KeePassXC

Usernames, passwords, URLs, attachments and notes live inside one encrypted file that KeePassXC manages. That file is yours to place anywhere, on a local disk, a private server or a public cloud folder, and its contents are never exposed outside the program. The project aims at people with high demands for secure personal data management.

Databases use the KeePass compatible KDBX format, both KDBX4 and KDBX3, so the file is not bound to this one client. Entries carry user defined titles and icons and sit in customizable groups, and the search function takes advanced patterns for finding a single record in a large database.

The feature set reaches well past storing a password.

• Password generator: build passwords from any combination of characters, or passphrases that are easier to remember.
• Auto-Type and browser integration: fill credentials into applications and into Chrome, Firefox, Edge, Chromium, Vivaldi, Brave and Tor Browser, with passkeys supported through the extension.
• Hardware and TOTP: store and generate TOTP codes, and unlock with YubiKey or OnlyKey challenge response.
• System integration: an SSH agent, the FreeDesktop Secret Service that can replace a Gnome keyring, and a command line client named keepassxc-cli.
• Reports and migration: password health, Have I Been Pwned checks and statistics, plus imports from CSV, 1Password, Bitwarden, Proton Pass and KeePass1.

Pre-compiled binaries cover all three desktop platforms and many Linux distributions ship their own package. Twofish and ChaCha20 are available as alternative ciphers, entry history restores overwritten values, and exports to CSV, XML and HTML get your data out whenever you want it elsewhere.