KeePassXC Review 2026: Free, Offline, and Fully Under Your Control

Short answer: KeePassXC is the best choice if you don't want your passwords stored in anyone's cloud. It is free, open source, runs on Windows, macOS and Linux, and keeps your vault in a single encrypted file that you control. Recent versions add passkey support, browser autofill and an SSH agent. The trade-off is convenience: there is no built-in sync or official mobile app, so you manage syncing and pick a compatible app for your phone yourself.

KeePassXC at a glance

Why choose an offline password manager

With cloud password managers, your encrypted vault lives on the company's servers. That is fine for most people — the encryption is strong — but the 2022 LastPass breach showed that stolen vault files can be attacked offline for years. KeePassXC removes that risk: there is no account and no company server. Your vault is a file on your device, encrypted with your master password and, optionally, a key file or hardware key.

Key features

• Browser integration with Chrome, Firefox, Edge and others through the KeePassXC-Browser extension for autofill and saving new logins.
• Passkeys can be stored and used through the browser extension.
• Built-in TOTP two-factor code generation.
• SSH agent integration, so developers can unlock SSH keys from the vault.
• Database reports that flag weak, reused and old passwords, plus a Have I Been Pwned check.
• KeeShare for sharing parts of a database with others.

KeePassXC's interface: entry groups on the left, encrypted entries and attributes on the right, with SSH agent support built in.

How to sync KeePassXC safely across devices

Because the vault is one encrypted file, you choose how to move it:

1. Cloud folder (Dropbox, OneDrive, Google Drive, iCloud): easiest. The file stays encrypted, so the cloud provider can't read it. Use a strong master password plus a key file stored separately (not in the same cloud folder).
2. Syncthing: syncs the file directly between your devices with no cloud provider at all.
3. Mobile apps: on Android, KeePassDX is a popular open-source option; on iOS, Strongbox and KeePassium read the same KDBX format.

Avoid editing the database on two devices at the same time before syncing — KeePassXC can merge databases, but conflicts are easier to prevent than to fix.

Security

KeePassXC uses well-established cryptography (AES-256 or ChaCha20 with Argon2 key derivation) and is fully open source. The project issued version 2.8 with fixes for five vulnerabilities rated low to moderate severity — none affected its core cryptography — and has received French ANSSI CSPN security certification for an earlier version. Keep it updated like any security software.

Weak spots

• No built-in sync — you set it up yourself.
• No official mobile app — you rely on third-party KeePass-compatible apps.
• No account recovery. Lose your master password or key file and the vault is gone.
• Less polished autofill than 1Password or Dashlane.

KeePassXC vs. Bitwarden

Both are free and open source. Bitwarden syncs everything automatically through its servers (or your self-hosted server) and has official mobile apps — better for most people. KeePassXC keeps everything offline and under your control — better for privacy purists, developers and anyone who doesn't want a vault in the cloud. See our Bitwarden review.

Who should choose KeePassXC

Choose it if you: want complete control of your vault, prefer not to trust any cloud service, are comfortable managing a file and backups, or want SSH agent integration.

Look elsewhere if you: want automatic sync and official mobile apps (Bitwarden), or the most polished experience for a family (1Password).

Verdict

KeePassXC is the gold standard for offline password management: free, open source, well-maintained and now with passkey support. It asks more of you than a cloud service — syncing, backups and choosing a mobile app — but in return nobody but you ever holds your vault.

Frequently asked questions

Is KeePassXC safe?

Yes. It uses strong, well-reviewed encryption, is open source, and stores your vault locally. Keep it updated and use a strong master password, ideally with a key file or hardware key.

Does KeePassXC work on phones?

Not directly. Use a compatible app such as KeePassDX on Android or Strongbox or KeePassium on iOS, which open the same database file.

Does KeePassXC support passkeys?

Yes, through the KeePassXC-Browser extension.

How do I sync KeePassXC between devices?

Store the encrypted database in a cloud folder or sync it with Syncthing. The file is encrypted, so the sync service can't read it.

Sources

• Linuxiac, KeePassXC 2.8 released with Qt 6 and Wayland support
• KeePassXC, KeePassXC 2.7.12 released
• KeePassXC, Project documentation