KeePass vs KeePassXC

KeePass being open source means that a number of people have reviewed the code and found it to be secure.

Available for Windows, with unofficial ports for Linux, macOS, Android, and iOS.

KeePass is consistent and stable across all clients including merging conflicts between desktop and mobile apps.

Password generator can be adjusted to use or exclude certain characters, patterns, external algorithms and principles.

KeePass uses a feature called AutoType that pastes passwords in browser window using a combination of virtual keystrokes and clipboard obfuscation for added security against keyloggers.

Unlike many other password management tools, by default the KeePass encrypted database is not stored in the cloud, but strictly locally, for added security.

Works as a portable application that does not need to be installed and can be carried around in an external device.

KeePass uses AES-256 encryption for passwords which is practically unbreakable.

Keepass offers a range of plugins and extensions in different categories: Integration & Transfer, Automation & Scripting, Cryptography & Key Providers, and others.

Keepass offers a combination of master password, key file and user account verification.

Appending attachments to individual credential entries allows things like scanning important documents (for instance a scanned document containing the login information for your internet connection), appending them to the corresponding credential entry and afterwards destroying the original paper copy.

Since the database is stored locally it can be synced across devices using a cloud storage service like Dropbox, Google Drive or via a file sync tool like BitTorrent Sync. KeePass v2 also provides a powerful built-in synchronization mechanism that allows setting appropriate level of sync, kind of sync, and choosing between a number of sync sources (Dropbox, Drive, etc).

On average a new point release is available every 3 months.

Offers large variety of apps with different features and user interfaces vastly increasing the user base by catering to almost every taste.

Entries can be categorized in folders and subfolders and quickly found using search.

With the built-in history you can lookup previous passwords, track changes in general and if necessary recover those. In essence you are looking at a built-in Version Control System (VCS) which operates on single entries. Browsing the history of specific entries also displays associated metadata like the date of a change.

KeePass can set global hotkeys to fill in credentials while on a sites log-in screen. Scripting can launch a site or other application and perform any necessary log-on steps securely. It requires the KPScript plugin.

No paid version. Free for everyone.

e.g. KeePass Touch, MiniKeePass.

Users may define any extra fields (eg. "Surname", "Credit Card No", "Start Date", "Expiry Date" and "Security No") and their values may then be easily copy-and-pasted when required. This is a great feature not found in a lot of password-managers: they leave you to consign such additional information to the "Notes" section.

This app has the easiest, cleanest, and clearest user interface. For reference, LastPass has progressively gotten worse and worse and is now a confusing mess, while Keepass remains very user-friendly.

There are variations in support of features, so this is dependent on the Android app being used. Keepass2Android is one that has built-in synchronization over ssh and other protocols, fingerprint support and plugins are also supported to a certain extent.

KeePass is recommended by the German Federal Office for Information Security, the European Commission’s Free and Open Source Software Auditing (EU-FOSSA) project, and the French Network and Information Security Agency.

Difficult passwords are mostly a PITA on a mobile keyboard.

Keepass has an available Blackberry app that not only makes it easy to use on the go, but will work with any files backed up in the cloud for ease of access to stored passwords used on different machines.

Free. No hidden tracking. 100% Open Source.

Zero-knowledge. Military-grade AES-256 & Argon 2 unbreakable encryption algorithms.

Official Browser plugins for Chrome, Firefox, Edge, Brave, Opera, Vivaldi and all other Chromium or Gecko based browsers.

It has a really clean looking design, unlike Keepass. Makes it really friendly to get into.

User-friendly and straightforward. Easy to use.

KeepassX discontinued in 2017.

Autotype available for all apps.

Don't trust anyone.

The preferred choice of Qubes users as well. Long story short, it's no coincidence that every one of the Linux distros renowned for it's security and anonymity features comes standard with a massive neon, blinking arrow pointing right at this full-featured, OSS, cross-platform password manager. The Slant community even lauds it as the category's second-only to what is essentially a command-line tool with a title someone could have picked out of a random spoonful of alphabet soup. Approved for Ages 8-78!

And onlykey*

It has plenty tweaks which lets you feel under control of your data.