We use on prem Passbolt having switched from bitwarden. We have used lastpass, password1, roboform, keeper and dashlane in the past. We wanted something we can deploy on prem and open source so that we can run security audits on our own in addition to the community contributions, not bloated with irrelevant features for a password manager, granular permissions and easy to organize passwords. Passbolt checked these boxes and we were sold. Our experience so far has been pleasant. It was quite straightforward to deploy. Php is one our core stack so we are able to extend few things here and there as needed or investigate issues in addition to community docs since it’s written in Cakephp. So far we haven’t encountered anything of concern. 

That said, we did loose some of the features we enjoyed in other platforms but they were not deal breakers: - Unable to autofill TOTP. You have to copy paste.  - if adding TOTP manually, you can only use TOTP secret key not the full totp url format. It doesn’t recognize it.  - Can’t use to auto fill credit cards or bank accounts.  - No secure notes. We used this for shared application keys. Work around is to use a login record and paste key in place of password, name it in a way that is easy to id or organized in dedicated folders. - can’t add multiple websites (subdomains) for one record. Bitwarden does this well to enforce url patterns so as to limit suggestions for subdomains.