KeePass
KeePass is an open source password manager that stores logins in one encrypted database file locked by a single master key. The database can sit on local storage, a USB stick or a cloud drive, with separate clients for desktop and mobile.
#7 in Security & Privacy ToolsPassword ManagersFree plan
Who it's for
Best for
Privacy-minded users who want the vault stored as a local file they control
Budget users replacing a paid manager after a price rise
Not for
Households that need simple password sharing between family members
Non-technical users who want sync and autofill working out of the box
Features
One encrypted database
All logins sit in one database file protected by a master key, so only that single key has to be remembered to unlock everything.
AES-256, ChaCha20 and Twofish
Database files are encrypted with AES-256, ChaCha20 and Twofish, described by the project as the best and most secure algorithms currently known.
Free and open source
The program is free and OSI-certified open source, and the full source code can be inspected to check how the security features are implemented.
Plugins and extensions
Optional plugins and extensions add extra functionality such as import and export formats and database backups.
What users say
Pros
- Keeps every login in one encrypted file that can be copied to cloud storage, a USB stick or a sync folder.
- The same database opens in separate clients on Windows, Linux, Android and iOS.
- Auto-type sends saved keystrokes into desktop programs and terminal windows, not just web pages.
- Holds TOTP seeds and passkeys in the same encrypted vault, with the private key visible for each passkey.
Cons
- Syncing the database file through cloud drives produces merge conflicts that can silently drop saved password edits.
- Needs a separate file-sync service set up before the vault reaches a second device.
- Browser autofill is rough, with no regex URL matching and no filling inside flatpak apps.
- The desktop interface feels dated, and copying each password by hand from the app is slow.
- Sharing a single saved login is not possible; the whole database file has to be handed over instead.
A selection of the review sources we used:
Summarized from public user reviews and community discussions. View details
Global Traffic Rank
Top 500k
Alternatives
Rank#7 in category#1 in category#6 in category#8 in category
Free planYesYesNoYes
ProPortable vault file, cross-platform clients, auto-typeQuick imports, email aliases, reliable passkeys, free syncSynced passkeys, quiet autofill, CLI secrets, shared vaultsDecade-long loyalty, returns after trials, works across devices