app·Apps & Software

KeePassXC

Local password manager that stores credentials in an encrypted database you control.

FREEOPEN SOURCELOCAL-FIRSTPRIVACY-FIRST

Setup guide · 25–40 min

Visit KeePassXC →

Quick facts

Price model: Open source
Starting price: Free
Best for: Local password storage · Family vault via shared file · Security-focused users
Replaces: 1Password, LastPass, Dashlane
Platforms: MacWindowsLinux
Last verified: 2026-06-22

Why it's listed

Your vault is a file you own—no cloud account or monthly bill to access your passwords.

KeePassXC generates strong passwords, auto-fills in browsers, and keeps everything in a .kdbx file on your device. Sync the file yourself via Syncthing, cloud storage, or USB—no vendor subscription required.

The catch

Jump to setup guide ↓

You handle sync and backups yourself; browser integration is good but not as seamless as 1Password.

How to set up KeePassXC

Password vault as a file you own—encrypted .kdbx on disk, synced with Syncthing instead of a cloud password bill.

Time: 25–40 min
Difficulty: Moderate
Verified: 2026-06-22

Before you start

Strong master password (different from all logins)
Syncthing or Nextcloud if you need multi-device sync
Browser extension install from keepassxc.org

Create the database
KeePassXC → Create new database → save as Household.kdbx in Documents/Passwords (or similar). Set master password and optional key file only if you understand key file backup.
Install browser extension
KeePassXC-Browser for Firefox/Chrome. In KeePassXC: Database → Database Security → Browser Integration → enable for your browser. Connect extension to running app.
Add first entries
Create folders: Banking, Streaming, Kids, Wi-Fi. Add 5 critical logins manually. Use password generator (20+ chars) for new passwords.
Import from old manager
File → Import from CSV if leaving Bitwarden/1Password export. Delete the CSV immediately after import—it is plaintext.
Sync across devices
Put .kdbx in a Syncthing-shared folder (see our Syncthing guide). Open same file on second computer—never email the vault. Mobile: KeePassDX (Android) or Strongbox (iOS) pointing at synced file.
Backup the vault file
Monthly copy to USB or encrypted backup. Lose master password + file = lose vault. Bitwarden cloud recovery does not exist here by design.

Troubleshooting

Browser won't connect: KeePassXC must be running and database unlocked. Check browser integration enabled per browser.
Sync conflict duplicate files: Only one device unlocked editing at a time early on. Merge with KeePass merge tool if conflict copies appear.
Family sharing is clunky: Shared read-only export or separate databases per adult—KeePassXC is file-first, not Bitwarden Organizations.

Keep it working

Save and lock database after edits
Test restore from backup yearly
For easier family onboarding, Bitwarden free tier may be better (see our Bitwarden guide)

Official docs: keepassxc.org/docs/KeePassXC_GettingStarted/