By: Gunnar KallstromHead of information systems and cybersecurity research
| KeePass standout features | |
|---|---|
| Support |
|
| Best for | Those who are willing to tinker or businesses with a dedicated IT professional |
| Promotion | None needed — KeePass is completely free |
KeePass is a powerful, free tool for those willing to put in a little work in order to figure it out. While its features are plentiful, many were buried under layers and multiple processes, which I had to figure out before they would work properly. This will be a pro for those who love to tinker, but a con for almost everyone else.
Overall: (5.0)
The most notable feature of KeePass is it’s completely free. While other services offer a limited free version with subscriptions to their premium version, KeePass is unlocked from the start with no need to ever pay its creator a dime. This alone may sell you on KeePass despite its other drawbacks.
Donations are accepted to reward the developer, Dominik Reichl, for the labor he puts into keeping this software up to date.
| KeePass 2.53.1 | |
|---|---|
| Price | Free |
| Best for | People who like to repair things and those who need a free, full-featured password manager |
| Platform compatibility | Windows, Linux |
| Autofill capability | Technically no, but Auto Type can be set up to fill a similar function |
| Guest accounts | No |
| Number of passwords | Unlimited |
| Password sharing | No |
| 2FA | Yes |
| Account recovery | No |
| Support types | FAQ and community forums |
| Encryption | Advanced Encryption Standard (AES)-256, ChaCha20, and Twofish |
| Reporting capabilities | No |
| Single sign-on (SSO) | Yes |
Overall: (3.0)
One of the major downsides to KeePass is its relative exclusivity, with only two major operating system platforms supported:
If you’re a macOS, iOS, or Android user, a lack of official support for KeePass may be a dealbreaker. As a non-commercial, open-source project, it has neither the incentive nor the desire to create additional releases for platforms outside of Windows and Linux.
However, one of the upsides to the program being open source is that others can take the work already done and port it over to the platform of their choice. Reichl even includes links on his own download page to these ports, which range from Android and iOS to macOS.
But as unofficial ports, these versions may not be as faithfully updated, so explore them at your own risk.
Overall: (3.0)
KeePass looks like it was created to run on Windows XP never really bothered to update its look. It may not be pretty, but it gets the job done.
It may not be intuitive to use (nor does it hold your hand during set-up) but I found KeePass’ UX as functional and understandable as some paid products I’ve reviewed here. While it won’t win any beauty contests soon, it works well. I imported my passwords from a CSV file with only a short foray into the FAQ section of the website.
If you’re interested in KeePass, you must be willing to peruse the support section of the website, as the program itself won’t walk you through anything. I didn’t find this much of an issue, but if you aren’t tech-literate (or even tech-curious), you may want a more forgiving password manager.
Overall: (3.0)
Not technically automatic form filling, Auto Type is a powerful tool that performs a similar function. However, it was difficult to set up.
KeePass doesn’t include form filling, per se — it gives you a technically more powerful and diverse tool called Auto Type. Most password managers will prompt you when they detect a text field on a webpage.
But KeePass utilizes a preset keystroke you can trigger when certain conditions are met. You can modify this sequence to your heart’s content and even trigger it to perform functions outside of web browsing.
All of this functionality comes at the cost of usability, though. I had to set up each site I wanted to have the ability to automatically log into and watch a few tutorials on how to set up Auto Type in the first place.
This is a tedious process for the average user. It will only appeal to those who like the flexibility and customization that comes with a DIY project.
Overall: (5.0)
By using AES 256 standard in addition to 256-bit ChaCha20, KeePass is just as secure as many paid alternatives.
In addition to using the industry standard 256-bit AES encryption, KeePass encrypts and stores data locally — either directly on the device it’s running on or via a portable installation on a USB drive.
That data can only be decrypted using a master key which you set up when running KeePass for the first time. Unless someone already knows the key, they can’t access your data.
If you want to learn more about the security processes, the KeePass website has a page devoted to explaining these features in detail.
Overall: (3.0)
KeePass’ implementation of 2FA may be a little clunky, but available.
If you want to add another layer of security on top of especially sensitive accounts (such as bank accounts or other financial institutions), KeePass also has 2FA available as a security option, defined by the system as a one-time password (OTP) generator.
If you’ve ever shopped with Amazon from a device you don’t usually use, you’re probably familiar with OTPs. This system shoots you a text or an email with a confirmation code before allowing access to your account. While setting up an OTP through KeePass isn’t intuitive, I was impressed it was included in this free piece of software.
The most recent version of KeePass (2.54) was released in June 2023 and made the following fixes and improvements:
KeePass is a great option for password management, but competitors including Dashlane, Keeper, Roboform, LastPass, and NordPass could be a better fit. We looked closely at each password manager, spent time using the services, and researched each for hours. Our research provides objective information about each company so you can find the best one for you.
See how KeePass compares to other top-tier password managers the PasswordManager.com team recommends:
| Password manager | Details | Best features |
|---|---|---|
| KeePass Overall rating: (3.6) | Starting price: free Platform compatibility: Windows, Linux Security: AES-256, ChaCha20, and Twofish |
|
| 1Password Overall rating: (4.8) Read our full 1Password review. Consider 1Password if: You’re seeking unlimited password management at a fair price. | Starting price: $2.99 per month Platform compatibility: Android, iOS, Linux, Mac, Web (Brave, Chrome, Edge, Firefox, Safari), Windows Security: AES 256-bit encryption, 2FA |
|
| Dashlane Overall rating: (4.7) Read our full Dashlane review. Consider Dashlane if: You’re only interested in a personal plan. | Starting price: Free Platform compatibility: Android, iOS, Mac, Web (Chrome, Edge, Firefox, Safari), Windows Security: AES 256-bit encryption, 2FA |
|
| Keeper Overall rating: (4.6) Read our full Keeper review. Consider Keeper if: You want to enjoy the feature of secure biometric logins. | Starting price: $2.91 per month Platform compatibility: Windows, MacOS, Linux, Android, iPhone, and iPad. Browser extensions for Safari, Opera, Firefox, Edge, Chrome Security: AES 256-bit encryption, PBKDF2 |
|
| RoboForm Overall rating: (4.5) Read our full RoboForm review. Consider RoboForm if: You want to sync your passwords through multiple platforms and won’t mind its compatibility with fewer platforms than 1Password. | Starting price: $1.99 per month Platform compatibility: Windows, Mac, iOS, and Android support for their respective major browsers, including Microsoft Edge Security: AES 256-bit encryption, 2FA |
|
| LastPass Overall rating: (4.4) Read our full LastPass review. Consider LastPass if: You want to get additional features and are willing to pay a high price for it. | Starting price: Free Platform compatibility: Windows, Mac, Linux, and mobile platform Security: Zero-knowledge security model |
|
| NordPass Overall rating: (4.3) Read our full NordPass review. Consider NordPass if: You don’t want different packages for your family and business. | Starting price: Free Platform compatibility: Windows, macOS, Linux, Android, iOS, and popular browsers, such as Google Chrome, Firefox, Edge, Brave, Opera, and Safari Security: XChaCha20 encryption algorithm and a zero-knowledge policy |
|
The biggest con is its lack of dedicated support and intuitive design. While it does a lot for a free product, you will likely spend a lot of time in the support forums and FAQs figuring out how to get it to work exactly the way you want. This won’t be a con if you enjoy this process, but the average user probably wants something closer to a plug-and-play experience.
KeePass has been consistently updated since it began in 2003. It has no servers to upload to, eliminating any chance of a data breach on their part. You don’t need to trust KeePass because it knows nothing about you. You can be assured that your data is secure.
Open source means the entirety of the code is available for anyone to see, inspect, and change. For KeePass, this is like an insurance policy against accusations of including back doors in the software.
If anything malicious was hiding in the code, it would be findable and displayed for anyone to call out. This also allows the software to take on a life of its own outside of the main developer, allowing others to port the program to other platforms.
It may be safer, as long as you’re downloading the program directly from the links provided by the main website. Open-source software can be changed and redistributed by anyone, but the developer controls the version released through its official website; you can trust it to have not been tampered with.
All data is encrypted and stored locally on the device of your choice and accessible only to those who know your Master Key.
KeePass is an open-source software created by Dominik Reichl in 2003. Little is known about Reichl beyond his published and consistently supported software projects, which are all open source and free. While his creations are free, donations are accepted to support his work.
Our rating process involves a thorough and detailed study of the various features stacked against the competition. I looked at the multiple facets and features provided by KeePass compared to other significant industry players through direct testing to ensure an accurate rating. I’ve also applied my experience using KeePass to provide a user’s perspective.
I signed up for a plan with KeePass to test:
Learn more about our review methodology.
About The Password Manager, Gunnar Kallstrom:
Gunnar Kallstrom is a Cyber Team Lead for a DOD contracting company in Huntsville, AL, and has also worked as a CND Cyber Analyst. An author and content creator for a cybersecurity academy, Gunnar spent nearly 15 years in the Army as a musician before entering the cybersecurity field.
He holds a bachelor’s degree in music from Thomas Edison State University and a master’s in organizational development and leadership from the University of the Incarnate Word.
Kallstrom has completed several CompTIA courses, including Secruity+, Network+, A+ Core 1, and A+ Core 2. He earned a CompTIA Security+ Certification. Additionally, he has completed the Cyber Warrior Academy program with more than 800 hours of hands-on, intensive, and lab-driven technical training in cybersecurity methods and procedures.
Passionate about all things cyber, Kallstrom was a speaker on a panel at the 2022 InfoSec World conference, giving a talk entitled “Hacking into a Cyber Career – True Stories.” Kallstrom is also a mentor to entry-level cybersecurity candidates seeking to break into the field. When he’s not working, he still enjoys playing guitar and fishing (not phishing).