-express/conf
      - password_express_conf_d:/opt/password-express/conf.d
      - password_express_plugins:/opt/password-express/user-plugins      

networks:
  password-express-net:

volumes:
  mongodb_data:
  password_express_conf:
  password_express_plugins:
  password_express_conf_d:

⁠Documentation & Community

Full documentation is available at:

https://docs.jadaptive.com⁠

Learn more about Jadaptive and our other free, self-hosted infrastructure and security software:

https://jadaptive.com⁠

Questions, feedback and community support:

https://www.reddit.com/r/jadaptive/⁠

⁠More from Jadaptive

Password Express is part of Jadaptive's growing collection of free, self-hosted infrastructure and security software, including:

• Nodal VPN
• Aegis Gateway
• DropPort
• Maverick SSH MCP
• SSH Teams

Explore the Jadaptive Docker Hub namespace to discover more.

The software is the gift. Our expertise is the paywall.

Use it. Scale it. No artificial limits.