KeePassXC: when to install it, and when not to
A password vault that is a file on your own disk. No account, no cloud service and no vendor to trust with the database. It suits someone who wants the…
The short version
KeePassXC: A password database that is just an encrypted file on your own disk. No company, no account, no server to breach. You are responsible for your own backups, which is the trade you are making.
| Licence / price | Free · Open source |
|---|---|
| Platforms | Windows, macOS, Linux |
| Category | Privacy & Security — 10 programs |
| Official download | https://keepassxc.org/download/ ↗ |
What it is for
A password vault that is a file on your own disk. No account, no cloud service and no vendor to trust with the database. It suits someone who wants the vault to exist even if a company disappears, and who is willing to handle synchronisation themselves.
When to pick something else
You own the sync problem. Put the database in a folder managed by Syncthing or another sync tool, or you will end up with three slightly different copies and no idea which has the newest logins. If you want turnkey multi-device sync, Bitwarden is less work.
How it compares in Privacy & Security
These are the alternatives we would consider for the same job. The notes are the same ones used on the main list, so there is no separate ranking hiding on this page.
| Program | Licence / price | Platforms | Why it is on the list |
|---|---|---|---|
| Bitwarden Publisher's site ↗ | Free + paid tiers | Windows, macOS, Linux, Android, iOS | If you install one thing from this entire page, install this. The free tier covers unlimited passwords on unlimited devices with sync, and everything is end-to-end encrypted. Start here rather than with a paid competitor. |
| VeraCrypt Publisher's site ↗ | Free · Open source | Windows, macOS, Linux | Creates encrypted containers and can encrypt a whole drive, including hidden volumes. The successor to TrueCrypt. Keep the password and the rescue disk somewhere you will still find them in two years. |
| Cryptomator Publisher's site ↗ | Free + paid tiers | Windows, macOS, Linux, Android, iOS | Encrypts files before they reach Dropbox, OneDrive or Google Drive, so the cloud provider stores scrambled data. The right tool if you must use a mainstream cloud but do not want to trust it. |
Practical notes
- Use a key file or a long master passphrase, and store the recovery information outside the database itself.
- Sync the database with a tool that keeps versions; a plain file copy can silently overwrite a newer vault.
- Test opening the database from the second location before you delete the original.
Questions people ask
How do I sync it between computers?
Put the database file in a folder handled by a sync tool such as Syncthing, or copy it deliberately. The vault does not sync itself.
Where it appears in our guides
- A privacy-first setup that does not break your computer
- A backup you can actually restore
- Moving off browser-saved passwords in one sitting
See the full Privacy & Security explainer for the other 9 programs in this category.
How to read this page. How to read this page. Platform, licence and publisher details come from our directory data. Where an independent review, audit or survey is mentioned, it is summarised in our own words with the source named and linked; our /sources page sets out that policy. The recommendation, the trade-offs and every 'skip it if' line are our editorial judgement. We do not run benchmarks, publish measured performance figures or host installers, and every download link goes to the publisher's own site. If a detail is out of date, our About page explains how to tell us.