| KeePassXC | |
|---|---|
| | |
| KeePassXC 2.7.10 in Linux showing login entries | |
| Developer | KeePassXC Team |
| Initial release | May 2, 2012 |
| Stable release | |
| Repository | |
| Written in | C++ |
| Operating system | |
| Platform | x86-64, x86, Apple silicon, AArch64 and others |
| Type | Password manager |
| License | GPL 2.0 and 3.0 [2] |
| Website | keepassxc |
KeePassXC (originally KeePassX [3] [4] ) is a free and open-source cross-platform password manager. It is built using the Qt toolkit, which allows it to run on Linux, Windows, macOS, and BSD, [5] [6] [7] unlike the original KeePass software.
KeePassXC uses the KeePass 2.x (.kdbx) password database format natively. [8] It can also import (and convert) version 2 and the older KeePass 1 (.kdb) databases. KeePassXC supports having key files and YubiKey challenge-response for additional security. [3]
The Electronic Frontier Foundation mentions KeePassXC as "easy-to-use [and] robust software". [9] A security review of KeePassXC version 2.7.4 was completed in late 2022. [10]
An accompanying browser extension [11] is available for Firefox, [12] Tor-Browser, Google Chrome, [13] Vivaldi, Microsoft Edge, [14] and Chromium. Extensions can be linked by enabling browser integration in the desktop application. [15]
KeePassXC uses zxcvbn to assess password strength and can search for credential breaches using Have I Been Pwned?. [16]
KeePassXC was highlighted by Süddeutsche Zeitung in its 2025 overview of leading self-hosted password managers as a solution that offers users increased security and full control by allowing the entire vault to be operated on their own server. [17]
A 2024 study examined the “password checkup” features of 14 password managers, including KeePassXC, using weak, breached, and randomly generated passwords. The evaluated products reported weak and compromised passwords inconsistently and sometimes incompletely. No manager successfully flagged all known breached passwords. The study concludes that such inconsistencies may give users a false sense of security. [18] However, the German Federal Office for Information Security considers password checkups a useful feature. [19]