Verdict
KeePass is an excellent free - to - utilisation password director , with lots and lots of customisation options and wide support for third - political party apps . The interface may be a petty too complicated for some , while the want of incorporate share-out may turn off users too . But this is still nevertheless one of the very good password manager options available .
Pros
Cons
Key Features
Introduction
KeePass is barren , undetermined source software to the core , with no paid - for components or permit whatsoever . It ’s both an program and a banner , with multiple apps that can access KeePass database ( KDBX ) single file and handle their consort encoding standard .
My own setup use KeeWeb on Linux , the first - party KeePass 2 app for Windows , and AuthPass on Android – all access a shared database file that I keep on a secure swarm server that I control , with a hosted web app reading of KeeWeb to provide an on-line hurdle . If you adopt the Keepass touchstone , you may customise everything from your encoding protocol , to your interface and browser app plugin excerpt , to your second factors and passwordless logins .
It ’s obviously the perfect choice for surety enthusiasts , but it is n’t just for the hardcore , and the roadblock for entrance is n’t that high if you opt for the most exploiter - friendly choices . It ’s just that these are n’t always play up .
KeePass ’s capable beginning codification ply another benefit : community glitch and exposure hunt . legion vulnerabilities to KeePass ’s software ecosystem have been promptly reported , show and fixed by its user and developer community , making this a robustly unafraid option , as long as you ensure that you ’re maintain your clients up - to - date .
Features
KeePass and its fussy - platform port , KeePassXC , have an unequaled range of feature , but can palpate unfriendly to use . Some of their features need you to enter code strings in specific positioning , and both have user interface that feel like something out of the early 2000s .
If you require to get into using the KeePass ecosystem , I recommend using a friendlier app . BothKeeWebandAuthPasssupport the KDBX database standard , and you may activate features such as one - time codes , internet browser plugins , tie filing cabinet , and swarm storage support with a click or two . Although they have friendly interfaces , there ’s still enough flexibility to add funding for non - standard stuff , such as the Steam secret plan customer ’s proprietary one - time code .
Unlike most password manager , KeePass render full control over where and how your database is put in , so you do n’t have to trust it to someone else ’s computer – although popular cloud storage serve are fully supported .
The main back multi - factor authentication ( actually multi - factor decryption ) choice is unassailable key file cabinet , and passwordless login is available through biometric unlock – depending on app and elongation configuration – or a security key to be used alternatively of your captain countersign . Other option are available through extensions . Previously configure biometric unlock also provides the only boulevard to readjust your master password if you forget it .
Both apps and browser app extensions allow you to autofill and even autosave passwords for the web , but a killer feature of all KeePass derivatives is “ facsimile ” , which virtually types in your passwords one theatrical role at a clock time , neatly supporting applications and websites that disable pasting , as well as keeping your password out of the clipboard .
Logout timer count on just which app you ’re using to get at your KeePass database . The first - party KeePass 2 desktop app remains logged in indefinitely and call for exploiter configuration , while most third - party implementations lock after 5 to 15 minutes of being still , or when they ’re minimised .
One thing KeePass is n’t great at is sharing passwords . If you require to share an entire database , you could email the Indian file to someone , or even put it online , sharing the keys with everyone who take access over an encrypted messenger such as Signal . However , there ’s no built - in inviolable messaging organisation to share individual password entries or mathematical group .
Latest deals
Should you buy it?
There ’s almost nothing you ca n’t configure here , and if you find something you ca n’t , then you could always make your own custom data string or add extensions .
While dressed apps are available to take the effort out of many KeePass functions , you ’ll always have to choose your entrepot location . You do n’t require to be an expert to employ a KeePass database effectively , but understanding filing cabinet , networks and online store is a plus .
Final Thoughts
Quality - of - life features have been massively better as a result of recent app and extension growing , so you may find a perfect balance between customisability and ease of use .
The only veridical feature gap is countersign communion and chemical group folders – for that , you might need to consider aBitwardensubscription rather . hold back out ourBest Password Managerguide for more options .
Trusted Score
How we test
We prove each password managing director ourselves on a variety of electronic computer and nomadic operating systems . We carry out comparative feature depth psychology against industry standards and rival products , and trial security measures and convenience preferences such as default logout behaviour and offline approach . ,
FAQs
Whether you store it on a USB stick , your gruelling disk or a cloud storage airfoil , it is potential for your password database to be pilfered . However , your passwords should still be good since they ’re encrypted . A lately discovered vulnerability that would permit master passwords to be sniffed out under very specific circumstances was chop-chop fixed thanks to the Keepass community
Yes , KeePass is a free open source password manager .
