KeePassXC

A cross-platform, offline password manager that stores everything in a single encrypted database file you control.

Visit official website

Source code: github.com/keepassxreboot/keepassxc. Flink is not affiliated with the KeePassXC project.

What it is

KeePassXC keeps your passwords, usernames, notes and attachments in one encrypted file, protected by a master password and, optionally, a key file or hardware key. There is no account and no cloud service: the database lives wherever you put it. If you want it on several devices, you can sync the file yourself with any file-sync tool.

The app includes a strong password generator, a browser extension for filling in logins, support for time-based one-time codes, an SSH agent integration and a health report that flags weak or reused passwords. Because it uses the widely supported KDBX format, the same database can be opened by many other KeePass-compatible apps, including mobile ones.

Key features

Browser integration

The official browser extension connects to the desktop app and fills in usernames and passwords on websites. The connection must be enabled in the app's settings and approved for each browser, so no website can read your database without your permission.

Auto-Type

Auto-Type simulates keystrokes to enter credentials into any application, not just browsers. Each entry can have its own typing sequence, which helps with unusual login forms or desktop programs.

Extra protection for the database

In addition to the master password, a database can require a key file or a hardware security key using challenge-response. You can also increase the time needed to unlock the database, which makes guessing attacks much slower.

Password health and one-time codes

A built-in health check flags weak, reused and old passwords, so you know which accounts to update first. KeePassXC can also store the secrets for time-based one-time codes, although keeping them in the same database as your passwords is a trade-off worth thinking about.

Getting started

Create a new database, choose a long master password you will not forget and write it down somewhere safe. Save the file to a folder you back up or sync. If you need your passwords on a phone, install a KeePass-compatible mobile app from your platform's official store and open the same file.

Who it is for

KeePassXC suits people who want full control over their password data and prefer not to depend on an online service. It is also a good choice for keeping a separate, offline vault for especially sensitive credentials.

Pros and cons

Alternatives

If you want automatic sync across all devices, consider Bitwarden. To encrypt whole drives or folders of files, use VeraCrypt.