--- title: KeePassXC canonical: https://saasranked.com/software/keepassxc/ category: Password Managers points: 58 rank: 10 of 10 facts_checked: 2026-10-08 --- # KeePassXC Free, open-source desktop password manager that keeps an encrypted database file wherever you choose. 58 points out of 100. #10 of 10 password managers. Vendor: KeePassXC Team. Website: https://keepassxc.org/ - KeePassXC is free and open source under the GPLv3 licence [1]. - France's cyber security agency ANSSI certified version 2.7.9 for Windows on November 17, 2025, and the technical report is published [5]. - Apps run on Windows, macOS and Linux; there is no official phone app [2][3]. - The KeePassXC-Browser extension for Chrome, Firefox and Edge fills passwords, TOTP codes and passkeys [2][4]. - There is no sync service: you keep the encrypted database file wherever you like, including your own cloud folder [3]. Verdict: KeePassXC suits desktop users who want a free, open-source manager with the vault in a file they control [1][3]. It stores passkeys and TOTP codes and holds a 2025 security certification from ANSSI with a published report [4][5]. The catch is that there is no official phone app, no sync service and no web vault, so phones need third-party KeePass apps [3][1]. Best for: Desktop users who want a free, offline vault. ## Points | Criterion | Line | Value | Points | Note | |---|---|---|---|---| | Security and audits | End-to-end encrypted vault | Yes | 8/8 | The database is encrypted with AES-256 or Twofish on your computer, and no data is stored on remote servers [3][1]. | | Security and audits | Independent audit since 2024 | Yes | 8/8 | ANSSI certified version 2.7.9 on November 17, 2025; the full technical report is published [5]. | | Security and audits | SOC 2 Type II or ISO 27001 | Not published | 0/5 | | | Security and audits | Open-source apps | Yes | 5/5 | The source code is open under the GPLv3 licence [1]. | | Security and audits | Public bug bounty | Not published | 0/4 | | | Security and audits | Security key for two-factor sign-in | No | 0/5 | There is no account; YubiKey challenge-response only strengthens the database key, and FIDO-U2F is not supported [3]. | | Apps and extensions | Apps | Windows, macOS, Linux | 6/10 | Desktop apps for Windows, macOS and Linux; no mobile app of its own [2][3]. | | Apps and extensions | Browser extensions | Chrome, Firefox, Edge | 6/8 | KeePassXC-Browser for Chrome, Firefox and Edge; Safari is not listed [2][4]. | | Apps and extensions | Web vault | No | 0/2 | Data is stored offline and no data is stored on remote servers [1]. | | Passkeys and sign-in | Stores passkeys | Yes | 8/8 | KeePassXC creates passkeys and logs in with them through the browser extension [4]. | | Passkeys and sign-in | Built-in two-factor codes | Yes | 4/4 | Stores TOTP secrets and fills codes through the browser extension or Auto-Type [4]. | | Passkeys and sign-in | Log in with a passkey | Not published | 0/3 | | | Sharing and family | Family plan | Not published | 0/5 | No plans exist; the app is free for everyone [1]. | | Sharing and family | Share with other people | Yes | 5/5 | KeeShare shares a group of entries with other people through a shared file [4]. | | Sharing and family | Emergency access | Not published | 0/5 | | | Price | Free plan for a computer and a phone | No | 0/7 | Free, but there is no KeePassXC phone app; the FAQ points to third-party apps [3]. | | Price | Cheapest paid plan | $0 | 8/8 | Entirely free [1]. | ## Plans | Plan | Price | Per month (USD) | |---|---|---| | Free | Free [1] | $0 | ## Strengths - Free, with the source code public under GPLv3 [1]. - ANSSI CSPN certification in November 2025, with the technical report published [5]. - Stores passkeys and signs in with them through the browser extension [4]. - No data is stored on remote servers [1]. ## Limits - No official iOS or Android app; the FAQ points to third-party apps [3]. - No built-in sync; you sync the database file with your own cloud service [3]. - No Safari extension is listed on the download page [2]. - A YubiKey only strengthens the database key with challenge-response; it is not a true second factor [3]. ## Sources 1. [KeePassXC Password Manager](https://keepassxc.org/), KeePassXC Team, accessed 2026-10-08 2. [Download – KeePassXC](https://keepassxc.org/download/), KeePassXC Team, accessed 2026-10-08 3. [Documentation and FAQ – KeePassXC](https://keepassxc.org/docs/), KeePassXC Team, accessed 2026-10-08 4. [KeePassXC: User Guide](https://keepassxc.org/docs/KeePassXC_UserGuide.html), KeePassXC Team, accessed 2026-10-08 5. [KeePassXC Security Audits and Certifications – KeePassXC](https://keepassxc.org/audits/), KeePassXC Team, accessed 2026-10-08