Strongbox
strongboxsafe.comKeePass-compatible password manager for iPhone, iPad and Mac that keeps the vault in a local file you sync yourself.
- Owner
- Undisclosed
- Based in
- Unknown
- Founded
- Unknown
- Type
- Local vault file
- Free plan
- Yes
- Core KeePass-compatible features for non-commercial use
- Pro Yearly, per year
- $24.99
- renewal price not stated
- Latest audit
- None published
- No named, dated audit found
- On record
- No incidents found
- in our research
- No published third-party audit found
- The vault is a local file you control
- Has a free plan
How Strongbox encrypts your vault
From Strongbox's security documentation, next to the other 22. Strongbox is outlined.
End-to-end encrypted
Encrypted on your device before it's stored (like 20 others)
Cipher: AES, ChaCha20 or Twofish (KeePass formats)
Yes 21
Optional 1
No 1
Website addresses encrypted
Encrypted with the rest of the item (like 18 others)
Encrypted 19
Readable 1
Not documented 3
Item names encrypted
Titles and folder names are encrypted (like 16 others)
Encrypted 17
Readable 1
Not documented 5
Memory-hard password hashing
Not documented (16 of 23 document it)
Memory-hard 3
Not memory-hard 11
Not documented 7
Doesn't apply 2
Extra secret key
Your master password is the only secret (like 13 others)
No Secret Key by default; an optional key file can be added.
Yes 1
No 14
Not documented 4
Doesn't apply 4
What you'll pay
In USD, from Strongbox's own pricing page, checked 2026-10-16.
Free plan
Yes
Core KeePass-compatible features for non-commercial use
Pro Yearly
$24.99/yr
or $2.99 billed monthly
After the first year
Not stated
Check the price at checkout
Pro via Apple Family Sharing
$24.99/yr
up to 6 people
- Business:
- Unknown
- Free trial:
- 90 days
- Money-back:
- Unknown
- One-time purchase:
- Unknown
Audits
Independent security reviews, newest first.
No published third-party audit with a named auditor found for Strongbox.
- Open-source appsSome appsSome apps
- Open-source serverNot applicableNot applicable
- Run it yourselfLocal vault fileLocal vault file
- Bug bountyNot verifiedNot verified
Incidents
Breaches, stolen data and serious flaws on record.
None found in our research. Apps, browsers and passkeys
- WindowsNoNo
- macOSYesYes
- LinuxNoNo
- iPhoneYesYes
- AndroidNoNo
- Web vaultNot verifiedNot verified
- ChromeYesYes
- FirefoxYesYes
- SafariYesYes
- EdgeNot verifiedNot verified
- Saves and fills passkeysYesYes
- Unlock the vault with a passkeyNot verifiedNot verified
- Passkey import and export (CXP)Not verifiedNot verified
Sharing, recovery and extras
- Shared vaultsNoNo
- Share with non-usersNot verifiedNot verified
- Emergency accessNoNo
- 2FA codes built inYesYes
- Breach monitoringYesYes
- Email aliasesYesYes
- File attachmentsYesYes
- SSH keys and agentYesYes
- Command lineNot verifiedNot verified
- Encrypted exportYesYes
- Works offlineYesYes
- Authenticator-app 2FANot applicableNot applicable
- Security key for 2FAYesYes
- Password health reportYesYes
- CSV exportYesYes
Where it's a pick
Compare Strongbox with
All sources for Strongbox (9)
- Research summary of the vendor's pages (no single link)AI-assisted research, spot-checked, checked 2026-10-16
- About StrongboxVendor, checked 2026-10-16
- Strongbox support: cryptographyVendor, checked 2026-10-16
- Strongbox support: recommended encryption settingsVendor, checked 2026-10-16
- Research summary of the vendor's pages (no single link)AI-assisted research, spot-checked, checked 2026-10-16
- Strongbox on GitHubSource code, checked 2026-10-16
- StrongboxVendor, checked 2026-10-16
- Strongbox on the App StoreVendor, checked 2026-10-16
- Strongbox support: passkeysVendor, checked 2026-10-16