KeePass
Free, open-source password manager that stores credentials in an encrypted local KDBX database file.
HN commenters like KeePass for keeping passwords in a single encrypted file with no service required,12 syncable with tools like Syncthing345 and usable across Windows, Linux, Android and iOS clients.67 The most common caveat is that you have to set up syncing yourself,8910 and cloud drives can cause file version conflicts.1112
Why people recommend it
Bring-your-own sync · 3
Users sync the database file however they like, such as Syncthing, Dropbox, OneDrive or a USB drive.
“I've been using keepass+syncthing for years, and I've never had any issues.”
“One of the security advantages of KeePass being just a file is that you can sync it in the way that makes sense to you.”
Show 1 more
“I use KeePass Portable / Keepass2Android + syncing between devices”
Just a file · 2
The database is a single encrypted file that needs no service to run.
“keepass is great, because it doesn't require any service to operate - it's just a file.”
“One of the security advantages of KeePass being just a file is that you can sync it in the way that makes sense to you.”
Cross-platform clients · 3
An open database format with many clients lets people use it on desktop and mobile.
“I ended up with Keepass, the store is a open spec db[0] that has several clients, I use it across windows, android, and Linux without any issue”
“I use Keepass variants on my Linux and Android devices, it's absolutely terrific.”
Show 1 more
“The "sprawl of plugins and forks" in KeePass is why I use it.”
Long-term reliability · 3
Commenters report years of use without problems, including a family of four on one database.
“I love KeePass.”
“I switched to keepass a decade ago (maybe) and never looked back”
Show 1 more
“I've been using keepass+syncthing for years, and I've never had any issues.”
Plugins and 2FA · 3
Extensions and built-in features cover TOTP codes and passkeys.
“I store passkeys in a device-independent way, in KeePass using the great actively developed KeePassPasskey extension”
“Keepass is also a good alternative to Authy”
Show 1 more
“My non hardware key is a keypass file that I update only on my laptop and I sync to my other devices.”
Stores more · 3
People also keep notes, keys, URLs and other sensitive data in it.
“I use https://en.wikipedia.org/wiki/KeePass”
“KeePass for passwords, keys, configuration files or any sensitive data.”
Show 1 more
“Not affiliated with Keepass, just a happy longtime user.”
Caveats and dissent
DIY sync · 3
You need your own way to sync the database between devices, which puts off some users.
“Keepass is also a good alternative to Authy”
“One of the security advantages of KeePass being just a file is that you can sync it in the way that makes sense to you.”
Show 1 more
“Those problems are sync and sharing.”
Sync conflicts · 2
Cloud drives like Google Drive can create duplicate or conflicting database files.
“The "sprawl of plugins and forks" in KeePass is why I use it.”
“One of the security advantages of KeePass being just a file is that you can sync it in the way that makes sense to you.”
Sharing · 1
Whole-file sync makes sharing passwords with others harder.
“Those problems are sync and sharing.”
Dated UX · 1
One long-time user described the interface as very 'open source'.
“keepass is great, because it doesn't require any service to operate - it's just a file.”
Often compared with
1 moved from KeePass to Bitwarden
1 moved from KeePass to Apple Passwords
Who recommends it in their own words
Threads where it came up
- Bitwarden Dual License Model 2 mentions
- Passkeys were invented by engineers with zero understanding of consumer brain 2 mentions
- LastPass notifies users of yet another data breach 2 mentions
- The Quiet Renovation at Bitwarden 2 mentions
- Why the KeePass format should be based on SQLite 2 mentions
- What I self-host 1 mention
Data: keepass.json. Quotes are verbatim; the verdict and theme labels are written by a model from these comments, and every clause links to its sources.
All comments 26
“I've been using keepass+syncthing for years, and I've never had any issues.”
“I decided to go with regular keepass, it was because setting up OneDrive sync”
“KeePass uses an encrypted file, all you need is a way to decrypt it.”
“Keepass is also a good alternative to Authy”
“Not affiliated with Keepass, just a happy longtime user.”
“I use KeePass Portable / Keepass2Android + syncing between devices”
“keepass passwords”
“My non hardware key is a keypass file that I update only on my laptop and I sync to my other devices.”
“keepass is great, because it doesn't require any service to operate - it's just a file.”
“I store passkeys in a device-independent way, in KeePass using the great actively developed KeePassPasskey extension”
“I ended up with Keepass, the store is a open spec db[0] that has several clients, I use it across windows, android, and Linux without any issue”
“I use Keepass variants on my Linux and Android devices, it's absolutely terrific.”
“The "sprawl of plugins and forks" in KeePass is why I use it.”
“One of the security advantages of KeePass being just a file is that you can sync it in the way that makes sense to you.”
“I switched to keepass a decade ago (maybe) and never looked back”
“I use KeePass for the password manager”
“I think I'll move to something custom, or a selfhosted keepass server”
“Will check out Vaultwarden, Proton Pass, Keepass, I guess.”
“or going back to keepass tbh”
“KeePass for passwords, keys, configuration files or any sensitive data.”
“Those problems are sync and sharing.”
“I love KeePass.”
“Google Drive that I use to share my KeePass databases”
“I use https://en.wikipedia.org/wiki/KeePass”
“keepass for secrets”
“I used keepass previously”