Skip to content
Password Manager Manager
KeePassXC logo

KeePassXC

keepassxc.org

Free, open-source desktop password manager from a community project that keeps the vault in a local KDBX file you sync yourself.

Owner
Open-source project
Based in
No company
Founded
Unknown
Type
Local vault file
Free plan
Yes
Free and open source; unlimited items and devices; you manage sync and backup
Personal plan
No paid plan
Latest audit
Zaur Molotnikov, 2023
KeePassXC 2.7.4, public report
On record
No incidents found
in our research
  • Audited by Zaur Molotnikov in 2023, report public
  • All apps are open source
  • The vault is a local file you control
  • Has a free plan

How KeePassXC encrypts your vault

From KeePassXC's security documentation, next to the other 22. KeePassXC is outlined.

  • End-to-end encrypted

    Encrypted on your device before it's stored (like 20 others)

    Cipher: AES-256, ChaCha20 or Twofish (user-selectable)

  • Website addresses encrypted

    Encrypted with the rest of the item (like 18 others)

  • Item names encrypted

    Titles and folder names are encrypted (like 16 others)

    The whole .kdbx file is encrypted.

  • Memory-hard password hashing

    Not documented (16 of 23 document it)

  • Extra secret key

    Your master password is the only secret (like 13 others)

    No Secret Key by default; an optional key file and hardware challenge-response can be added.

What you'll pay

In USD, from KeePassXC's own pricing page, checked 2026-10-16.

Free plan

Yes

Free and open source; unlimited items and devices; you manage sync and backup

Personal plan

None

After the first year

—

Family plan

None

Business:
None
Free trial:
not-applicable
Money-back:
not-applicable

Audits

Independent security reviews, newest first.

  1. 2023 Zaur Molotnikov

    Scope: KeePassXC 2.7.4. Report is public.

  • Open-source appsAll appsAll apps
  • Open-source serverNot applicableNot applicable
  • Run it yourselfLocal vault fileLocal vault file
  • Bug bountyNot verifiedNot verified

Certifications: ANSSI CSPN

Source code

Incidents

Breaches, stolen data and serious flaws on record.

None found in our research.

Apps, browsers and passkeys

  • WindowsYesYes
  • macOSYesYes
  • LinuxYesYes
  • iPhoneNoNo
  • AndroidNoNo
  • Web vaultNoNo
  • ChromeYesYes
  • FirefoxYesYes
  • SafariNot verifiedNot verified
  • EdgeYesYes
  • Saves and fills passkeyspartialpartial
  • Unlock the vault with a passkeyNoNo
  • Passkey import and export (CXP)Not verifiedNot verified

Sharing, recovery and extras

  • Shared vaultsNoNo
  • Share with non-usersNot foundNot found
  • Emergency accessNot foundNot found
  • 2FA codes built inYesYes
  • Breach monitoringNoNo
  • Email aliasesNot foundNot found
  • File attachmentsYesYes
  • SSH keys and agentYesYes
  • Command lineYesYes
  • Encrypted exportNot verifiedNot verified
  • Works offlineYesYes
  • Authenticator-app 2FANot applicableNot applicable
  • Security key for 2FAYesYes
  • Password health reportYesYes
  • CSV exportYesYes

Where it's a pick

Best free password manager

Free and open source with no limits at all, because there's no account: your vault is a file. You handle syncing and backups yourself.

Best open-source password manager

Open-source desktop app for Windows, macOS and Linux that keeps your vault in a local KeePass file. Nothing to host, nothing in a company's cloud.

All sources for KeePassXC (8)