KeePassXC
Free, open-source, cross-platform desktop password manager using the KeePass database format.
HN commenters recommend it for keeping passwords in a local, open-source database they control1234, synced with tools like Syncthing or Nextcloud567, with passkey and TOTP support.8910 The most common caveat is that syncing is do-it-yourself1112, which some found painful or unreliable, especially on mobile.1314
Why people recommend it
Local, user-owned data · 3
Passwords stay in an encrypted local file on the user's own devices, with no third party holding them.
“Just switched to KeepassXC and syncthing. Transferring keyfiles over LocalSend. This has been a great local FOSS way to keep autonomy over secrets”
“I strongly preferred email and password login, backed by a keepass(xc) store to hold the data.”
Show 1 more
“But for my passwords I use KeePass (the file format) and a variety of clients including KeePassXC.”
Flexible file sync · 3
Because the database is a single file, any sync tool such as Syncthing, Nextcloud or Dropbox works.
“I use KeepassXC and Syncthing.”
“I am really happy with the move.”
Show 1 more
“Syncing isn't a KeePassXC problem. The database is just a file.”
Open source · 3
Commenters value that it and its companion apps are fully open source and self-hostable.
“Both nextcloud and keepassxc are open source.”
“I use KeePassXC on desktop and KeePassDX on Android.”
Show 1 more
“I use KeepassXC with Keepass2Android. Open source, with a local database that you can choose to sync (or not).”
Mobile companions · 3
Compatible Android apps like KeePassDX and Keepass2Android share the same database.
“The Keepass experience is significantly better these days!”
“I use KeePassXC on desktop and KeePassDX on Android.”
Show 1 more
“shares DB with KeePassXC on desktop”
Passkey support · 3
It can create and export passkeys, which users find more transparent than native passkey flows.
“If you have to use passkeys, try KeePassXC and KeePassXC-Browser. I used them to set one up for Amazon a few days ago”
“I use passkeys from keepasxc because the native workflow for passkeys is opaque”
Show 1 more
“Bitwarden, Proton Pass, and KeepassXC do support exporting passkeys to CSV”
Power-user features · 3
Keyboard-driven browser extension, auto-type, TOTP and use as a secret provider are appreciated.
“ive used keepassxc forever”
“im using pretty much the same setup myself”
Show 1 more
“I use keepassxc as my secret provider”
Caveats and dissent
DIY syncing · 3
Sync is left to external tools, which can fail silently or lack conflict resolution.
“the Linux desktop experience and mobile syncing was so terrible”
“This year I moved off LastPass, and started using [Syncthing](https://syncthing.net/) to sync my [KeepassXC](https://keepassxc.org/).”
Show 1 more
“Syncing isn't a KeePassXC problem. The database is just a file.”
Flatpak browser issues · 1
One user found the browser extension didn't work with Flatpak'd browsers on an immutable Linux distro.
“the Linux desktop experience and mobile syncing was so terrible”
Windows look and feel · 1
One commenter felt the cross-platform UI didn't look or feel good on Windows.
“the cross platform UI on KeePassXC just didn’t look and feel good on windows”
Not for sharing · 2
It suits individuals but may not work well for sharing passwords in corporate settings.
“I use KeepassXC, but I have no need to share passwords with other people.”
“I would still be on Keepass[XC] for my own private usage.”
Passkey export pushback · 3
Letting users export passkeys drew threats that relying parties might block KeePassXC.
“This threat, because someone dared to give users control, is completely unacceptable to me.”
“it's already been wielded as cudgel against KeypassXC for having the audacity to let users access their own keys”
Show 1 more
“Bitwarden, Proton Pass, and KeepassXC do support exporting passkeys to CSV”
Often compared with
3 moved from Bitwarden to KeePassXC
1 moved from KeePassXC to Bitwarden
1 moved from Proton Pass to KeePassXC
1 moved from KeePassXC to Proton PassLastPass3 comments mention both
1 moved from LastPass to KeePassXC
1 moved from KeePassXC to Vaultwarden
Who recommends it in their own words
Threads where it came up
- Passkeys are not a trap 5 mentions
- Bitwarden Dual License Model 3 mentions
- I don't like passkeys 3 mentions
- Passkeys were invented by engineers with zero understanding of consumer brain 3 mentions
- LastPass notifies users of yet another data breach 3 mentions
- The Quiet Renovation at Bitwarden 3 mentions
Data: keepassxc.json. Quotes are verbatim; the verdict and theme labels are written by a model from these comments, and every clause links to its sources.
All comments 32
“Running up-to-date desktop apps like synology-drive, prusa slicer, keepassxc, kdenlive or even Steam”
“This threat, because someone dared to give users control, is completely unacceptable to me.”
“stored only on my devices(Linux, Windows, Android) using open source software (KeepassXC, KeepassDX)”
“I use KeepPassXC.”
“I would still be on Keepass[XC] for my own private usage.”
“Both nextcloud and keepassxc are open source.”
“ive used keepassxc forever”
“the cross platform UI on KeePassXC just didn’t look and feel good on windows”
“the Linux desktop experience and mobile syncing was so terrible”
“Keepass (or KeepassXC) stores other data as well”
“For sites requiring 2FA, I use TOTP (time-based one time passwords) from KeePassXC.”
“If you have to use passkeys, try KeePassXC and KeePassXC-Browser. I used them to set one up for Amazon a few days ago”
“I strongly preferred email and password login, backed by a keepass(xc) store to hold the data.”
“generated in KeepassXC”
“it's already been wielded as cudgel against KeypassXC for having the audacity to let users access their own keys”
“I use KeepassXC and Syncthing.”
“I love KeepassXC, I use it for all my passwords.”
“I use KeePassXC, just not for passkeys.”
“Bitwarden, Proton Pass, and KeepassXC do support exporting passkeys to CSV”
“I use KeepassXC with Keepass2Android. Open source, with a local database that you can choose to sync (or not).”
“I use KeepassXC, but I have no need to share passwords with other people.”
“Syncing isn't a KeePassXC problem. The database is just a file.”
“Just switched to KeepassXC and syncthing. Transferring keyfiles over LocalSend. This has been a great local FOSS way to keep autonomy over secrets”
“im using pretty much the same setup myself”
“I am really happy with the move.”
“The Keepass experience is significantly better these days!”
“I use keepassxc as my secret provider”
“I use passkeys from keepasxc because the native workflow for passkeys is opaque”
“shares DB with KeePassXC on desktop”
“I use KeePassXC on desktop and KeePassDX on Android.”
“This year I moved off LastPass, and started using [Syncthing](https://syncthing.net/) to sync my [KeepassXC](https://keepassxc.org/).”
“But for my passwords I use KeePass (the file format) and a variety of clients including KeePassXC.”