KeePassXC review
A free local vault for technical users who want control over their password database.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
KeePassXC is a free, open-source password manager for Windows, macOS, and Linux. It stores usernames, passwords, URLs, attachments, and notes in encrypted local databases instead of vendor-operated remote servers. The product is aimed at technical users who prefer direct control over their vault files and want a desktop password manager with browser integration, passkey support, TOTP generation, and hardware-key options.
Its free model keeps the core feature set straightforward: there are no paid tiers to compare. The application includes password generation, automatic form filling, database import and export, and browser integration for Google Chrome, Mozilla Firefox, Microsoft Edge, Chromium, Vivaldi, Brave, and Tor Browser. The browser integration can store and use passkeys, while TOTP storage and generation keep authentication codes alongside credentials. SSH Agent integration adds a focused capability for users managing secure shell access.
The main trade-off is its local, desktop-centered design. KeePassXC does not operate as a hosted account-based service, so users retain responsibility for their encrypted database files and the way those files are synchronized. KeeShare supports sharing and synchronization for selected credentials, but this approach suits users comfortable managing local data rather than buyers seeking a centrally managed vault. YubiKey and OnlyKey challenge-response support, along with passkey storage and authentication, give the product depth for security-conscious technical workflows. Choose KeePassXC if local ownership, open-source software, and desktop coverage matter most; choose another password manager if mobile apps or a hosted account experience are essential.
KeePassXC pros and cons
- Where it wins
- Free, open-source vaults store credentials in encrypted local databases
- Supports passkeys, TOTP, browser autofill, and password generation
- YubiKey, OnlyKey, SSH Agent, and KeeShare support extend control
- Where it doesn't
- Desktop-centered coverage excludes mobile platforms
- Users manage local database storage and synchronization themselves
- KeeShare shares selected credentials rather than providing hosted account sharing
KeePassXC fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update