KeePassXC is a secure and open-source password manager. Your passwords remain encrypted at all times and no data is stored on remote servers, so you stay in full control of your data. No cloud, no ads, no subscriptions.

What's the difference between KeePassXC and KeePass?

KeePassXC is a fork from the original KeePass project as both are open-source applications. KeePassXC is written in C++, while KeePass is written in C#. This translates to KeePassXC running natively in all desktop platforms with the best integration possible. KeePassXC also provides extra features like support for AES, Twofish or ChaCha20 encryption.

Is KeePassXC better than LastPass?

KeePassXC shares many features and functionality also offered in LastPass. The biggest difference is that KeePassXC is open-source and anyone can verify the transparency of the service. LastPass offers better cross-platform support with mobile apps, while KeePassXC is only available for Windows, macOS and Linux.

Why do you need a password manager?

Having a password manager allows you to store all your passwords in one safe place. Instead of having to remember dozens of usernames and passwords, a password manager allows you to have a single username and password to access all others. Most password managers have additional features like strong password generation, cloud storage, and the ability to store other sensitive material like URLs and personal notes.

Is KeePassXC secure?

Yes, KeePassXC uses AES256 or the Twofish block cipher to encrypt your passwords, so it is considered extremely safe so long as you use a strong master password. Additionally, being open-source there is a large community behind KeePassXC that tests and improves the application constantly.

Encrypted

  • The complete database is always encrypted with the industry-standard AES (alias Rijndael) encryption algorithm using a 256 bit key. KeePassXC uses a database format that is compatible with KeePass Password Safe. Your wallet works offline and requires no Internet connection.

Cross-Platform

  • KeePassXC is a community fork of KeePassX, the cross-platform port of KeePass for Windows. Every feature works cross-platform and was thoroughly tested on multiple systems to provide users with the same look and feel on every supported operating system. This includes the beloved Auto-Type feature.

Open Source

  • The full source code is published under the terms of the GNU General Public License.
  • We see open source as a vital prerequisite for any security-critical software product. For that reason, KeePassXC is and always will be free as in freedom (and in beer). Contributions by everyone are welcome!

Features

  • Secure storage of passwords and other private data with AES, Twofish or ChaCha20 encryption
  • Cross-platform, runs on Linux, Windows and macOS without modifications
  • File format compatibility with KeePass2, KeePassX, MacPass, KeeWeb and many others (KDBX 3.1 and 4.0)
  • SSH Agent integration
  • Auto-Type on all supported platforms for automagically filling in login forms
  • Key file and YubiKey challenge-response support for additional security
  • TOTP generation (including Steam Guard)
  • CSV import from other password managers (e.g., LastPass)
  • Command line interface
  • Stand-alone password and passphrase generator
  • Password strength meter
  • Custom icons for database entries and download of website favicons
  • Database merge functionality
  • Automatic reload when the database was changed externally
  • Browser integration with KeePassXC-Browser for Google Chrome, Chromium, Vivaldi, and Mozilla Firefox.

What's New

  • Allow adjusting application font size [#11567]
  • Add Proton Pass importer [#11197]
  • Support KeePass2 TOTP settings [#11229]
  • Add New/Preview Entry Attachments dialog and functionality [#11637, #11699, #11650]
  • Add database name, color, and icon options for unlock view [#10819, #11725]
  • Show entry background color as column [#6798]
  • Use icons for password strength [#9844]
  • Add "Group Full Path" column in entry view [#10278]
  • Passphrase "MIXED case" Type [#11255]
  • Allow deleting extension plugin data from Browser Statistics [#11218]
  • Add --minimized option to keepassxc [#11693]
  • Implement T-CONV and T-REPLACE-RX entry placeholders [#11453]
  • Option to disable opening browser when URL field double-clicked [#11332]
  • Overhaul action states and add icons to toolbar [#11047]
  • Show character count in password generator dialog [#10940]
  • Add ability to expire entries from context menu [#8731]
  • Add copy field shortcuts to Auto-Type select dialog [#11518]
  • Passkeys: Add support for selecting group on creation [#11260]
  • Browser: Refactor Access Control Dialog [#9607]
  • Browser: Add support for URL wildcards and exact URL [#9835, #11752]
  • Browser: Allow groups to restrict by browser integration key [#9852]
  • CLI: Add -d dry-run shortcut to merge command [#11192]
  • CLI: HTML export [#11590]
  • macOS: Add option to disable database lock when switching user [#9707]
  • SSH Agent: Implement feature to clear all identities [#10649]

Fixes

  • Major enhancements to documentation [#11745, #10875]
  • Various UI and style fixes [#11535, #11672, #11511, #11445, #11426, #11273, #11455, #11321, #11594, #11539, #11351, #11354, #10748, #11602, #11303, #11291, #10091, #9417]
  • Various improvements to tags [#11676, #11652, #11625]
  • Reset splitter sizes on database unlock [#11014]
  • Remember sort order in Auto-type popup dialog [#9508]
  • Fix database password clearing when modifying key file / hardware key [#11001]
  • Fix issues with reloading and handling of externally modified db file [#10612]
  • Support passkeys with Bitwarden import [#11401]
  • Fix various quirks with CSV import [#11787]
  • Show Auto-Type select dialog even if window title is empty [#11603]
  • Refactor hardware key code to avoid deadlock [#11703, #10872]
  • Show a clear error if hardware key is found slots are not configured [#11609]
  • Fix signal/slot disconnect when opening import wizard [#11039]
  • Fix setting window title as modified [#11542]
  • Fix assert hit when viewing entry history [#11413]
  • Fix multiple crashes on Linux [#11513]
  • Fix backup file path time substitution [#10834]
  • Prevent long-running threads from deadlocking the program with only 1 CPU [#11155]
  • Hide the menubar when menus lose focus (if toggled off) [#11355, #11605]
  • CLI: Restore the original codepage on windows [#11470]
  • Passkeys: Various fixes [#10934, #10951]
  • Browser: Fix cancel with database unlock dialog [#11435]
  • Browser: Resolve references in Access Confirm dialog [#11055]
  • SSH Agent: Add timeout to streams to prevent deadlock [#11290]
  • macOS: Replace legacy code for screen recording permissions [#11428]
  • macOS: Implement Secure Input Mode [#11623]
  • macOS: Fix showing ambigious name in settings [#11373]
  • macOS: Fix copy-to-clipboard shortcut in entry preview widget [#10966]
  • Linux: Prevent multiple lock requests [#11306]
  • Snap: Prevent need for snap helper script to configure browser extension [#10924]
  • Windows: Detect outdated VC Redist with MSI installer [#11469]
  • Windows: Additional exclusion fields for clipboard [#11521]