KeePass
keepass.infoFree, open-source Windows password manager by Dominik Reichl that keeps everything in a local encrypted database file.
- Owner
- Open-source project
- Based in
- Germany
- Founded
- 2003
- Type
- Local vault file
- Free plan
- Yes
- Free and open source; no limits on items or devices; no built-in sync
- Personal plan
- No paid plan
- Latest audit
- None published
- No named, dated audit found
- On record
- No incidents found
- in our research
- No published third-party audit found
- All apps are open source
- The vault is a local file you control
- Has a free plan
How KeePass encrypts your vault
From KeePass's security documentation, next to the other 22. KeePass is outlined.
End-to-end encrypted
Encrypted on your device before it's stored (like 20 others)
Cipher: AES-256, ChaCha20 or Twofish
Yes 21
Optional 1
No 1
Website addresses encrypted
Encrypted with the rest of the item (like 18 others)
Encrypted 19
Readable 1
Not documented 3
Item names encrypted
Titles and folder names are encrypted (like 16 others)
The whole database is encrypted, including groups and entries.
Encrypted 17
Readable 1
Not documented 5
Memory-hard password hashing
Not documented (16 of 23 document it)
Memory-hard 3
Not memory-hard 11
Not documented 7
Doesn't apply 2
Extra secret key
Your master password is the only secret (like 13 others)
No Secret Key by default; an optional key file can be added.
Yes 1
No 14
Not documented 4
Doesn't apply 4
What you'll pay
In USD, from KeePass's own pricing page, checked 2026-10-16.
Free plan
Yes
Free and open source; no limits on items or devices; no built-in sync
Personal plan
None
After the first year
—
Family plan
None
- Business:
- None
- Free trial:
- not-applicable
- Money-back:
- not-applicable
Audits
Independent security reviews, newest first.
No published third-party audit with a named auditor found for KeePass.
- Open-source appsAll appsAll apps
- Open-source serverNot applicableNot applicable
- Run it yourselfLocal vault fileLocal vault file
- Bug bountyNot verifiedNot verified
Incidents
Breaches, stolen data and serious flaws on record.
None found in our research. Apps, browsers and passkeys
- WindowsYesYes
- macOSYesYes
- LinuxYesYes
- iPhoneNoNo
- AndroidNoNo
- Web vaultNoNo
- ChromeNot foundNot found
- FirefoxNot foundNot found
- SafariNot foundNot found
- EdgeNot foundNot found
- Saves and fills passkeysNot verifiedNot verified
- Unlock the vault with a passkeyNot verifiedNot verified
- Passkey import and export (CXP)Not verifiedNot verified
Sharing, recovery and extras
- Shared vaultsNoNo
- Share with non-usersNot verifiedNot verified
- Emergency accessNoNo
- 2FA codes built inNot foundNot found
- Breach monitoringNot verifiedNot verified
- Email aliasesNot verifiedNot verified
- File attachmentsYesYes
- SSH keys and agentNot verifiedNot verified
- Command lineYesYes
- Encrypted exportYesYes
- Works offlineYesYes
- Authenticator-app 2FANot applicableNot applicable
- Security key for 2FANot verifiedNot verified
- Password health reportNot verifiedNot verified
- CSV exportYesYes
Compare KeePass with
All sources for KeePass (12)
- Research summary of the vendor's pages (no single link)AI-assisted research, spot-checked, checked 2026-10-16
- Wikipedia: KeePassNews or reference, checked 2026-10-16
- KeePass help: securityVendor, checked 2026-10-16
- KeePass featuresVendor, checked 2026-10-16
- Research summary of the vendor's pages (no single link)AI-assisted research, spot-checked, checked 2026-10-16
- KeePass help: KDBX file formatVendor, checked 2026-10-16
- KeePass on SourceForgeSource code, checked 2026-10-16
- KeePass Password SafeVendor, checked 2026-10-16
- KeePass downloadsVendor, checked 2026-10-16
- KeePass editions comparedVendor, checked 2026-10-16
- Research summary of the vendor's pages (no single link)AI-assisted research, spot-checked, checked 2026-10-16
- Research summary of the vendor's pages (no single link)AI-assisted research, spot-checked, checked 2026-10-16