KeePassXC

KeePassXC is a community-driven, open source, cross-platform password manager that stores credentials in an encrypted local database file. Originally forked in 2016 from KeePassX (itself a port of the Windows-only KeePass), KeePassXC is maintained by a team of EU-based volunteer developers who have modernized the codebase and added features that the original projects lacked. Unlike cloud-based password managers, KeePassXC operates entirely offline by default, meaning your password database never leaves your device unless you explicitly choose to sync it via your own cloud storage.

The application uses AES-256 encryption (with Twofish and ChaCha20 alternatives) to protect the database file, which can be unlocked using a master password, a key file, or hardware tokens like YubiKey for multi-factor authentication. KeePassXC includes a built-in TOTP generator for two-factor authentication codes, an SSH agent for managing SSH keys, and an Auto-Type feature that fills login credentials into any application on your desktop. The browser integration extension for Chrome, Firefox, and other browsers enables seamless autofill on websites. A strong password generator with customizable rules helps users create unique credentials for every account.

KeePassXC uses the widely adopted KeePass database format (.kdbx), which means users can open their vaults with any compatible KeePass application on any platform. This open format ensures that users are never locked into a single vendor. Because KeePassXC stores everything locally, there are no data centers involved and no cloud service to breach. For privacy-conscious European users and organizations that want complete sovereignty over their credentials without trusting any third-party server, KeePassXC is the gold standard in offline password management. The project is entirely free, with no premium tiers or paid features.