KeePass vs pass

KeePass being open source means that a number of people have reviewed the code and found it to be secure.

Available for Windows, with unofficial ports for Linux, macOS, Android, and iOS.

KeePass is consistent and stable across all clients including merging conflicts between desktop and mobile apps.

Password generator can be adjusted to use or exclude certain characters, patterns, external algorithms and principles.

KeePass uses a feature called AutoType that pastes passwords in browser window using a combination of virtual keystrokes and clipboard obfuscation for added security against keyloggers.

Unlike many other password management tools, by default the KeePass encrypted database is not stored in the cloud, but strictly locally, for added security.

Works as a portable application that does not need to be installed and can be carried around in an external device.

KeePass uses AES-256 encryption for passwords which is practically unbreakable.

Keepass offers a range of plugins and extensions in different categories: Integration & Transfer, Automation & Scripting, Cryptography & Key Providers, and others.

Keepass offers a combination of master password, key file and user account verification.

Appending attachments to individual credential entries allows things like scanning important documents (for instance a scanned document containing the login information for your internet connection), appending them to the corresponding credential entry and afterwards destroying the original paper copy.

Since the database is stored locally it can be synced across devices using a cloud storage service like Dropbox, Google Drive or via a file sync tool like BitTorrent Sync. KeePass v2 also provides a powerful built-in synchronization mechanism that allows setting appropriate level of sync, kind of sync, and choosing between a number of sync sources (Dropbox, Drive, etc).

On average a new point release is available every 3 months.

Offers large variety of apps with different features and user interfaces vastly increasing the user base by catering to almost every taste.

Entries can be categorized in folders and subfolders and quickly found using search.

With the built-in history you can lookup previous passwords, track changes in general and if necessary recover those. In essence you are looking at a built-in Version Control System (VCS) which operates on single entries. Browsing the history of specific entries also displays associated metadata like the date of a change.

KeePass can set global hotkeys to fill in credentials while on a sites log-in screen. Scripting can launch a site or other application and perform any necessary log-on steps securely. It requires the KPScript plugin.

No paid version. Free for everyone.

e.g. KeePass Touch, MiniKeePass.

Users may define any extra fields (eg. "Surname", "Credit Card No", "Start Date", "Expiry Date" and "Security No") and their values may then be easily copy-and-pasted when required. This is a great feature not found in a lot of password-managers: they leave you to consign such additional information to the "Notes" section.

This app has the easiest, cleanest, and clearest user interface. For reference, LastPass has progressively gotten worse and worse and is now a confusing mess, while Keepass remains very user-friendly.

There are variations in support of features, so this is dependent on the Android app being used. Keepass2Android is one that has built-in synchronization over ssh and other protocols, fingerprint support and plugins are also supported to a certain extent.

KeePass is recommended by the German Federal Office for Information Security, the European Commission’s Free and Open Source Software Auditing (EU-FOSSA) project, and the French Network and Information Security Agency.

Difficult passwords are mostly a PITA on a mobile keyboard.

Keepass has an available Blackberry app that not only makes it easy to use on the go, but will work with any files backed up in the cloud for ease of access to stored passwords used on different machines.

As it has both Git support and encrypts passwords to GPG-encrypted text files, it is really simple to access everywhere. You can either use a self-hosted or a personal cloud hosted Git repository. It is automatically being kept up-to-date. Clients for pretty much everything and a really active community. Even if you can't run a client you will still be able to access the password by decrypting them from the Git store.

And is basically just a bunch of GPG-encrypted files stored in a folder.

You are not forced to rely on any other service provider than yourself. Like saving them on a remote server as in the case of LastPass. You don't have to extend your trust (to LastPass or any other provider).

It has a Qt-based GUI, an Android and iOS app, a Firefox plugin, a Golang GUI app, an interactive CUI, a dmenu script, OS X integration, and also an Emacs package.

It doesn't use a database like, for example, KeePass and thus doesn't open all passwords at once. Just one at a time.

You can version-control the encrypted files using Git, which allows you to track all changes done.

Does one thing and does it well.

As GPG and Git are widely used, it relies on thoroughly tested and secure functionality.

You and your team can share a repo and different subtrees can be encrypted for different sets of GPG ids.

For example the plugin "pass-extension-tail" makes it possible to only display the non-password parts of a password file, like the username or the name of the service the password is needed for, and without showing the password.

It's very easy to understand what the program does, why it's doing it, and how it's secure.