{"slug": "keepassxc", "name": "KeePassXC", "category": "security", "category_name": "Security and passwords", "description": "Free, open-source, cross-platform desktop password manager using the KeePass database format.", "recommenders": 19, "commenters": 32, "warners": 2, "score": 18.703, "rising": 4.4, "first": "2025-11-09", "latest": "2026-10-19", "why": "HN commenters recommend it for keeping passwords in a local, open-source database they control, synced with tools like Syncthing or Nextcloud, with passkey and TOTP support.", "why_is_quote": false, "has_verdict": true, "sentiment": {"recommend": 19, "neutral": 11, "compare": 0, "warn": 2}, "spark": [1, 1, 0, 2, 0, 0, 4, 1, 2, 1, 2, 5], "listed": true, "loved": ["Local, user-owned data", "Flexible file sync"], "caveat": "DIY syncing", "short_quote": "Just switched to KeepassXC and syncthing. Transferring keyfiles over LocalSend. This has been a great local FOSS way to keep autonomy over secrets", "icon": true, "domain": "keepassxc.org", "github_repo": null, "official_url": "https://keepassxc.org/", "pricing": "open source", "aliases": ["KeePassXC"], "verdict": [{"text": "HN commenters recommend it for keeping passwords in a local, open-source database they control", "cites": [{"id": 801480912, "item_id": 50092557, "url": "https://news.ycombinator.com/item?id=50092557", "by": "user00005", "date": "2026-10-14", "stance": "recommend", "quote": "stored only on my devices(Linux, Windows, Android) using open source software (KeepassXC, KeepassDX)", "excerpt": "I'm moving my HSA because the company moved to passkeys. I use unique email addresses and passwords, stored only on my devices(Linux, Windows, Android) using open source software (KeepassXC, KeepassDX). Passkeys add new friction I don't need.", "context": "uses Linux, Windows, Android", "use_case": "password storage", "switched_from": "", "story": "Passkeys are not a trap"}, {"id": 771613936, "item_id": 48225871, "url": "https://news.ycombinator.com/item?id=48225871", "by": "arikrahman", "date": "2026-05-21", "stance": "recommend", "quote": "Just switched to KeepassXC and syncthing. Transferring keyfiles over LocalSend. This has been a great local FOSS way to keep autonomy over secrets", "excerpt": "Just switched to KeepassXC and syncthing. Transferring keyfiles over LocalSend. This has been a great local FOSS way to keep autonomy over secrets, without even needing internet.", "context": "", "use_case": "local password management", "switched_from": "Bitwarden", "story": "Get your passwords out of Bitwarden while you still can"}, {"id": 752681744, "item_id": 47042609, "url": "https://news.ycombinator.com/item?id=47042609", "by": "theandrewbailey", "date": "2026-02-16", "stance": "recommend", "quote": "I use KeePassXC on desktop and KeePassDX on Android.", "excerpt": "I use KeePassXC on desktop and KeePassDX on Android. I have my own file server, and manually sync the database file through it when needed. No subscription fee, 100% open source and self-hosted. https://keepassxc.org/ https://www.keepassdx.com/", "context": "self-hosts a file server", "use_case": "password manager on desktop", "switched_from": "", "story": "Ask HN: Which password manager do you use / would you recommend?"}, {"id": 793108928, "item_id": 49569308, "url": "https://news.ycombinator.com/item?id=49569308", "by": "remuskaos", "date": "2026-09-04", "stance": "recommend", "quote": "I strongly preferred email and password login, backed by a keepass(xc) store to hold the data.", "excerpt": "You've hit the nail on the head. That's why I strongly preferred email and password login, backed by a keepass(xc) store to hold the data. Owned by me, backed up, impossible to take from me, the works. Sure, most of the time I have to verify my mail address, but after that the account is mine. Well, okay. On some services, I have to \"confirm the new device\" I'm loggin in from, so I still need access to my mail. Weeee", "context": "", "use_case": "password storage", "switched_from": "", "story": ".name Termination"}]}, {"text": ", synced with tools like Syncthing or Nextcloud", "cites": [{"id": 789453376, "item_id": 49340836, "url": "https://news.ycombinator.com/item?id=49340836", "by": "daleswanson", "date": "2026-08-17", "stance": "recommend", "quote": "I use KeepassXC and Syncthing.", "excerpt": "I use KeepassXC and Syncthing. It's not a single password manager doing both the managing and syncing, but it works very well, and I sync between phone/laptop/desktop without any third parties.", "context": "", "use_case": "password manager synced across devices", "switched_from": "", "story": "Bluesky draws its logo on screenshots"}, {"id": 770906880, "item_id": 48181680, "url": "https://news.ycombinator.com/item?id=48181680", "by": "kn100", "date": "2026-05-18", "stance": "recommend", "quote": "The Keepass experience is significantly better these days!", "excerpt": "Good post. I switched from Bitwarden to KeepassXC / KeepassDX / Syncthing across my Android phone, Linux PC, and Windows PC. This was the setup I had prior to using Bitwarden for the first time. The Keepass experience is significantly better these days! Importing from Bitwarden is trivial too. Recommended!", "context": "", "use_case": "password management", "switched_from": "Bitwarden", "story": "The Quiet Renovation at Bitwarden"}, {"id": 801435121, "item_id": 50089695, "url": "https://news.ycombinator.com/item?id=50089695", "by": "willis936", "date": "2026-10-14", "stance": "recommend", "quote": "Both nextcloud and keepassxc are open source.", "excerpt": "I use nextcloud to sync my own keepass database across my devices. Both nextcloud and keepassxc are open source. Please explain how self hosting open source software is locking me into a vendor. If the sky falls and strongbox ceases working with mac/iOS I can use android and linux. Nobody is locking my lockbox.", "context": "self-hosts open source software", "use_case": "password and passkey management", "switched_from": "", "story": "Passkeys are not a trap"}]}, {"text": ", with passkey and TOTP support.", "cites": [{"id": 796058960, "item_id": 49753685, "url": "https://news.ycombinator.com/item?id=49753685", "by": "brushfoot", "date": "2026-09-18", "stance": "recommend", "quote": "If you have to use passkeys, try KeePassXC and KeePassXC-Browser. I used them to set one up for Amazon a few days ago", "excerpt": "If you have to use passkeys, try KeePassXC and KeePassXC-Browser. I used them to set one up for Amazon a few days ago, as Amazon now forces passkeys as of this month, at least for my account. It was relatively painless. That said, I don't like passkeys either.", "context": "", "use_case": "passkey storage", "switched_from": "", "story": "I don't like passkeys"}, {"id": 755077088, "item_id": 47192318, "url": "https://news.ycombinator.com/item?id=47192318", "by": "ifh-hn", "date": "2026-02-28", "stance": "recommend", "quote": "I use passkeys from keepasxc because the native workflow for passkeys is opaque", "excerpt": "Passkeys to me come across as a part solution to a valid problem. Education is part of the solution. Treating the user as too dumb to understand why they need strong passwords or passkeys is important. I actually despair about when my family members are forced into passkeys and then lose access to their accounts because they get a new device. I use passkeys from keepasxc because the native workflow for passkeys is op", "context": "", "use_case": "passkey storage", "switched_from": "", "story": "Don't use passkeys for encrypting user data"}, {"id": 796073808, "item_id": 49754613, "url": "https://news.ycombinator.com/item?id=49754613", "by": "diego_moita", "date": "2026-09-18", "stance": "neutral", "quote": "For sites requiring 2FA, I use TOTP (time-based one time passwords) from KeePassXC.", "excerpt": "I hate them, mostly because I am forced to use them. They provide crappy usability, they're expensive, they're easy to lose, you can't use the physical keys when doing remote desktop access. My job requires me to use them. I use only for the job and nothing else. For sites requiring 2FA, I use TOTP (time-based one time passwords) from KeePassXC.", "context": "", "use_case": "TOTP codes", "switched_from": "", "story": "I don't like passkeys"}]}, {"text": " The most common caveat is that syncing is do-it-yourself", "cites": [{"id": 778764720, "item_id": 48672795, "url": "https://news.ycombinator.com/item?id=48672795", "by": "doubled112", "date": "2026-06-25", "stance": "neutral", "quote": "Syncing isn't a KeePassXC problem.  The database is just a file.", "excerpt": "Syncing isn't a KeePassXC problem. The database is just a file. That may or may not make your life easier. There are a few decent Android and iOS apps that work well. I use Nextcloud and WebDAV for access. Not a setup I can recommend to just anybody though.", "context": "", "use_case": "password management", "switched_from": "", "story": "LastPass notifies users of yet another data breach"}, {"id": 742902561, "item_id": 46431410, "url": "https://news.ycombinator.com/item?id=46431410", "by": "lightandlight", "date": "2025-12-30", "stance": "recommend", "quote": "This year I moved off LastPass, and started using [Syncthing](https://syncthing.net/) to sync my [KeepassXC](https://keepassxc.org/).", "excerpt": "This year I moved off LastPass, and started using [Syncthing](https://syncthing.net/) to sync my [KeepassXC](https://keepassxc.org/). It works pretty well, but doesn't have any automatic conflict resolution (I've been working on [something](https://github.com/LightAndLight/syncthing-merge) for this). Next up I'm moving my TODOs off Todoist to something local-first, and plugging that into my Syncthing setup.", "context": "", "use_case": "password management", "switched_from": "LastPass", "story": "Bye Bye Big Tech: How I Migrated to an Almost All-EU Stack (and Saved 500\u20ac/Year)"}]}, {"text": ", which some found painful or unreliable, especially on mobile.", "cites": [{"id": 800550050, "item_id": 50034378, "url": "https://news.ycombinator.com/item?id=50034378", "by": "Arrowmaster", "date": "2026-10-10", "stance": "warn", "quote": "the Linux desktop experience and mobile syncing was so terrible", "excerpt": "I specifically moved away from KeePassXC to Bitwarden with self hosted vaultwarden because the Linux desktop experience and mobile syncing was so terrible. While I love KeePassXC, using it on an immutable Linux distro where everything needs to be Flatpak means the browser extension doesn't work because it doesn't support Flatpak'd browsers back when I switched. Auto type is a security nightmare and is not an option. ", "context": "immutable Linux distro user", "use_case": "password manager", "switched_from": "", "story": "Bitwarden Dual License Model"}, {"id": 800577712, "item_id": 50036107, "url": "https://news.ycombinator.com/item?id=50036107", "by": "jonny2811", "date": "2026-10-10", "stance": "recommend", "quote": "ive used keepassxc forever", "excerpt": "ive used keepassxc forever, switched to proton pass after the release, because i was managing my db in git and it was always a pain to keep in sync, but switched back a couple of weeks ago with exactly the same setup, syncthing and KeepassDx also works suprisingly well. mostly i was missing power user features and especially ux for the browser plugin, namely you can't operate it fully with the keyboard, with keepassx", "context": "", "use_case": "password manager", "switched_from": "Proton Pass", "story": "Bitwarden Dual License Model"}]}], "praise": [{"label": "Local, user-owned data", "summary": "Passwords stay in an encrypted local file on the user's own devices, with no third party holding them.", "quotes": [{"id": 771613936, "item_id": 48225871, "url": "https://news.ycombinator.com/item?id=48225871", "by": "arikrahman", "date": "2026-05-21", "stance": "recommend", "quote": "Just switched to KeepassXC and syncthing. Transferring keyfiles over LocalSend. This has been a great local FOSS way to keep autonomy over secrets", "excerpt": "Just switched to KeepassXC and syncthing. Transferring keyfiles over LocalSend. This has been a great local FOSS way to keep autonomy over secrets, without even needing internet.", "context": "", "use_case": "local password management", "switched_from": "Bitwarden", "story": "Get your passwords out of Bitwarden while you still can"}, {"id": 793108928, "item_id": 49569308, "url": "https://news.ycombinator.com/item?id=49569308", "by": "remuskaos", "date": "2026-09-04", "stance": "recommend", "quote": "I strongly preferred email and password login, backed by a keepass(xc) store to hold the data.", "excerpt": "You've hit the nail on the head. That's why I strongly preferred email and password login, backed by a keepass(xc) store to hold the data. Owned by me, backed up, impossible to take from me, the works. Sure, most of the time I have to verify my mail address, but after that the account is mine. Well, okay. On some services, I have to \"confirm the new device\" I'm loggin in from, so I still need access to my mail. Weeee", "context": "", "use_case": "password storage", "switched_from": "", "story": ".name Termination"}, {"id": 733926784, "item_id": 45870424, "url": "https://news.ycombinator.com/item?id=45870424", "by": "snowwrestler", "date": "2025-11-09", "stance": "recommend", "quote": "But for my passwords I use KeePass (the file format) and a variety of clients including KeePassXC.", "excerpt": "I feel like a lot of the comments here do not understand how KeePassXC actually works. It\u2019s a client application that works with a standard encrypted file format. The file format is the basis for security, not the client application. KeePassXC does not store any data. Nor does it receive connections from the Internet, like a server. Thus the risk is structurally lower than a commercial client-server application like ", "context": "", "use_case": "personal password management", "switched_from": "", "story": "About KeePassXC's Code Quality Control"}]}, {"label": "Flexible file sync", "summary": "Because the database is a single file, any sync tool such as Syncthing, Nextcloud or Dropbox works.", "quotes": [{"id": 789453376, "item_id": 49340836, "url": "https://news.ycombinator.com/item?id=49340836", "by": "daleswanson", "date": "2026-08-17", "stance": "recommend", "quote": "I use KeepassXC and Syncthing.", "excerpt": "I use KeepassXC and Syncthing. It's not a single password manager doing both the managing and syncing, but it works very well, and I sync between phone/laptop/desktop without any third parties.", "context": "", "use_case": "password manager synced across devices", "switched_from": "", "story": "Bluesky draws its logo on screenshots"}, {"id": 770916080, "item_id": 48182255, "url": "https://news.ycombinator.com/item?id=48182255", "by": "varbhat", "date": "2026-05-18", "stance": "recommend", "quote": "I am really happy with the move.", "excerpt": "I have moved to KeepassXC[1] on my desktop from Bitwarden. On phone, I use KeepassDX[2] which is Android client compatible with KeepassXC. On browser, I use KeepassXC Browser extension which connects with the desktop client. Since KeepassXC operates on a single file, you can use any Filesystem syncing tool to sync that file between devices or to store it in the cloud. I am really happy with the move. [1]: https://kee", "context": "", "use_case": "desktop password manager", "switched_from": "Bitwarden", "story": "The Quiet Renovation at Bitwarden"}, {"id": 778764720, "item_id": 48672795, "url": "https://news.ycombinator.com/item?id=48672795", "by": "doubled112", "date": "2026-06-25", "stance": "neutral", "quote": "Syncing isn't a KeePassXC problem.  The database is just a file.", "excerpt": "Syncing isn't a KeePassXC problem. The database is just a file. That may or may not make your life easier. There are a few decent Android and iOS apps that work well. I use Nextcloud and WebDAV for access. Not a setup I can recommend to just anybody though.", "context": "", "use_case": "password management", "switched_from": "", "story": "LastPass notifies users of yet another data breach"}]}, {"label": "Open source", "summary": "Commenters value that it and its companion apps are fully open source and self-hostable.", "quotes": [{"id": 801435121, "item_id": 50089695, "url": "https://news.ycombinator.com/item?id=50089695", "by": "willis936", "date": "2026-10-14", "stance": "recommend", "quote": "Both nextcloud and keepassxc are open source.", "excerpt": "I use nextcloud to sync my own keepass database across my devices. Both nextcloud and keepassxc are open source. Please explain how self hosting open source software is locking me into a vendor. If the sky falls and strongbox ceases working with mac/iOS I can use android and linux. Nobody is locking my lockbox.", "context": "self-hosts open source software", "use_case": "password and passkey management", "switched_from": "", "story": "Passkeys are not a trap"}, {"id": 752681744, "item_id": 47042609, "url": "https://news.ycombinator.com/item?id=47042609", "by": "theandrewbailey", "date": "2026-02-16", "stance": "recommend", "quote": "I use KeePassXC on desktop and KeePassDX on Android.", "excerpt": "I use KeePassXC on desktop and KeePassDX on Android. I have my own file server, and manually sync the database file through it when needed. No subscription fee, 100% open source and self-hosted. https://keepassxc.org/ https://www.keepassdx.com/", "context": "self-hosts a file server", "use_case": "password manager on desktop", "switched_from": "", "story": "Ask HN: Which password manager do you use / would you recommend?"}, {"id": 778815280, "item_id": 48675955, "url": "https://news.ycombinator.com/item?id=48675955", "by": "bradley13", "date": "2026-06-25", "stance": "recommend", "quote": "I use KeepassXC with Keepass2Android. Open source, with a local database that you can choose to sync (or not).", "excerpt": "WTF is LastPasd doing, handing customer details to a market research company? Any such data should have been fully anonymized: no names, no specific addresses, etc.. For anyone looking for a recommendation: I use KeepassXC with Keepass2Android. Open source, with a local database that you can choose to sync (or not). I sync using Own cloud.", "context": "", "use_case": "password manager", "switched_from": "", "story": "LastPass notifies users of yet another data breach"}]}, {"label": "Mobile companions", "summary": "Compatible Android apps like KeePassDX and Keepass2Android share the same database.", "quotes": [{"id": 770906880, "item_id": 48181680, "url": "https://news.ycombinator.com/item?id=48181680", "by": "kn100", "date": "2026-05-18", "stance": "recommend", "quote": "The Keepass experience is significantly better these days!", "excerpt": "Good post. I switched from Bitwarden to KeepassXC / KeepassDX / Syncthing across my Android phone, Linux PC, and Windows PC. This was the setup I had prior to using Bitwarden for the first time. The Keepass experience is significantly better these days! Importing from Bitwarden is trivial too. Recommended!", "context": "", "use_case": "password management", "switched_from": "Bitwarden", "story": "The Quiet Renovation at Bitwarden"}, {"id": 752681744, "item_id": 47042609, "url": "https://news.ycombinator.com/item?id=47042609", "by": "theandrewbailey", "date": "2026-02-16", "stance": "recommend", "quote": "I use KeePassXC on desktop and KeePassDX on Android.", "excerpt": "I use KeePassXC on desktop and KeePassDX on Android. I have my own file server, and manually sync the database file through it when needed. No subscription fee, 100% open source and self-hosted. https://keepassxc.org/ https://www.keepassdx.com/", "context": "self-hosts a file server", "use_case": "password manager on desktop", "switched_from": "", "story": "Ask HN: Which password manager do you use / would you recommend?"}, {"id": 752757730, "item_id": 47047358, "url": "https://news.ycombinator.com/item?id=47047358", "by": "Gormo", "date": "2026-02-17", "stance": "neutral", "quote": "shares DB with KeePassXC on desktop", "excerpt": "Some others that I use: * NextCloud -- client for personal NextCloud server; this app is used primarily for file sync, with other features accessed with other apps. (https://nextcloud.com/features/?filter=Clients#android-client) * KeePassDX -- password manager, shares DB with KeePassXC on desktop, which is synced via NextCloud. Also functions as a TOTP authenticator. (https://www.keepassdx.com/) * DAVx5 -- CalDAV and", "context": "", "use_case": "desktop password manager", "switched_from": "", "story": "GrapheneOS \u2013 Break Free from Google and Apple"}]}, {"label": "Passkey support", "summary": "It can create and export passkeys, which users find more transparent than native passkey flows.", "quotes": [{"id": 796058960, "item_id": 49753685, "url": "https://news.ycombinator.com/item?id=49753685", "by": "brushfoot", "date": "2026-09-18", "stance": "recommend", "quote": "If you have to use passkeys, try KeePassXC and KeePassXC-Browser. I used them to set one up for Amazon a few days ago", "excerpt": "If you have to use passkeys, try KeePassXC and KeePassXC-Browser. I used them to set one up for Amazon a few days ago, as Amazon now forces passkeys as of this month, at least for my account. It was relatively painless. That said, I don't like passkeys either.", "context": "", "use_case": "passkey storage", "switched_from": "", "story": "I don't like passkeys"}, {"id": 755077088, "item_id": 47192318, "url": "https://news.ycombinator.com/item?id=47192318", "by": "ifh-hn", "date": "2026-02-28", "stance": "recommend", "quote": "I use passkeys from keepasxc because the native workflow for passkeys is opaque", "excerpt": "Passkeys to me come across as a part solution to a valid problem. Education is part of the solution. Treating the user as too dumb to understand why they need strong passwords or passkeys is important. I actually despair about when my family members are forced into passkeys and then lose access to their accounts because they get a new device. I use passkeys from keepasxc because the native workflow for passkeys is op", "context": "", "use_case": "passkey storage", "switched_from": "", "story": "Don't use passkeys for encrypting user data"}, {"id": 784163378, "item_id": 49010211, "url": "https://news.ycombinator.com/item?id=49010211", "by": "dfabulich", "date": "2026-07-22", "stance": "neutral", "quote": "Bitwarden, Proton Pass, and KeepassXC do support exporting passkeys to CSV", "excerpt": "> Every single major password manager supports export. They all support exporting passwords, but, check your CSV; you won't find any passkeys in the CSV export for Apple, Google, Microsoft, Mozilla, 1Password, or LastPass. (Bitwarden, Proton Pass, and KeepassXC do support exporting passkeys to CSV, which undermines the phishing protections, at least somewhat. It\u2019s possible to trick you into exporting your passkeys fr", "context": "", "use_case": "passkey export", "switched_from": "", "story": "Passkeys were invented by engineers with zero understanding of consumer brain"}]}, {"label": "Power-user features", "summary": "Keyboard-driven browser extension, auto-type, TOTP and use as a secret provider are appreciated.", "quotes": [{"id": 800577712, "item_id": 50036107, "url": "https://news.ycombinator.com/item?id=50036107", "by": "jonny2811", "date": "2026-10-10", "stance": "recommend", "quote": "ive used keepassxc forever", "excerpt": "ive used keepassxc forever, switched to proton pass after the release, because i was managing my db in git and it was always a pain to keep in sync, but switched back a couple of weeks ago with exactly the same setup, syncthing and KeepassDx also works suprisingly well. mostly i was missing power user features and especially ux for the browser plugin, namely you can't operate it fully with the keyboard, with keepassx", "context": "", "use_case": "password manager", "switched_from": "Proton Pass", "story": "Bitwarden Dual License Model"}, {"id": 771042816, "item_id": 48190176, "url": "https://news.ycombinator.com/item?id=48190176", "by": "4k93n2", "date": "2026-05-19", "stance": "recommend", "quote": "im using pretty much the same setup myself", "excerpt": "im using pretty much the same setup myself just to mention an alternative method for anyone that doesnt know: keepass also has a feature called 'autotype' where the desktop program can send keystrokes to fill in password fields the benefit of this over the browser extension is that there is no connection between your browser and your keepass vault. its also handy for filling in passwords in desktop programs or even a", "context": "", "use_case": "password management", "switched_from": "", "story": "The Quiet Renovation at Bitwarden"}, {"id": 761232417, "item_id": 47577026, "url": "https://news.ycombinator.com/item?id=47577026", "by": "bastard_op", "date": "2026-03-30", "stance": "neutral", "quote": "I use keepassxc as my secret provider", "excerpt": "I have a similar issue, where normally I use claude-code in an srt or bwrap direct sandbox, but when I don't, claude-code will call gh _every_ time I backspace out of a /command or escape a menu such a /mcp, any time I paste something, as well as on some timer that sounds like the issue owner's complaint of 10 minutes. I know because I use keepassxc as my secret provider, so I get an approval prompt to allow or deny ", "context": "", "use_case": "secret provider", "switched_from": "", "story": "Claude Code runs Git reset \u2013hard origin/main against project repo every 10 mins"}]}], "caveats": [{"label": "DIY syncing", "summary": "Sync is left to external tools, which can fail silently or lack conflict resolution.", "quotes": [{"id": 800550050, "item_id": 50034378, "url": "https://news.ycombinator.com/item?id=50034378", "by": "Arrowmaster", "date": "2026-10-10", "stance": "warn", "quote": "the Linux desktop experience and mobile syncing was so terrible", "excerpt": "I specifically moved away from KeePassXC to Bitwarden with self hosted vaultwarden because the Linux desktop experience and mobile syncing was so terrible. While I love KeePassXC, using it on an immutable Linux distro where everything needs to be Flatpak means the browser extension doesn't work because it doesn't support Flatpak'd browsers back when I switched. Auto type is a security nightmare and is not an option. ", "context": "immutable Linux distro user", "use_case": "password manager", "switched_from": "", "story": "Bitwarden Dual License Model"}, {"id": 742902561, "item_id": 46431410, "url": "https://news.ycombinator.com/item?id=46431410", "by": "lightandlight", "date": "2025-12-30", "stance": "recommend", "quote": "This year I moved off LastPass, and started using [Syncthing](https://syncthing.net/) to sync my [KeepassXC](https://keepassxc.org/).", "excerpt": "This year I moved off LastPass, and started using [Syncthing](https://syncthing.net/) to sync my [KeepassXC](https://keepassxc.org/). It works pretty well, but doesn't have any automatic conflict resolution (I've been working on [something](https://github.com/LightAndLight/syncthing-merge) for this). Next up I'm moving my TODOs off Todoist to something local-first, and plugging that into my Syncthing setup.", "context": "", "use_case": "password management", "switched_from": "LastPass", "story": "Bye Bye Big Tech: How I Migrated to an Almost All-EU Stack (and Saved 500\u20ac/Year)"}, {"id": 778764720, "item_id": 48672795, "url": "https://news.ycombinator.com/item?id=48672795", "by": "doubled112", "date": "2026-06-25", "stance": "neutral", "quote": "Syncing isn't a KeePassXC problem.  The database is just a file.", "excerpt": "Syncing isn't a KeePassXC problem. The database is just a file. That may or may not make your life easier. There are a few decent Android and iOS apps that work well. I use Nextcloud and WebDAV for access. Not a setup I can recommend to just anybody though.", "context": "", "use_case": "password management", "switched_from": "", "story": "LastPass notifies users of yet another data breach"}]}, {"label": "Flatpak browser issues", "summary": "One user found the browser extension didn't work with Flatpak'd browsers on an immutable Linux distro.", "quotes": [{"id": 800550050, "item_id": 50034378, "url": "https://news.ycombinator.com/item?id=50034378", "by": "Arrowmaster", "date": "2026-10-10", "stance": "warn", "quote": "the Linux desktop experience and mobile syncing was so terrible", "excerpt": "I specifically moved away from KeePassXC to Bitwarden with self hosted vaultwarden because the Linux desktop experience and mobile syncing was so terrible. While I love KeePassXC, using it on an immutable Linux distro where everything needs to be Flatpak means the browser extension doesn't work because it doesn't support Flatpak'd browsers back when I switched. Auto type is a security nightmare and is not an option. ", "context": "immutable Linux distro user", "use_case": "password manager", "switched_from": "", "story": "Bitwarden Dual License Model"}]}, {"label": "Windows look and feel", "summary": "One commenter felt the cross-platform UI didn't look or feel good on Windows.", "quotes": [{"id": 800560993, "item_id": 50035062, "url": "https://news.ycombinator.com/item?id=50035062", "by": "qwerpy", "date": "2026-10-10", "stance": "warn", "quote": "the cross platform UI on KeePassXC just didn\u2019t look and feel good on windows", "excerpt": "At the time I decided to go with regular keepass, it was because setting up OneDrive sync (directly to OneDrive, not depending on a mapped folder because I use as little MS software as possible) and browser extension was easier. And the cross platform UI on KeePassXC just didn\u2019t look and feel good on windows.", "context": "", "use_case": "", "switched_from": "", "story": "Bitwarden Dual License Model"}]}, {"label": "Not for sharing", "summary": "It suits individuals but may not work well for sharing passwords in corporate settings.", "quotes": [{"id": 778802240, "item_id": 48675140, "url": "https://news.ycombinator.com/item?id=48675140", "by": "mook", "date": "2026-06-25", "stance": "neutral", "quote": "I use KeepassXC, but I have no need to share passwords with other people.", "excerpt": "I use KeepassXC, but I have no need to share passwords with other people. In a corporate situation that would probably not work as well.", "context": "", "use_case": "password management", "switched_from": "", "story": "LastPass notifies users of yet another data breach"}, {"id": 801438561, "item_id": 50089910, "url": "https://news.ycombinator.com/item?id=50089910", "by": "embeng4096", "date": "2026-10-14", "stance": "neutral", "quote": "I would still be on Keepass[XC] for my own private usage.", "excerpt": "Exactly. So much for TFA's \"or whatever other software of your choosing\" claim. Passkeys are a trap, trying to lock users in to the service providers. I did say I like and use 1Password, but I do remember that they switched from a one-time payment model to a subscription model, and have now stopped supporting the old software and only support their subscription software. If it wasn't for my non-tech-savvy, aging fami", "context": "", "use_case": "personal password management", "switched_from": "", "story": "Passkeys are not a trap"}]}, {"label": "Passkey export pushback", "summary": "Letting users export passkeys drew threats that relying parties might block KeePassXC.", "quotes": [{"id": 801554496, "item_id": 50097156, "url": "https://news.ycombinator.com/item?id=50097156", "by": "_jackdk_", "date": "2026-10-14", "stance": "recommend", "quote": "This threat, because someone dared to give users control, is completely unacceptable to me.", "excerpt": "https://github.com/keepassxreboot/keepassxc/issues/10407#issuecomment-1994182200 > To be very honest here, you risk having KeePassXC blocked by relying parties This threat, because someone dared to give users control, is completely unacceptable to me.", "context": "", "use_case": "passkey manager", "switched_from": "", "story": "Passkeys are not a trap"}, {"id": 792638640, "item_id": 49539915, "url": "https://news.ycombinator.com/item?id=49539915", "by": "OkayPhysicist", "date": "2026-09-02", "stance": "neutral", "quote": "it's already been wielded as cudgel against KeypassXC for having the audacity to let users access their own keys", "excerpt": "The elevator pitch for passkeys is okay. A bit more complexity than we should be pushing non-technical users, but fine. A deeper dive into the the actual implementation reveals that the whole thing is a massive vendor lock-in hell-hole, pushed by megacorps who want nothing short of complete domination of your life. First off, sites are extremely pushy about replacing your perfectly good password with a passkey, but t", "context": "", "use_case": "passkey vault", "switched_from": "", "story": "A Beginner's Deep Dive Guide to Entra Passkeys"}, {"id": 784163378, "item_id": 49010211, "url": "https://news.ycombinator.com/item?id=49010211", "by": "dfabulich", "date": "2026-07-22", "stance": "neutral", "quote": "Bitwarden, Proton Pass, and KeepassXC do support exporting passkeys to CSV", "excerpt": "> Every single major password manager supports export. They all support exporting passwords, but, check your CSV; you won't find any passkeys in the CSV export for Apple, Google, Microsoft, Mozilla, 1Password, or LastPass. (Bitwarden, Proton Pass, and KeepassXC do support exporting passkeys to CSV, which undermines the phishing protections, at least somewhat. It\u2019s possible to trick you into exporting your passkeys fr", "context": "", "use_case": "passkey export", "switched_from": "", "story": "Passkeys were invented by engineers with zero understanding of consumer brain"}]}], "who": [{"by": "oflebbe", "context": "Linux user on Debian or older Ubuntu LTS", "url": "https://news.ycombinator.com/item?id=50150535", "date": "2026-10-19"}, {"by": "user00005", "context": "uses Linux, Windows, Android", "url": "https://news.ycombinator.com/item?id=50092557", "date": "2026-10-14"}, {"by": "willis936", "context": "self-hosts open source software", "url": "https://news.ycombinator.com/item?id=50089695", "date": "2026-10-14"}, {"by": "theandrewbailey", "context": "self-hosts a file server", "url": "https://news.ycombinator.com/item?id=47042609", "date": "2026-02-16"}], "tags": ["self-hostable", "for Linux users", "for Android users", "for individuals", "offline-capable"], "use_cases": ["password management", "password storage", "password manager", "personal password management", "passkey storage", "desktop password manager"], "compared": [{"slug": "bitwarden", "name": "Bitwarden", "co": 8, "switched_from": 3, "switched_to": 1}, {"slug": "syncthing", "name": "Syncthing", "co": 7, "switched_from": 0, "switched_to": 0}, {"slug": "keepassdx", "name": "KeePassDX", "co": 6, "switched_from": 0, "switched_to": 0}, {"slug": "proton-pass", "name": "Proton Pass", "co": 2, "switched_from": 1, "switched_to": 1}, {"slug": "lastpass", "name": "LastPass", "co": 3, "switched_from": 1, "switched_to": 0}, {"slug": "nextcloud", "name": "Nextcloud", "co": 3, "switched_from": 0, "switched_to": 0}, {"slug": "1password", "name": "1Password", "co": 3, "switched_from": 0, "switched_to": 0}, {"slug": "vaultwarden", "name": "Vaultwarden", "co": 1, "switched_from": 0, "switched_to": 1}], "makers": [], "threads": [{"url": "https://news.ycombinator.com/item?id=50088935", "title": "Passkeys are not a trap", "mentions": 5}, {"url": "https://news.ycombinator.com/item?id=50033407", "title": "Bitwarden Dual License Model", "mentions": 3}, {"url": "https://news.ycombinator.com/item?id=49753211", "title": "I don't like passkeys", "mentions": 3}, {"url": "https://news.ycombinator.com/item?id=49007374", "title": "Passkeys were invented by engineers with zero understanding of consumer brain", "mentions": 3}, {"url": "https://news.ycombinator.com/item?id=48671468", "title": "LastPass notifies users of yet another data breach", "mentions": 3}, {"url": "https://news.ycombinator.com/item?id=48163389", "title": "The Quiet Renovation at Bitwarden", "mentions": 3}], "sentiment_by_month": {"2025-11": {"recommend": 1}, "2025-12": {"recommend": 1}, "2026-01": {}, "2026-02": {"recommend": 2, "neutral": 1}, "2026-03": {"neutral": 1}, "2026-04": {}, "2026-05": {"recommend": 4}, "2026-06": {"neutral": 2, "recommend": 1}, "2026-07": {"neutral": 1, "recommend": 2}, "2026-08": {"recommend": 1}, "2026-09": {"neutral": 4, "recommend": 2}, "2026-10": {"warn": 2, "recommend": 5, "neutral": 2}}, "quotes": [{"id": 802408562, "item_id": 50150535, "url": "https://news.ycombinator.com/item?id=50150535", "by": "oflebbe", "date": "2026-10-19", "stance": "neutral", "quote": "Running up-to-date desktop apps like synology-drive, prusa slicer, keepassxc, kdenlive or even Steam", "excerpt": "Flatpak is now an indispensible part of my linux setup on debian or an older ubuntu LTS: Running up-to-date desktop apps like synology-drive, prusa slicer, keepassxc, kdenlive or even Steam at the same time without any conflicting dependencies and configurations tainting the distribution. And if you do not want to use it any more, you can simply remove it with little or even no traces left behind. I love the experien", "context": "Linux user on Debian or older Ubuntu LTS", "use_case": "password manager via Flatpak", "switched_from": "", "story": "Flatpak \u2013 An Insecurity Nightmare (2023)"}, {"id": 801554496, "item_id": 50097156, "url": "https://news.ycombinator.com/item?id=50097156", "by": "_jackdk_", "date": "2026-10-14", "stance": "recommend", "quote": "This threat, because someone dared to give users control, is completely unacceptable to me.", "excerpt": "https://github.com/keepassxreboot/keepassxc/issues/10407#issuecomment-1994182200 > To be very honest here, you risk having KeePassXC blocked by relying parties This threat, because someone dared to give users control, is completely unacceptable to me.", "context": "", "use_case": "passkey manager", "switched_from": "", "story": "Passkeys are not a trap"}, {"id": 801480912, "item_id": 50092557, "url": "https://news.ycombinator.com/item?id=50092557", "by": "user00005", "date": "2026-10-14", "stance": "recommend", "quote": "stored only on my devices(Linux, Windows, Android) using open source software (KeepassXC, KeepassDX)", "excerpt": "I'm moving my HSA because the company moved to passkeys. I use unique email addresses and passwords, stored only on my devices(Linux, Windows, Android) using open source software (KeepassXC, KeepassDX). Passkeys add new friction I don't need.", "context": "uses Linux, Windows, Android", "use_case": "password storage", "switched_from": "", "story": "Passkeys are not a trap"}, {"id": 801459008, "item_id": 50091188, "url": "https://news.ycombinator.com/item?id=50091188", "by": "jgrahamc", "date": "2026-10-14", "stance": "recommend", "quote": "I use KeepPassXC.", "excerpt": "I find the following has the right combination of mental model and security for me: 1. A password manager that generates my passwords stored on an external USB key (which is itself encrypted). I use KeepPassXC. 2. More than one Yubikey doing U2F. I know how to backup #1 and I have more than one of #2 to handle losing a Yubikey. #2 gives me phishing protection.", "context": "", "use_case": "password generation and storage", "switched_from": "", "story": "Passkeys are not a trap"}, {"id": 801438561, "item_id": 50089910, "url": "https://news.ycombinator.com/item?id=50089910", "by": "embeng4096", "date": "2026-10-14", "stance": "neutral", "quote": "I would still be on Keepass[XC] for my own private usage.", "excerpt": "Exactly. So much for TFA's \"or whatever other software of your choosing\" claim. Passkeys are a trap, trying to lock users in to the service providers. I did say I like and use 1Password, but I do remember that they switched from a one-time payment model to a subscription model, and have now stopped supporting the old software and only support their subscription software. If it wasn't for my non-tech-savvy, aging fami", "context": "", "use_case": "personal password management", "switched_from": "", "story": "Passkeys are not a trap"}, {"id": 801435121, "item_id": 50089695, "url": "https://news.ycombinator.com/item?id=50089695", "by": "willis936", "date": "2026-10-14", "stance": "recommend", "quote": "Both nextcloud and keepassxc are open source.", "excerpt": "I use nextcloud to sync my own keepass database across my devices. Both nextcloud and keepassxc are open source. Please explain how self hosting open source software is locking me into a vendor. If the sky falls and strongbox ceases working with mac/iOS I can use android and linux. Nobody is locking my lockbox.", "context": "self-hosts open source software", "use_case": "password and passkey management", "switched_from": "", "story": "Passkeys are not a trap"}, {"id": 800577712, "item_id": 50036107, "url": "https://news.ycombinator.com/item?id=50036107", "by": "jonny2811", "date": "2026-10-10", "stance": "recommend", "quote": "ive used keepassxc forever", "excerpt": "ive used keepassxc forever, switched to proton pass after the release, because i was managing my db in git and it was always a pain to keep in sync, but switched back a couple of weeks ago with exactly the same setup, syncthing and KeepassDx also works suprisingly well. mostly i was missing power user features and especially ux for the browser plugin, namely you can't operate it fully with the keyboard, with keepassx", "context": "", "use_case": "password manager", "switched_from": "Proton Pass", "story": "Bitwarden Dual License Model"}, {"id": 800560993, "item_id": 50035062, "url": "https://news.ycombinator.com/item?id=50035062", "by": "qwerpy", "date": "2026-10-10", "stance": "warn", "quote": "the cross platform UI on KeePassXC just didn\u2019t look and feel good on windows", "excerpt": "At the time I decided to go with regular keepass, it was because setting up OneDrive sync (directly to OneDrive, not depending on a mapped folder because I use as little MS software as possible) and browser extension was easier. And the cross platform UI on KeePassXC just didn\u2019t look and feel good on windows.", "context": "", "use_case": "", "switched_from": "", "story": "Bitwarden Dual License Model"}, {"id": 800550050, "item_id": 50034378, "url": "https://news.ycombinator.com/item?id=50034378", "by": "Arrowmaster", "date": "2026-10-10", "stance": "warn", "quote": "the Linux desktop experience and mobile syncing was so terrible", "excerpt": "I specifically moved away from KeePassXC to Bitwarden with self hosted vaultwarden because the Linux desktop experience and mobile syncing was so terrible. While I love KeePassXC, using it on an immutable Linux distro where everything needs to be Flatpak means the browser extension doesn't work because it doesn't support Flatpak'd browsers back when I switched. Auto type is a security nightmare and is not an option. ", "context": "immutable Linux distro user", "use_case": "password manager", "switched_from": "", "story": "Bitwarden Dual License Model"}, {"id": 796116049, "item_id": 49757253, "url": "https://news.ycombinator.com/item?id=49757253", "by": "wpollock", "date": "2026-09-18", "stance": "neutral", "quote": "Keepass (or KeepassXC) stores other data as well", "excerpt": "> The website should display a qr code you can scan with your phone that allows you to then login... A malicious website can display a QR code too. I think this \"feature\" could cause some of the security issues that passkesys were intended to solve. I use Keepass and the free tier of Dropbox, to keep my passwords strong and available across multiple devices. (Dropbox not required, you can store the database on a thum", "context": "", "use_case": "password management", "switched_from": "", "story": "I don't like passkeys"}, {"id": 796073808, "item_id": 49754613, "url": "https://news.ycombinator.com/item?id=49754613", "by": "diego_moita", "date": "2026-09-18", "stance": "neutral", "quote": "For sites requiring 2FA, I use TOTP (time-based one time passwords) from KeePassXC.", "excerpt": "I hate them, mostly because I am forced to use them. They provide crappy usability, they're expensive, they're easy to lose, you can't use the physical keys when doing remote desktop access. My job requires me to use them. I use only for the job and nothing else. For sites requiring 2FA, I use TOTP (time-based one time passwords) from KeePassXC.", "context": "", "use_case": "TOTP codes", "switched_from": "", "story": "I don't like passkeys"}, {"id": 796058960, "item_id": 49753685, "url": "https://news.ycombinator.com/item?id=49753685", "by": "brushfoot", "date": "2026-09-18", "stance": "recommend", "quote": "If you have to use passkeys, try KeePassXC and KeePassXC-Browser. I used them to set one up for Amazon a few days ago", "excerpt": "If you have to use passkeys, try KeePassXC and KeePassXC-Browser. I used them to set one up for Amazon a few days ago, as Amazon now forces passkeys as of this month, at least for my account. It was relatively painless. That said, I don't like passkeys either.", "context": "", "use_case": "passkey storage", "switched_from": "", "story": "I don't like passkeys"}, {"id": 793108928, "item_id": 49569308, "url": "https://news.ycombinator.com/item?id=49569308", "by": "remuskaos", "date": "2026-09-04", "stance": "recommend", "quote": "I strongly preferred email and password login, backed by a keepass(xc) store to hold the data.", "excerpt": "You've hit the nail on the head. That's why I strongly preferred email and password login, backed by a keepass(xc) store to hold the data. Owned by me, backed up, impossible to take from me, the works. Sure, most of the time I have to verify my mail address, but after that the account is mine. Well, okay. On some services, I have to \"confirm the new device\" I'm loggin in from, so I still need access to my mail. Weeee", "context": "", "use_case": "password storage", "switched_from": "", "story": ".name Termination"}, {"id": 792990433, "item_id": 49561902, "url": "https://news.ycombinator.com/item?id=49561902", "by": "vonunov", "date": "2026-09-04", "stance": "neutral", "quote": "generated in KeepassXC", "excerpt": "I don't know if I'm really at an ideal state, but I have at least the cumulative results of meeting immediate needs over time: I have a domain.tld with MX to Purelymail and a duplicate MX record also for a sub.domain.tld. New account registrations get example.com@sub.domain.tld (and a unique password/phrase using EFF Large Wordlist and generated in KeepassXC (so not real diceware, I think, despite the little icon of ", "context": "", "use_case": "password generation", "switched_from": "", "story": "Ask HN: What is the ideal email domain setup?"}, {"id": 792638640, "item_id": 49539915, "url": "https://news.ycombinator.com/item?id=49539915", "by": "OkayPhysicist", "date": "2026-09-02", "stance": "neutral", "quote": "it's already been wielded as cudgel against KeypassXC for having the audacity to let users access their own keys", "excerpt": "The elevator pitch for passkeys is okay. A bit more complexity than we should be pushing non-technical users, but fine. A deeper dive into the the actual implementation reveals that the whole thing is a massive vendor lock-in hell-hole, pushed by megacorps who want nothing short of complete domination of your life. First off, sites are extremely pushy about replacing your perfectly good password with a passkey, but t", "context": "", "use_case": "passkey vault", "switched_from": "", "story": "A Beginner's Deep Dive Guide to Entra Passkeys"}, {"id": 789453376, "item_id": 49340836, "url": "https://news.ycombinator.com/item?id=49340836", "by": "daleswanson", "date": "2026-08-17", "stance": "recommend", "quote": "I use KeepassXC and Syncthing.", "excerpt": "I use KeepassXC and Syncthing. It's not a single password manager doing both the managing and syncing, but it works very well, and I sync between phone/laptop/desktop without any third parties.", "context": "", "use_case": "password manager synced across devices", "switched_from": "", "story": "Bluesky draws its logo on screenshots"}, {"id": 784531088, "item_id": 49033193, "url": "https://news.ycombinator.com/item?id=49033193", "by": "ekjhgkejhgk", "date": "2026-07-24", "stance": "recommend", "quote": "I love KeepassXC, I use it for all my passwords.", "excerpt": "I love KeepassXC, I use it for all my passwords. However, I won't give it things which are meant to represent devices. People who designed the 2FA model designed with the intention that a password is something you know and a device is something you have. By putting storing both together you're breaking the assumptions of the people who design these systems. So I store all my passwords on KeepassXC, everything else ha", "context": "", "use_case": "password storage", "switched_from": "", "story": "Passkeys were invented by engineers with zero understanding of consumer brain"}, {"id": 784221824, "item_id": 49013864, "url": "https://news.ycombinator.com/item?id=49013864", "by": "cpburns2009", "date": "2026-07-22", "stance": "recommend", "quote": "I use KeePassXC, just not for passkeys.", "excerpt": "I use KeePassXC, just not for passkeys. I used to use Dropbox but now I use Syncthing. I use a strong password and a key file that IS NOT synced.", "context": "", "use_case": "password management", "switched_from": "", "story": "Passkeys were invented by engineers with zero understanding of consumer brain"}, {"id": 784163378, "item_id": 49010211, "url": "https://news.ycombinator.com/item?id=49010211", "by": "dfabulich", "date": "2026-07-22", "stance": "neutral", "quote": "Bitwarden, Proton Pass, and KeepassXC do support exporting passkeys to CSV", "excerpt": "> Every single major password manager supports export. They all support exporting passwords, but, check your CSV; you won't find any passkeys in the CSV export for Apple, Google, Microsoft, Mozilla, 1Password, or LastPass. (Bitwarden, Proton Pass, and KeepassXC do support exporting passkeys to CSV, which undermines the phishing protections, at least somewhat. It\u2019s possible to trick you into exporting your passkeys fr", "context": "", "use_case": "passkey export", "switched_from": "", "story": "Passkeys were invented by engineers with zero understanding of consumer brain"}, {"id": 778815280, "item_id": 48675955, "url": "https://news.ycombinator.com/item?id=48675955", "by": "bradley13", "date": "2026-06-25", "stance": "recommend", "quote": "I use KeepassXC with Keepass2Android. Open source, with a local database that you can choose to sync (or not).", "excerpt": "WTF is LastPasd doing, handing customer details to a market research company? Any such data should have been fully anonymized: no names, no specific addresses, etc.. For anyone looking for a recommendation: I use KeepassXC with Keepass2Android. Open source, with a local database that you can choose to sync (or not). I sync using Own cloud.", "context": "", "use_case": "password manager", "switched_from": "", "story": "LastPass notifies users of yet another data breach"}, {"id": 778802240, "item_id": 48675140, "url": "https://news.ycombinator.com/item?id=48675140", "by": "mook", "date": "2026-06-25", "stance": "neutral", "quote": "I use KeepassXC, but I have no need to share passwords with other people.", "excerpt": "I use KeepassXC, but I have no need to share passwords with other people. In a corporate situation that would probably not work as well.", "context": "", "use_case": "password management", "switched_from": "", "story": "LastPass notifies users of yet another data breach"}, {"id": 778764720, "item_id": 48672795, "url": "https://news.ycombinator.com/item?id=48672795", "by": "doubled112", "date": "2026-06-25", "stance": "neutral", "quote": "Syncing isn't a KeePassXC problem.  The database is just a file.", "excerpt": "Syncing isn't a KeePassXC problem. The database is just a file. That may or may not make your life easier. There are a few decent Android and iOS apps that work well. I use Nextcloud and WebDAV for access. Not a setup I can recommend to just anybody though.", "context": "", "use_case": "password management", "switched_from": "", "story": "LastPass notifies users of yet another data breach"}, {"id": 771613936, "item_id": 48225871, "url": "https://news.ycombinator.com/item?id=48225871", "by": "arikrahman", "date": "2026-05-21", "stance": "recommend", "quote": "Just switched to KeepassXC and syncthing. Transferring keyfiles over LocalSend. This has been a great local FOSS way to keep autonomy over secrets", "excerpt": "Just switched to KeepassXC and syncthing. Transferring keyfiles over LocalSend. This has been a great local FOSS way to keep autonomy over secrets, without even needing internet.", "context": "", "use_case": "local password management", "switched_from": "Bitwarden", "story": "Get your passwords out of Bitwarden while you still can"}, {"id": 771042816, "item_id": 48190176, "url": "https://news.ycombinator.com/item?id=48190176", "by": "4k93n2", "date": "2026-05-19", "stance": "recommend", "quote": "im using pretty much the same setup myself", "excerpt": "im using pretty much the same setup myself just to mention an alternative method for anyone that doesnt know: keepass also has a feature called 'autotype' where the desktop program can send keystrokes to fill in password fields the benefit of this over the browser extension is that there is no connection between your browser and your keepass vault. its also handy for filling in passwords in desktop programs or even a", "context": "", "use_case": "password management", "switched_from": "", "story": "The Quiet Renovation at Bitwarden"}, {"id": 770916080, "item_id": 48182255, "url": "https://news.ycombinator.com/item?id=48182255", "by": "varbhat", "date": "2026-05-18", "stance": "recommend", "quote": "I am really happy with the move.", "excerpt": "I have moved to KeepassXC[1] on my desktop from Bitwarden. On phone, I use KeepassDX[2] which is Android client compatible with KeepassXC. On browser, I use KeepassXC Browser extension which connects with the desktop client. Since KeepassXC operates on a single file, you can use any Filesystem syncing tool to sync that file between devices or to store it in the cloud. I am really happy with the move. [1]: https://kee", "context": "", "use_case": "desktop password manager", "switched_from": "Bitwarden", "story": "The Quiet Renovation at Bitwarden"}, {"id": 770906880, "item_id": 48181680, "url": "https://news.ycombinator.com/item?id=48181680", "by": "kn100", "date": "2026-05-18", "stance": "recommend", "quote": "The Keepass experience is significantly better these days!", "excerpt": "Good post. I switched from Bitwarden to KeepassXC / KeepassDX / Syncthing across my Android phone, Linux PC, and Windows PC. This was the setup I had prior to using Bitwarden for the first time. The Keepass experience is significantly better these days! Importing from Bitwarden is trivial too. Recommended!", "context": "", "use_case": "password management", "switched_from": "Bitwarden", "story": "The Quiet Renovation at Bitwarden"}, {"id": 761232417, "item_id": 47577026, "url": "https://news.ycombinator.com/item?id=47577026", "by": "bastard_op", "date": "2026-03-30", "stance": "neutral", "quote": "I use keepassxc as my secret provider", "excerpt": "I have a similar issue, where normally I use claude-code in an srt or bwrap direct sandbox, but when I don't, claude-code will call gh _every_ time I backspace out of a /command or escape a menu such a /mcp, any time I paste something, as well as on some timer that sounds like the issue owner's complaint of 10 minutes. I know because I use keepassxc as my secret provider, so I get an approval prompt to allow or deny ", "context": "", "use_case": "secret provider", "switched_from": "", "story": "Claude Code runs Git reset \u2013hard origin/main against project repo every 10 mins"}, {"id": 755077088, "item_id": 47192318, "url": "https://news.ycombinator.com/item?id=47192318", "by": "ifh-hn", "date": "2026-02-28", "stance": "recommend", "quote": "I use passkeys from keepasxc because the native workflow for passkeys is opaque", "excerpt": "Passkeys to me come across as a part solution to a valid problem. Education is part of the solution. Treating the user as too dumb to understand why they need strong passwords or passkeys is important. I actually despair about when my family members are forced into passkeys and then lose access to their accounts because they get a new device. I use passkeys from keepasxc because the native workflow for passkeys is op", "context": "", "use_case": "passkey storage", "switched_from": "", "story": "Don't use passkeys for encrypting user data"}, {"id": 752757730, "item_id": 47047358, "url": "https://news.ycombinator.com/item?id=47047358", "by": "Gormo", "date": "2026-02-17", "stance": "neutral", "quote": "shares DB with KeePassXC on desktop", "excerpt": "Some others that I use: * NextCloud -- client for personal NextCloud server; this app is used primarily for file sync, with other features accessed with other apps. (https://nextcloud.com/features/?filter=Clients#android-client) * KeePassDX -- password manager, shares DB with KeePassXC on desktop, which is synced via NextCloud. Also functions as a TOTP authenticator. (https://www.keepassdx.com/) * DAVx5 -- CalDAV and", "context": "", "use_case": "desktop password manager", "switched_from": "", "story": "GrapheneOS \u2013 Break Free from Google and Apple"}, {"id": 752681744, "item_id": 47042609, "url": "https://news.ycombinator.com/item?id=47042609", "by": "theandrewbailey", "date": "2026-02-16", "stance": "recommend", "quote": "I use KeePassXC on desktop and KeePassDX on Android.", "excerpt": "I use KeePassXC on desktop and KeePassDX on Android. I have my own file server, and manually sync the database file through it when needed. No subscription fee, 100% open source and self-hosted. https://keepassxc.org/ https://www.keepassdx.com/", "context": "self-hosts a file server", "use_case": "password manager on desktop", "switched_from": "", "story": "Ask HN: Which password manager do you use / would you recommend?"}, {"id": 742902561, "item_id": 46431410, "url": "https://news.ycombinator.com/item?id=46431410", "by": "lightandlight", "date": "2025-12-30", "stance": "recommend", "quote": "This year I moved off LastPass, and started using [Syncthing](https://syncthing.net/) to sync my [KeepassXC](https://keepassxc.org/).", "excerpt": "This year I moved off LastPass, and started using [Syncthing](https://syncthing.net/) to sync my [KeepassXC](https://keepassxc.org/). It works pretty well, but doesn't have any automatic conflict resolution (I've been working on [something](https://github.com/LightAndLight/syncthing-merge) for this). Next up I'm moving my TODOs off Todoist to something local-first, and plugging that into my Syncthing setup.", "context": "", "use_case": "password management", "switched_from": "LastPass", "story": "Bye Bye Big Tech: How I Migrated to an Almost All-EU Stack (and Saved 500\u20ac/Year)"}, {"id": 733926784, "item_id": 45870424, "url": "https://news.ycombinator.com/item?id=45870424", "by": "snowwrestler", "date": "2025-11-09", "stance": "recommend", "quote": "But for my passwords I use KeePass (the file format) and a variety of clients including KeePassXC.", "excerpt": "I feel like a lot of the comments here do not understand how KeePassXC actually works. It\u2019s a client application that works with a standard encrypted file format. The file format is the basis for security, not the client application. KeePassXC does not store any data. Nor does it receive connections from the Internet, like a server. Thus the risk is structurally lower than a commercial client-server application like ", "context": "", "use_case": "personal password management", "switched_from": "", "story": "About KeePassXC's Code Quality Control"}]}