KeePassXC
Open-source password management software
From Wikipedia, the free encyclopedia
KeePassXC (originally KeePassX[3][4]) is a free and open-source cross-platform password manager. It is built using the Qt toolkit, which allows it to run on Linux, Windows, macOS, and BSD,[5][6][7] unlike the original KeePass software.
| KeePassXC | |
|---|---|
| |
 KeePassXC 2.7.10 in Linux showing login entries | |
| Developer | KeePassXC Team |
| Initial release | May 2, 2012 |
| Stable release | |
| Written in | C++ |
| Operating system | |
| Platform | x86-64, x86, Apple silicon, AArch64 and others |
| Type | Password manager |
| License | GPL 2.0 and 3.0[2] |
| Website | keepassxc |
| Repository | |
KeePassXC uses the KeePass 2.x (.kdbx) password database format natively.[8] It can also import (and convert) version 2 and the older KeePass 1 (.kdb) databases. KeePassXC supports having key files and YubiKey challenge-response for additional security.[3]
The Electronic Frontier Foundation mentions KeePassXC as "easy-to-use [and] robust software".[9] A security review of KeePassXC version 2.7.4 was completed in late 2022.[10]
An accompanying browser extension[11] is available for Firefox,[12] Tor Browser, Google Chrome,[13] Vivaldi, Microsoft Edge,[14] and Chromium. Extensions can be linked by enabling browser integration in the desktop application.[15]
KeePassXC uses zxcvbn to assess password strength and can search for credential breaches using Have I Been Pwned?.[16]
Reception
KeePassXC was highlighted by Süddeutsche Zeitung in its 2025 overview of leading self-hosted password managers as a solution that offers users increased security and full control by allowing the entire vault to be operated on their own server.[17]
Security Analysis
2024 Evaluation of Password Checkup Tools
A 2024 study examined the “password checkup” features of 14 password managers, including KeePassXC, using weak, breached, and randomly generated passwords. The evaluated products reported weak and compromised passwords inconsistently and sometimes incompletely. No manager successfully flagged all known breached passwords. The study concludes that such inconsistencies may give users a false sense of security.[18] However, the German Federal Office for Information Security considers password checkups a useful feature.[19]
.svg){kind=logo}
