{"slug": "keepass", "name": "KeePass", "category": "security", "category_name": "Security and passwords", "description": "Free, open-source password manager that stores credentials in an encrypted local KDBX database file.", "recommenders": 16, "commenters": 25, "warners": 0, "score": 17.171, "rising": 4.05, "first": "2025-12-17", "latest": "2026-10-15", "why": "HN commenters like KeePass for keeping passwords in a single encrypted file with no service required, syncable with tools like Syncthing and usable across Windows, Linux, Android and iOS clients.", "why_is_quote": false, "has_verdict": true, "sentiment": {"recommend": 16, "neutral": 7, "compare": 3, "warn": 0}, "spark": [0, 1, 0, 1, 0, 0, 0, 3, 4, 1, 2, 4], "listed": true, "loved": ["Bring-your-own sync", "Just a file"], "caveat": "DIY sync", "short_quote": "Not affiliated with Keepass, just a happy longtime user.", "icon": true, "domain": "wikipedia.org", "github_repo": null, "official_url": "https://keepass.info/", "pricing": "open source", "aliases": ["KeePass"], "verdict": [{"text": "HN commenters like KeePass for keeping passwords in a single encrypted file with no service required,", "cites": [{"id": 789091232, "item_id": 49318202, "url": "https://news.ycombinator.com/item?id=49318202", "by": "nf-x", "date": "2026-08-16", "stance": "recommend", "quote": "keepass is great, because it doesn't require any service to operate - it's just a file.", "excerpt": "keepass is great, because it doesn't require any service to operate - it's just a file. technically, you are responsible for backing it up, but more centralized options possible. I used it for 4 years pre-touchID era in a corporate setting and it worked great. For a single device. UX was very \"open source\", but hey - it's a free software with other focus in mind. i know other people partitioning their secrets into mu", "context": "used it 4 years in a corporate setting", "use_case": "secrets and password storage", "switched_from": "", "story": "Show HN: Laptop is the last place your secrets are still in plaintext"}, {"id": 778767075, "item_id": 48672942, "url": "https://news.ycombinator.com/item?id=48672942", "by": "shizcakes", "date": "2026-06-25", "stance": "recommend", "quote": "One of the security advantages of KeePass being just a file is that you can sync it in the way that makes sense to you.", "excerpt": "One of the security advantages of KeePass being just a file is that you can sync it in the way that makes sense to you. The need to have an opinion on how you\u2019d like to sync a file does, as you suggest, eliminate some portion of the population who need a fully baked answer in one step. I used to use Google Drive, but now I use Syncthing, further reducing my exposure. Paired with Synctrain and KeePassium on iOS. One t", "context": "", "use_case": "password management", "switched_from": "", "story": "LastPass notifies users of yet another data breach"}]}, {"text": " syncable with tools like Syncthing", "cites": [{"id": 801783664, "item_id": 50111479, "url": "https://news.ycombinator.com/item?id=50111479", "by": "seplox", "date": "2026-10-15", "stance": "recommend", "quote": "I've been using keepass+syncthing for years, and I've never had any issues.", "excerpt": "I'm puzzled that OP seems stumped on syncing keepass when they're already using syncthing. I've been using keepass+syncthing for years, and I've never had any issues.", "context": "", "use_case": "password manager with sync", "switched_from": "", "story": "What I self-host"}, {"id": 778767075, "item_id": 48672942, "url": "https://news.ycombinator.com/item?id=48672942", "by": "shizcakes", "date": "2026-06-25", "stance": "recommend", "quote": "One of the security advantages of KeePass being just a file is that you can sync it in the way that makes sense to you.", "excerpt": "One of the security advantages of KeePass being just a file is that you can sync it in the way that makes sense to you. The need to have an opinion on how you\u2019d like to sync a file does, as you suggest, eliminate some portion of the population who need a fully baked answer in one step. I used to use Google Drive, but now I use Syncthing, further reducing my exposure. Paired with Synctrain and KeePassium on iOS. One t", "context": "", "use_case": "password management", "switched_from": "", "story": "LastPass notifies users of yet another data breach"}, {"id": 784147088, "item_id": 49009193, "url": "https://news.ycombinator.com/item?id=49009193", "by": "saratogacx", "date": "2026-07-22", "stance": "recommend", "quote": "I ended up with Keepass, the store is a open spec db[0] that has several clients, I use it across windows, android, and Linux without any issue", "excerpt": "> That's the most annoying thing about password managers, and a major reason I still don't use them: there exists no password manager that is cross-platform (desktop/mobile in particular), local-first, and isn't sketchy or enshittified or otherwise on HN's current \"don't use it, use <whatever> instead\" list. I had the same frustration, I ended up with Keepass, the store is a open spec db[0] that has several clients, ", "context": "", "use_case": "cross-platform password manager", "switched_from": "", "story": "Passkeys were invented by engineers with zero understanding of consumer brain"}]}, {"text": " and usable across Windows, Linux, Android and iOS clients.", "cites": [{"id": 784147088, "item_id": 49009193, "url": "https://news.ycombinator.com/item?id=49009193", "by": "saratogacx", "date": "2026-07-22", "stance": "recommend", "quote": "I ended up with Keepass, the store is a open spec db[0] that has several clients, I use it across windows, android, and Linux without any issue", "excerpt": "> That's the most annoying thing about password managers, and a major reason I still don't use them: there exists no password manager that is cross-platform (desktop/mobile in particular), local-first, and isn't sketchy or enshittified or otherwise on HN's current \"don't use it, use <whatever> instead\" list. I had the same frustration, I ended up with Keepass, the store is a open spec db[0] that has several clients, ", "context": "", "use_case": "cross-platform password manager", "switched_from": "", "story": "Passkeys were invented by engineers with zero understanding of consumer brain"}, {"id": 783551184, "item_id": 48971949, "url": "https://news.ycombinator.com/item?id=48971949", "by": "dotancohen", "date": "2026-07-19", "stance": "recommend", "quote": "I use Keepass variants on my Linux and Android devices, it's absolutely terrific.", "excerpt": "Don't marry yourself to the Apple (or any other large vendor) ecosystem. I use Keepass variants on my Linux and Android devices, it's absolutely terrific.", "context": "Linux and Android user", "use_case": "password management", "switched_from": "", "story": "Orion Browser by Kagi"}]}, {"text": " The most common caveat is that you have to set up syncing yourself,", "cites": [{"id": 799519200, "item_id": 49969950, "url": "https://news.ycombinator.com/item?id=49969950", "by": "__aru", "date": "2026-10-05", "stance": "recommend", "quote": "Keepass is also a good alternative to Authy", "excerpt": "Keepass is also a good alternative to Authy, caveat being you need some way to sync the db file between devices. I personally use Keepass for 2FA, Bitwarden for passwords. It's worked great for me so far, and I expect to stay with this setup for the foreseeable future.", "context": "", "use_case": "2FA codes", "switched_from": "", "story": "Pixel 11 doesn't yet meet the GrapheneOS security standards and may be skipped"}, {"id": 778767075, "item_id": 48672942, "url": "https://news.ycombinator.com/item?id=48672942", "by": "shizcakes", "date": "2026-06-25", "stance": "recommend", "quote": "One of the security advantages of KeePass being just a file is that you can sync it in the way that makes sense to you.", "excerpt": "One of the security advantages of KeePass being just a file is that you can sync it in the way that makes sense to you. The need to have an opinion on how you\u2019d like to sync a file does, as you suggest, eliminate some portion of the population who need a fully baked answer in one step. I used to use Google Drive, but now I use Syncthing, further reducing my exposure. Paired with Synctrain and KeePassium on iOS. One t", "context": "", "use_case": "password management", "switched_from": "", "story": "LastPass notifies users of yet another data breach"}, {"id": 754377778, "item_id": 47148611, "url": "https://news.ycombinator.com/item?id=47148611", "by": "kantselovich", "date": "2026-02-24", "stance": "compare", "quote": "Those problems are sync and sharing.", "excerpt": "I'm working on an alternative to KeePass/KeepassXC called Lockstep - it is local-first password manager that supports sync natively. It uses SQLCypher as local data store and keeps KeePass-compatible data model - supports import of .kdbx database. SQLCypher and different schema used in Lockstep alone did not solve any problems that I have with Keepass. Those problems are sync and sharing. Solving sync and sharing can", "context": "", "use_case": "password manager", "switched_from": "", "story": "Why the KeePass format should be based on SQLite"}]}, {"text": " and cloud drives can cause file version conflicts.", "cites": [{"id": 780519792, "item_id": 48782487, "url": "https://news.ycombinator.com/item?id=48782487", "by": "mieses", "date": "2026-07-03", "stance": "recommend", "quote": "The \"sprawl of plugins and forks\" in KeePass is why I use it.", "excerpt": "How this solves sync seems useful. If you use Google Drive and KeePass clients you will probably run into conflicts between keepass \"safe save\" and how google drive does file versioning, resulting in runaway duplication of your kdbx files. I started using Syncthing and KeePass. File version conflicts are rare but still happen. Including sync in the app seems like a good idea. It would be good to see screenshots of Br", "context": "", "use_case": "password management", "switched_from": "", "story": "Show HN: Bramble \u2013 Local-first password manager"}, {"id": 778767075, "item_id": 48672942, "url": "https://news.ycombinator.com/item?id=48672942", "by": "shizcakes", "date": "2026-06-25", "stance": "recommend", "quote": "One of the security advantages of KeePass being just a file is that you can sync it in the way that makes sense to you.", "excerpt": "One of the security advantages of KeePass being just a file is that you can sync it in the way that makes sense to you. The need to have an opinion on how you\u2019d like to sync a file does, as you suggest, eliminate some portion of the population who need a fully baked answer in one step. I used to use Google Drive, but now I use Syncthing, further reducing my exposure. Paired with Synctrain and KeePassium on iOS. One t", "context": "", "use_case": "password management", "switched_from": "", "story": "LastPass notifies users of yet another data breach"}]}], "praise": [{"label": "Bring-your-own sync", "summary": "Users sync the database file however they like, such as Syncthing, Dropbox, OneDrive or a USB drive.", "quotes": [{"id": 801783664, "item_id": 50111479, "url": "https://news.ycombinator.com/item?id=50111479", "by": "seplox", "date": "2026-10-15", "stance": "recommend", "quote": "I've been using keepass+syncthing for years, and I've never had any issues.", "excerpt": "I'm puzzled that OP seems stumped on syncing keepass when they're already using syncthing. I've been using keepass+syncthing for years, and I've never had any issues.", "context": "", "use_case": "password manager with sync", "switched_from": "", "story": "What I self-host"}, {"id": 778767075, "item_id": 48672942, "url": "https://news.ycombinator.com/item?id=48672942", "by": "shizcakes", "date": "2026-06-25", "stance": "recommend", "quote": "One of the security advantages of KeePass being just a file is that you can sync it in the way that makes sense to you.", "excerpt": "One of the security advantages of KeePass being just a file is that you can sync it in the way that makes sense to you. The need to have an opinion on how you\u2019d like to sync a file does, as you suggest, eliminate some portion of the population who need a fully baked answer in one step. I used to use Google Drive, but now I use Syncthing, further reducing my exposure. Paired with Synctrain and KeePassium on iOS. One t", "context": "", "use_case": "password management", "switched_from": "", "story": "LastPass notifies users of yet another data breach"}, {"id": 795903937, "item_id": 49743996, "url": "https://news.ycombinator.com/item?id=49743996", "by": "jakub_g", "date": "2026-09-17", "stance": "recommend", "quote": "I use KeePass Portable / Keepass2Android + syncing between devices", "excerpt": "Yup, having _two_ active devices which are logged in to Google (and possibly other services that you rely on that opt you in to app-based 2FA) + with backups of 2FA is a must at this point. When I buy a new phone, I make it a \"primary\", and keep my old phone as \"backup\". If you're not into cloud-based password/2FA syncing, Google Authenticator supports local export/import across devices via a QR code. For passwords, ", "context": "", "use_case": "password management synced via USB drive", "switched_from": "", "story": "Ask HN: How to recover Google auth after phone stolen?"}]}, {"label": "Just a file", "summary": "The database is a single encrypted file that needs no service to run.", "quotes": [{"id": 789091232, "item_id": 49318202, "url": "https://news.ycombinator.com/item?id=49318202", "by": "nf-x", "date": "2026-08-16", "stance": "recommend", "quote": "keepass is great, because it doesn't require any service to operate - it's just a file.", "excerpt": "keepass is great, because it doesn't require any service to operate - it's just a file. technically, you are responsible for backing it up, but more centralized options possible. I used it for 4 years pre-touchID era in a corporate setting and it worked great. For a single device. UX was very \"open source\", but hey - it's a free software with other focus in mind. i know other people partitioning their secrets into mu", "context": "used it 4 years in a corporate setting", "use_case": "secrets and password storage", "switched_from": "", "story": "Show HN: Laptop is the last place your secrets are still in plaintext"}, {"id": 778767075, "item_id": 48672942, "url": "https://news.ycombinator.com/item?id=48672942", "by": "shizcakes", "date": "2026-06-25", "stance": "recommend", "quote": "One of the security advantages of KeePass being just a file is that you can sync it in the way that makes sense to you.", "excerpt": "One of the security advantages of KeePass being just a file is that you can sync it in the way that makes sense to you. The need to have an opinion on how you\u2019d like to sync a file does, as you suggest, eliminate some portion of the population who need a fully baked answer in one step. I used to use Google Drive, but now I use Syncthing, further reducing my exposure. Paired with Synctrain and KeePassium on iOS. One t", "context": "", "use_case": "password management", "switched_from": "", "story": "LastPass notifies users of yet another data breach"}]}, {"label": "Cross-platform clients", "summary": "An open database format with many clients lets people use it on desktop and mobile.", "quotes": [{"id": 784147088, "item_id": 49009193, "url": "https://news.ycombinator.com/item?id=49009193", "by": "saratogacx", "date": "2026-07-22", "stance": "recommend", "quote": "I ended up with Keepass, the store is a open spec db[0] that has several clients, I use it across windows, android, and Linux without any issue", "excerpt": "> That's the most annoying thing about password managers, and a major reason I still don't use them: there exists no password manager that is cross-platform (desktop/mobile in particular), local-first, and isn't sketchy or enshittified or otherwise on HN's current \"don't use it, use <whatever> instead\" list. I had the same frustration, I ended up with Keepass, the store is a open spec db[0] that has several clients, ", "context": "", "use_case": "cross-platform password manager", "switched_from": "", "story": "Passkeys were invented by engineers with zero understanding of consumer brain"}, {"id": 783551184, "item_id": 48971949, "url": "https://news.ycombinator.com/item?id=48971949", "by": "dotancohen", "date": "2026-07-19", "stance": "recommend", "quote": "I use Keepass variants on my Linux and Android devices, it's absolutely terrific.", "excerpt": "Don't marry yourself to the Apple (or any other large vendor) ecosystem. I use Keepass variants on my Linux and Android devices, it's absolutely terrific.", "context": "Linux and Android user", "use_case": "password management", "switched_from": "", "story": "Orion Browser by Kagi"}, {"id": 780519792, "item_id": 48782487, "url": "https://news.ycombinator.com/item?id=48782487", "by": "mieses", "date": "2026-07-03", "stance": "recommend", "quote": "The \"sprawl of plugins and forks\" in KeePass is why I use it.", "excerpt": "How this solves sync seems useful. If you use Google Drive and KeePass clients you will probably run into conflicts between keepass \"safe save\" and how google drive does file versioning, resulting in runaway duplication of your kdbx files. I started using Syncthing and KeePass. File version conflicts are rare but still happen. Including sync in the app seems like a good idea. It would be good to see screenshots of Br", "context": "", "use_case": "password management", "switched_from": "", "story": "Show HN: Bramble \u2013 Local-first password manager"}]}, {"label": "Long-term reliability", "summary": "Commenters report years of use without problems, including a family of four on one database.", "quotes": [{"id": 754268832, "item_id": 47141802, "url": "https://news.ycombinator.com/item?id=47141802", "by": "kgwxd", "date": "2026-02-24", "stance": "recommend", "quote": "I love KeePass.", "excerpt": "Some decent arguments for development concerns, but the users will certainly never notice. For 10 years I've managed a family of 4 in a single KeePass db. Unique passwords across all accounts, random passwords instead of PII for \"security questions\", fake DOBs, and all other random security related stuff. Never had a single issue. Everything happens instantly as far as I can tell. And the file is 67kb. My work dbs, s", "context": "manages a family of 4 in a single database for 10 years", "use_case": "family password database", "switched_from": "", "story": "Why the KeePass format should be based on SQLite"}, {"id": 778760624, "item_id": 48672539, "url": "https://news.ycombinator.com/item?id=48672539", "by": "username135", "date": "2026-06-25", "stance": "recommend", "quote": "I switched to keepass a decade ago (maybe) and never looked back", "excerpt": "I switched to keepass a decade ago (maybe) and never looked back", "context": "", "use_case": "password management", "switched_from": "", "story": "LastPass notifies users of yet another data breach"}, {"id": 801783664, "item_id": 50111479, "url": "https://news.ycombinator.com/item?id=50111479", "by": "seplox", "date": "2026-10-15", "stance": "recommend", "quote": "I've been using keepass+syncthing for years, and I've never had any issues.", "excerpt": "I'm puzzled that OP seems stumped on syncing keepass when they're already using syncthing. I've been using keepass+syncthing for years, and I've never had any issues.", "context": "", "use_case": "password manager with sync", "switched_from": "", "story": "What I self-host"}]}, {"label": "Plugins and 2FA", "summary": "Extensions and built-in features cover TOTP codes and passkeys.", "quotes": [{"id": 784347360, "item_id": 49021710, "url": "https://news.ycombinator.com/item?id=49021710", "by": "HackerThemAll", "date": "2026-07-23", "stance": "recommend", "quote": "I store passkeys in a device-independent way, in KeePass using the great actively developed KeePassPasskey extension", "excerpt": "Rather: passkeys are great, but the way Microsoft implemented them in their login flow it disastrous. I store passkeys in a device-independent way, in KeePass using the great actively developed KeePassPasskey extension, because my threat model allows storing password and 2FA for the same site in the same place (or 1st factor when an account is passkey-only, i.e. passwordless). And I sync that between my primary compu", "context": "", "use_case": "storing passkeys and passwords", "switched_from": "", "story": "Passkeys were invented by engineers with zero understanding of consumer brain"}, {"id": 799519200, "item_id": 49969950, "url": "https://news.ycombinator.com/item?id=49969950", "by": "__aru", "date": "2026-10-05", "stance": "recommend", "quote": "Keepass is also a good alternative to Authy", "excerpt": "Keepass is also a good alternative to Authy, caveat being you need some way to sync the db file between devices. I personally use Keepass for 2FA, Bitwarden for passwords. It's worked great for me so far, and I expect to stay with this setup for the foreseeable future.", "context": "", "use_case": "2FA codes", "switched_from": "", "story": "Pixel 11 doesn't yet meet the GrapheneOS security standards and may be skipped"}, {"id": 794605024, "item_id": 49662814, "url": "https://news.ycombinator.com/item?id=49662814", "by": "pmontra", "date": "2026-09-11", "stance": "neutral", "quote": "My non hardware key is a keypass file that I update only on my laptop and I sync to my other devices.", "excerpt": "Can you clone or sync hardware keys? Maybe they don't fail as much as computers do but they can be lost or stolen like the keys that we use to open (dumb) doors. My non hardware key is a keypass file that I update only on my laptop and I sync to my other devices. I have plenty of backups. It does also the TOTP required to login into some customers servers.", "context": "", "use_case": "passwords and TOTP", "switched_from": "", "story": "Copying login keychains between Macs fails on Secure Enclave Macs with Tahoe"}]}, {"label": "Stores more", "summary": "People also keep notes, keys, URLs and other sensitive data in it.", "quotes": [{"id": 743114784, "item_id": 46444674, "url": "https://news.ycombinator.com/item?id=46444674", "by": "tacostakohashi", "date": "2025-12-31", "stance": "recommend", "quote": "I use https://en.wikipedia.org/wiki/KeePass", "excerpt": "Basically, you just need a password manager. I use https://en.wikipedia.org/wiki/KeePass You can store the other details in the notes - e.g. which card / account is used for payments, what are the password reset questions & answers, which address is set for delivery. Then, when you change credit cards / addresses / emails, etc., it's easy enough to find all the accounts you used the old one for and need to update.", "context": "", "use_case": "managing family accounts and details", "switched_from": "", "story": "Ask HN: How do you manage kids' accounts?"}, {"id": 761988437, "item_id": 47624277, "url": "https://news.ycombinator.com/item?id=47624277", "by": "gethly", "date": "2026-04-03", "stance": "neutral", "quote": "KeePass for passwords, keys, configuration files or any sensitive data.", "excerpt": "Stuck with GoLand. I hate the company, use maybe 5% of the features, but there is nothing better out there. FileZilla for FTP. HeidiSQL and MariaDB for SQL. 1Remote for multi-session SSH. KeePass for passwords, keys, configuration files or any sensitive data. Occasionally I use Notepad++, VS Codium or Zed when I need to.", "context": "", "use_case": "passwords and sensitive data", "switched_from": "", "story": "Ask HN: What is your dev set up like?"}, {"id": 796116048, "item_id": 49757253, "url": "https://news.ycombinator.com/item?id=49757253", "by": "wpollock", "date": "2026-09-18", "stance": "recommend", "quote": "Not affiliated with Keepass, just a happy longtime user.", "excerpt": "> The website should display a qr code you can scan with your phone that allows you to then login... A malicious website can display a QR code too. I think this \"feature\" could cause some of the security issues that passkesys were intended to solve. I use Keepass and the free tier of Dropbox, to keep my passwords strong and available across multiple devices. (Dropbox not required, you can store the database on a thum", "context": "", "use_case": "password management", "switched_from": "", "story": "I don't like passkeys"}]}], "caveats": [{"label": "DIY sync", "summary": "You need your own way to sync the database between devices, which puts off some users.", "quotes": [{"id": 799519200, "item_id": 49969950, "url": "https://news.ycombinator.com/item?id=49969950", "by": "__aru", "date": "2026-10-05", "stance": "recommend", "quote": "Keepass is also a good alternative to Authy", "excerpt": "Keepass is also a good alternative to Authy, caveat being you need some way to sync the db file between devices. I personally use Keepass for 2FA, Bitwarden for passwords. It's worked great for me so far, and I expect to stay with this setup for the foreseeable future.", "context": "", "use_case": "2FA codes", "switched_from": "", "story": "Pixel 11 doesn't yet meet the GrapheneOS security standards and may be skipped"}, {"id": 778767075, "item_id": 48672942, "url": "https://news.ycombinator.com/item?id=48672942", "by": "shizcakes", "date": "2026-06-25", "stance": "recommend", "quote": "One of the security advantages of KeePass being just a file is that you can sync it in the way that makes sense to you.", "excerpt": "One of the security advantages of KeePass being just a file is that you can sync it in the way that makes sense to you. The need to have an opinion on how you\u2019d like to sync a file does, as you suggest, eliminate some portion of the population who need a fully baked answer in one step. I used to use Google Drive, but now I use Syncthing, further reducing my exposure. Paired with Synctrain and KeePassium on iOS. One t", "context": "", "use_case": "password management", "switched_from": "", "story": "LastPass notifies users of yet another data breach"}, {"id": 754377778, "item_id": 47148611, "url": "https://news.ycombinator.com/item?id=47148611", "by": "kantselovich", "date": "2026-02-24", "stance": "compare", "quote": "Those problems are sync and sharing.", "excerpt": "I'm working on an alternative to KeePass/KeepassXC called Lockstep - it is local-first password manager that supports sync natively. It uses SQLCypher as local data store and keeps KeePass-compatible data model - supports import of .kdbx database. SQLCypher and different schema used in Lockstep alone did not solve any problems that I have with Keepass. Those problems are sync and sharing. Solving sync and sharing can", "context": "", "use_case": "password manager", "switched_from": "", "story": "Why the KeePass format should be based on SQLite"}]}, {"label": "Sync conflicts", "summary": "Cloud drives like Google Drive can create duplicate or conflicting database files.", "quotes": [{"id": 780519792, "item_id": 48782487, "url": "https://news.ycombinator.com/item?id=48782487", "by": "mieses", "date": "2026-07-03", "stance": "recommend", "quote": "The \"sprawl of plugins and forks\" in KeePass is why I use it.", "excerpt": "How this solves sync seems useful. If you use Google Drive and KeePass clients you will probably run into conflicts between keepass \"safe save\" and how google drive does file versioning, resulting in runaway duplication of your kdbx files. I started using Syncthing and KeePass. File version conflicts are rare but still happen. Including sync in the app seems like a good idea. It would be good to see screenshots of Br", "context": "", "use_case": "password management", "switched_from": "", "story": "Show HN: Bramble \u2013 Local-first password manager"}, {"id": 778767075, "item_id": 48672942, "url": "https://news.ycombinator.com/item?id=48672942", "by": "shizcakes", "date": "2026-06-25", "stance": "recommend", "quote": "One of the security advantages of KeePass being just a file is that you can sync it in the way that makes sense to you.", "excerpt": "One of the security advantages of KeePass being just a file is that you can sync it in the way that makes sense to you. The need to have an opinion on how you\u2019d like to sync a file does, as you suggest, eliminate some portion of the population who need a fully baked answer in one step. I used to use Google Drive, but now I use Syncthing, further reducing my exposure. Paired with Synctrain and KeePassium on iOS. One t", "context": "", "use_case": "password management", "switched_from": "", "story": "LastPass notifies users of yet another data breach"}]}, {"label": "Sharing", "summary": "Whole-file sync makes sharing passwords with others harder.", "quotes": [{"id": 754377778, "item_id": 47148611, "url": "https://news.ycombinator.com/item?id=47148611", "by": "kantselovich", "date": "2026-02-24", "stance": "compare", "quote": "Those problems are sync and sharing.", "excerpt": "I'm working on an alternative to KeePass/KeepassXC called Lockstep - it is local-first password manager that supports sync natively. It uses SQLCypher as local data store and keeps KeePass-compatible data model - supports import of .kdbx database. SQLCypher and different schema used in Lockstep alone did not solve any problems that I have with Keepass. Those problems are sync and sharing. Solving sync and sharing can", "context": "", "use_case": "password manager", "switched_from": "", "story": "Why the KeePass format should be based on SQLite"}]}, {"label": "Dated UX", "summary": "One long-time user described the interface as very 'open source'.", "quotes": [{"id": 789091232, "item_id": 49318202, "url": "https://news.ycombinator.com/item?id=49318202", "by": "nf-x", "date": "2026-08-16", "stance": "recommend", "quote": "keepass is great, because it doesn't require any service to operate - it's just a file.", "excerpt": "keepass is great, because it doesn't require any service to operate - it's just a file. technically, you are responsible for backing it up, but more centralized options possible. I used it for 4 years pre-touchID era in a corporate setting and it worked great. For a single device. UX was very \"open source\", but hey - it's a free software with other focus in mind. i know other people partitioning their secrets into mu", "context": "used it 4 years in a corporate setting", "use_case": "secrets and password storage", "switched_from": "", "story": "Show HN: Laptop is the last place your secrets are still in plaintext"}]}], "who": [{"by": "nf-x", "context": "used it 4 years in a corporate setting", "url": "https://news.ycombinator.com/item?id=49318202", "date": "2026-08-16"}, {"by": "dotancohen", "context": "Linux and Android user", "url": "https://news.ycombinator.com/item?id=48971949", "date": "2026-07-19"}, {"by": "kgwxd", "context": "manages a family of 4 in a single database for 10 years", "url": "https://news.ycombinator.com/item?id=47141802", "date": "2026-02-24"}, {"by": "system2", "context": "Windows user with 50+ apps installed", "url": "https://news.ycombinator.com/item?id=46799829", "date": "2026-01-28"}, {"by": "fusslo", "context": "wants local-only credentials", "url": "https://news.ycombinator.com/item?id=46303697", "date": "2025-12-17"}], "tags": ["local-first", "for Linux and Android users", "for 2FA codes", "for families"], "use_cases": ["password management", "password manager", "password manager with sync", "2fa codes", "password management synced via usb drive", "passwords and totp"], "compared": [{"slug": "bitwarden", "name": "Bitwarden", "co": 5, "switched_from": 0, "switched_to": 1}, {"slug": "syncthing", "name": "Syncthing", "co": 5, "switched_from": 0, "switched_to": 0}, {"slug": "apple-passwords", "name": "Apple Passwords", "co": 2, "switched_from": 0, "switched_to": 1}, {"slug": "vaultwarden", "name": "Vaultwarden", "co": 3, "switched_from": 0, "switched_to": 0}, {"slug": "keepassxc", "name": "KeePassXC", "co": 3, "switched_from": 0, "switched_to": 0}, {"slug": "google-drive", "name": "Google Drive", "co": 2, "switched_from": 0, "switched_to": 0}, {"slug": "tailscale", "name": "Tailscale", "co": 2, "switched_from": 0, "switched_to": 0}, {"slug": "heidisql", "name": "HeidiSQL", "co": 2, "switched_from": 0, "switched_to": 0}], "makers": [], "threads": [{"url": "https://news.ycombinator.com/item?id=50033407", "title": "Bitwarden Dual License Model", "mentions": 2}, {"url": "https://news.ycombinator.com/item?id=49007374", "title": "Passkeys were invented by engineers with zero understanding of consumer brain", "mentions": 2}, {"url": "https://news.ycombinator.com/item?id=48671468", "title": "LastPass notifies users of yet another data breach", "mentions": 2}, {"url": "https://news.ycombinator.com/item?id=48163389", "title": "The Quiet Renovation at Bitwarden", "mentions": 2}, {"url": "https://news.ycombinator.com/item?id=47136658", "title": "Why the KeePass format should be based on SQLite", "mentions": 2}, {"url": "https://news.ycombinator.com/item?id=50109715", "title": "What I self-host", "mentions": 1}], "sentiment_by_month": {"2025-11": {}, "2025-12": {"neutral": 2, "recommend": 1}, "2026-01": {"neutral": 1}, "2026-02": {"recommend": 1, "compare": 1}, "2026-03": {}, "2026-04": {"neutral": 1}, "2026-05": {"neutral": 1, "compare": 2}, "2026-06": {"recommend": 3}, "2026-07": {"recommend": 4}, "2026-08": {"recommend": 1}, "2026-09": {"neutral": 2, "recommend": 2}, "2026-10": {"recommend": 4}}, "quotes": [{"id": 801783664, "item_id": 50111479, "url": "https://news.ycombinator.com/item?id=50111479", "by": "seplox", "date": "2026-10-15", "stance": "recommend", "quote": "I've been using keepass+syncthing for years, and I've never had any issues.", "excerpt": "I'm puzzled that OP seems stumped on syncing keepass when they're already using syncthing. I've been using keepass+syncthing for years, and I've never had any issues.", "context": "", "use_case": "password manager with sync", "switched_from": "", "story": "What I self-host"}, {"id": 800560992, "item_id": 50035062, "url": "https://news.ycombinator.com/item?id=50035062", "by": "qwerpy", "date": "2026-10-10", "stance": "recommend", "quote": "I decided to go with regular keepass, it was because setting up OneDrive sync", "excerpt": "At the time I decided to go with regular keepass, it was because setting up OneDrive sync (directly to OneDrive, not depending on a mapped folder because I use as little MS software as possible) and browser extension was easier. And the cross platform UI on KeePassXC just didn\u2019t look and feel good on windows.", "context": "", "use_case": "password manager", "switched_from": "", "story": "Bitwarden Dual License Model"}, {"id": 800543552, "item_id": 50033972, "url": "https://news.ycombinator.com/item?id=50033972", "by": "pprotas", "date": "2026-10-10", "stance": "recommend", "quote": "KeePass uses an encrypted file, all you need is a way to decrypt it.", "excerpt": "Not desktop only, KeePass uses an encrypted file, all you need is a way to decrypt it. You can store it in iCloud or whatever you like to sync files between devices. iOS has a good open source app KeeForge to open the encryped password files. I use SyncTrain on my phone to connect to my SyncThing network.", "context": "", "use_case": "password manager", "switched_from": "", "story": "Bitwarden Dual License Model"}, {"id": 799519200, "item_id": 49969950, "url": "https://news.ycombinator.com/item?id=49969950", "by": "__aru", "date": "2026-10-05", "stance": "recommend", "quote": "Keepass is also a good alternative to Authy", "excerpt": "Keepass is also a good alternative to Authy, caveat being you need some way to sync the db file between devices. I personally use Keepass for 2FA, Bitwarden for passwords. It's worked great for me so far, and I expect to stay with this setup for the foreseeable future.", "context": "", "use_case": "2FA codes", "switched_from": "", "story": "Pixel 11 doesn't yet meet the GrapheneOS security standards and may be skipped"}, {"id": 796116048, "item_id": 49757253, "url": "https://news.ycombinator.com/item?id=49757253", "by": "wpollock", "date": "2026-09-18", "stance": "recommend", "quote": "Not affiliated with Keepass, just a happy longtime user.", "excerpt": "> The website should display a qr code you can scan with your phone that allows you to then login... A malicious website can display a QR code too. I think this \"feature\" could cause some of the security issues that passkesys were intended to solve. I use Keepass and the free tier of Dropbox, to keep my passwords strong and available across multiple devices. (Dropbox not required, you can store the database on a thum", "context": "", "use_case": "password management", "switched_from": "", "story": "I don't like passkeys"}, {"id": 795903937, "item_id": 49743996, "url": "https://news.ycombinator.com/item?id=49743996", "by": "jakub_g", "date": "2026-09-17", "stance": "recommend", "quote": "I use KeePass Portable / Keepass2Android + syncing between devices", "excerpt": "Yup, having _two_ active devices which are logged in to Google (and possibly other services that you rely on that opt you in to app-based 2FA) + with backups of 2FA is a must at this point. When I buy a new phone, I make it a \"primary\", and keep my old phone as \"backup\". If you're not into cloud-based password/2FA syncing, Google Authenticator supports local export/import across devices via a QR code. For passwords, ", "context": "", "use_case": "password management synced via USB drive", "switched_from": "", "story": "Ask HN: How to recover Google auth after phone stolen?"}, {"id": 795804466, "item_id": 49737779, "url": "https://news.ycombinator.com/item?id=49737779", "by": "cuvert", "date": "2026-09-17", "stance": "neutral", "quote": "keepass passwords", "excerpt": "For my small library photos, keepass passwords, etc around 30gb, I use syncthing, which will backup on my pc, on my parents pc (they live in another country), on my sisters pc and on my phone. They also use this triangular mode to backup their stuff. Syncthing is setup to only sync through tailscale or home routers network.", "context": "", "use_case": "password management", "switched_from": "", "story": "Backups Aren't Simple"}, {"id": 794605024, "item_id": 49662814, "url": "https://news.ycombinator.com/item?id=49662814", "by": "pmontra", "date": "2026-09-11", "stance": "neutral", "quote": "My non hardware key is a keypass file that I update only on my laptop and I sync to my other devices.", "excerpt": "Can you clone or sync hardware keys? Maybe they don't fail as much as computers do but they can be lost or stolen like the keys that we use to open (dumb) doors. My non hardware key is a keypass file that I update only on my laptop and I sync to my other devices. I have plenty of backups. It does also the TOTP required to login into some customers servers.", "context": "", "use_case": "passwords and TOTP", "switched_from": "", "story": "Copying login keychains between Macs fails on Secure Enclave Macs with Tahoe"}, {"id": 789091232, "item_id": 49318202, "url": "https://news.ycombinator.com/item?id=49318202", "by": "nf-x", "date": "2026-08-16", "stance": "recommend", "quote": "keepass is great, because it doesn't require any service to operate - it's just a file.", "excerpt": "keepass is great, because it doesn't require any service to operate - it's just a file. technically, you are responsible for backing it up, but more centralized options possible. I used it for 4 years pre-touchID era in a corporate setting and it worked great. For a single device. UX was very \"open source\", but hey - it's a free software with other focus in mind. i know other people partitioning their secrets into mu", "context": "used it 4 years in a corporate setting", "use_case": "secrets and password storage", "switched_from": "", "story": "Show HN: Laptop is the last place your secrets are still in plaintext"}, {"id": 784347360, "item_id": 49021710, "url": "https://news.ycombinator.com/item?id=49021710", "by": "HackerThemAll", "date": "2026-07-23", "stance": "recommend", "quote": "I store passkeys in a device-independent way, in KeePass using the great actively developed KeePassPasskey extension", "excerpt": "Rather: passkeys are great, but the way Microsoft implemented them in their login flow it disastrous. I store passkeys in a device-independent way, in KeePass using the great actively developed KeePassPasskey extension, because my threat model allows storing password and 2FA for the same site in the same place (or 1st factor when an account is passkey-only, i.e. passwordless). And I sync that between my primary compu", "context": "", "use_case": "storing passkeys and passwords", "switched_from": "", "story": "Passkeys were invented by engineers with zero understanding of consumer brain"}, {"id": 784147088, "item_id": 49009193, "url": "https://news.ycombinator.com/item?id=49009193", "by": "saratogacx", "date": "2026-07-22", "stance": "recommend", "quote": "I ended up with Keepass, the store is a open spec db[0] that has several clients, I use it across windows, android, and Linux without any issue", "excerpt": "> That's the most annoying thing about password managers, and a major reason I still don't use them: there exists no password manager that is cross-platform (desktop/mobile in particular), local-first, and isn't sketchy or enshittified or otherwise on HN's current \"don't use it, use <whatever> instead\" list. I had the same frustration, I ended up with Keepass, the store is a open spec db[0] that has several clients, ", "context": "", "use_case": "cross-platform password manager", "switched_from": "", "story": "Passkeys were invented by engineers with zero understanding of consumer brain"}, {"id": 783551184, "item_id": 48971949, "url": "https://news.ycombinator.com/item?id=48971949", "by": "dotancohen", "date": "2026-07-19", "stance": "recommend", "quote": "I use Keepass variants on my Linux and Android devices, it's absolutely terrific.", "excerpt": "Don't marry yourself to the Apple (or any other large vendor) ecosystem. I use Keepass variants on my Linux and Android devices, it's absolutely terrific.", "context": "Linux and Android user", "use_case": "password management", "switched_from": "", "story": "Orion Browser by Kagi"}, {"id": 780519792, "item_id": 48782487, "url": "https://news.ycombinator.com/item?id=48782487", "by": "mieses", "date": "2026-07-03", "stance": "recommend", "quote": "The \"sprawl of plugins and forks\" in KeePass is why I use it.", "excerpt": "How this solves sync seems useful. If you use Google Drive and KeePass clients you will probably run into conflicts between keepass \"safe save\" and how google drive does file versioning, resulting in runaway duplication of your kdbx files. I started using Syncthing and KeePass. File version conflicts are rare but still happen. Including sync in the app seems like a good idea. It would be good to see screenshots of Br", "context": "", "use_case": "password management", "switched_from": "", "story": "Show HN: Bramble \u2013 Local-first password manager"}, {"id": 778767075, "item_id": 48672942, "url": "https://news.ycombinator.com/item?id=48672942", "by": "shizcakes", "date": "2026-06-25", "stance": "recommend", "quote": "One of the security advantages of KeePass being just a file is that you can sync it in the way that makes sense to you.", "excerpt": "One of the security advantages of KeePass being just a file is that you can sync it in the way that makes sense to you. The need to have an opinion on how you\u2019d like to sync a file does, as you suggest, eliminate some portion of the population who need a fully baked answer in one step. I used to use Google Drive, but now I use Syncthing, further reducing my exposure. Paired with Synctrain and KeePassium on iOS. One t", "context": "", "use_case": "password management", "switched_from": "", "story": "LastPass notifies users of yet another data breach"}, {"id": 778760624, "item_id": 48672539, "url": "https://news.ycombinator.com/item?id=48672539", "by": "username135", "date": "2026-06-25", "stance": "recommend", "quote": "I switched to keepass a decade ago (maybe) and never looked back", "excerpt": "I switched to keepass a decade ago (maybe) and never looked back", "context": "", "use_case": "password management", "switched_from": "", "story": "LastPass notifies users of yet another data breach"}, {"id": 777625440, "item_id": 48601590, "url": "https://news.ycombinator.com/item?id=48601590", "by": "cavoirom", "date": "2026-06-19", "stance": "recommend", "quote": "I use KeePass for the password manager", "excerpt": "yes, I wish I've done that, but I'm too paranoid that I use KeePass for the password manager and always want to know the email address ahead of the time.", "context": "", "use_case": "password management", "switched_from": "", "story": "Apple is about to make Hide My Email useless"}, {"id": 770978884, "item_id": 48186180, "url": "https://news.ycombinator.com/item?id=48186180", "by": "kjuulh", "date": "2026-05-18", "stance": "compare", "quote": "I think I'll move to something custom, or a selfhosted keepass server", "excerpt": "At this point it is too high of a risk to store my password elsewhere. I've been screwed over by dashlane, lastpass, potentially bitwarden now, I am with 1password now, but I've had my passwords in all these places, and I've had to change them each time, probably missing a few. I like 1password, it is by far the highest quality product I've used in this category. I moved from BitWarden back then because their browser", "context": "", "use_case": "self-hosted passwords", "switched_from": "", "story": "The Quiet Renovation at Bitwarden"}, {"id": 770897203, "item_id": 48181075, "url": "https://news.ycombinator.com/item?id=48181075", "by": "xweb", "date": "2026-05-18", "stance": "compare", "quote": "Will check out Vaultwarden, Proton Pass, Keepass, I guess.", "excerpt": "Thank you for this post/link. I have been side eyeing Bitwarden since they started ensh*ttifying the desktop UX last year to make it more like everything else and take up too much space. It had been working perfectly well for browser autofill - super fast and staying out of the way. Now it is bloated white space, slow, standardized UX elements like any SaaS built by AI. Will check out Vaultwarden, Proton Pass, Keepas", "context": "", "use_case": "", "switched_from": "", "story": "The Quiet Renovation at Bitwarden"}, {"id": 770419379, "item_id": 48151211, "url": "https://news.ycombinator.com/item?id=48151211", "by": "Goofy_Coyote", "date": "2026-05-15", "stance": "neutral", "quote": "or going back to keepass tbh", "excerpt": "This is very sad. I wasn\u2019t paying for the code tbh, I could always self-host (VaultWarden) at home behind Tailscale, it was all about the management, uptime, and most importantly, supporting a good software I used and loved for years. Sad, really. I\u2019ll either move to self-hosting it at home behind TS, or going back to keepass tbh, anyway, I\u2019m not staying on a sinking ship. P.S: VaultWarden had a few bad CVEs this yea", "context": "", "use_case": "password manager", "switched_from": "", "story": "Bitwarden scrubs 'Always free' and 'Inclusion' values from its site"}, {"id": 761988437, "item_id": 47624277, "url": "https://news.ycombinator.com/item?id=47624277", "by": "gethly", "date": "2026-04-03", "stance": "neutral", "quote": "KeePass for passwords, keys, configuration files or any sensitive data.", "excerpt": "Stuck with GoLand. I hate the company, use maybe 5% of the features, but there is nothing better out there. FileZilla for FTP. HeidiSQL and MariaDB for SQL. 1Remote for multi-session SSH. KeePass for passwords, keys, configuration files or any sensitive data. Occasionally I use Notepad++, VS Codium or Zed when I need to.", "context": "", "use_case": "passwords and sensitive data", "switched_from": "", "story": "Ask HN: What is your dev set up like?"}, {"id": 754377778, "item_id": 47148611, "url": "https://news.ycombinator.com/item?id=47148611", "by": "kantselovich", "date": "2026-02-24", "stance": "compare", "quote": "Those problems are sync and sharing.", "excerpt": "I'm working on an alternative to KeePass/KeepassXC called Lockstep - it is local-first password manager that supports sync natively. It uses SQLCypher as local data store and keeps KeePass-compatible data model - supports import of .kdbx database. SQLCypher and different schema used in Lockstep alone did not solve any problems that I have with Keepass. Those problems are sync and sharing. Solving sync and sharing can", "context": "", "use_case": "password manager", "switched_from": "", "story": "Why the KeePass format should be based on SQLite"}, {"id": 754268832, "item_id": 47141802, "url": "https://news.ycombinator.com/item?id=47141802", "by": "kgwxd", "date": "2026-02-24", "stance": "recommend", "quote": "I love KeePass.", "excerpt": "Some decent arguments for development concerns, but the users will certainly never notice. For 10 years I've managed a family of 4 in a single KeePass db. Unique passwords across all accounts, random passwords instead of PII for \"security questions\", fake DOBs, and all other random security related stuff. Never had a single issue. Everything happens instantly as far as I can tell. And the file is 67kb. My work dbs, s", "context": "manages a family of 4 in a single database for 10 years", "use_case": "family password database", "switched_from": "", "story": "Why the KeePass format should be based on SQLite"}, {"id": 748797265, "item_id": 46799829, "url": "https://news.ycombinator.com/item?id=46799829", "by": "system2", "date": "2026-01-28", "stance": "neutral", "quote": "Google Drive that I use to share my KeePass databases", "excerpt": ">\"If you're always finding the next reason not to switch, you're not looking for solutions, you're looking for excuses to stay complacent.\" No, my friend. It is not the reason. I have over 50 apps installed, many of which are corporate applications, such as Teams and other Microsoft products. VMwaresing VMWare and WSL foLinux distributionsnux distros. The other things that Linux is missing are ShareX (has flameshot I", "context": "Windows user with 50+ apps installed", "use_case": "password database", "switched_from": "", "story": "Microsoft forced me to switch to Linux"}, {"id": 743114784, "item_id": 46444674, "url": "https://news.ycombinator.com/item?id=46444674", "by": "tacostakohashi", "date": "2025-12-31", "stance": "recommend", "quote": "I use https://en.wikipedia.org/wiki/KeePass", "excerpt": "Basically, you just need a password manager. I use https://en.wikipedia.org/wiki/KeePass You can store the other details in the notes - e.g. which card / account is used for payments, what are the password reset questions & answers, which address is set for delivery. Then, when you change credit cards / addresses / emails, etc., it's easy enough to find all the accounts you used the old one for and need to update.", "context": "", "use_case": "managing family accounts and details", "switched_from": "", "story": "Ask HN: How do you manage kids' accounts?"}, {"id": 743074821, "item_id": 46442176, "url": "https://news.ycombinator.com/item?id=46442176", "by": "gethly", "date": "2025-12-30", "stance": "neutral", "quote": "keepass for secrets", "excerpt": "bitbucket for git hosting trello for ideas and tasks jetbrains ide(i hate the company and their pricing model but I like the tool) filezilla for sftp 1remote for multi-window ssh keepass for secrets Go for programming Quasar for web front-end git bash for windows shell heidisql for db ui notepad++/vs codium/zed for simple editing", "context": "", "use_case": "secrets", "switched_from": "", "story": "Ask HN: What do you use to manage your coding projects?"}, {"id": 740859152, "item_id": 46303697, "url": "https://news.ycombinator.com/item?id=46303697", "by": "fusslo", "date": "2025-12-17", "stance": "neutral", "quote": "I used keepass previously", "excerpt": "I feel like a boomer. I dont want to use google/apple/microsoft for any credential manager because: google is evil; apple has locked me out of my apple id (and lost things like the recordings of conversations with my father during his hospice); microsoft keeps getting worse and more annoying to use. So ok, I need some credential manager. I used keepass previously... but how do I vet other credential managers? I dont ", "context": "wants local-only credentials", "use_case": "credential management", "switched_from": "", "story": "Yep, Passkeys Still Have Problems"}]}