Inside KeePass
1 / 1KeePass 2 password database interface
KeePass: choose an edition and set up your vault
KeePass stores your passwords in a single encrypted database file. You unlock it with one master password, a key file, or both. There is no account to create and no company server holding your data. The file sits wherever you put it, and backing it up is your job. For some people that is the whole attraction. For others it is a reason to choose something else, and it is better to know which camp you are in before you start.
Which KeePass download?
The download page offers two editions and several packages. It looks more complicated than it is.
2.x or 1.x. Take KeePass 2.x. The project's own advice is "If in doubt, use KeePass 2.x". The 1.x line is an older, smaller edition kept available for people who already depend on it.
Installer, portable or MSI.
- Installer (EXE). For your own PC. You need permission to install software. It adds Start menu shortcuts and can associate KDBX database files with KeePass.
- Portable (ZIP). Unpack it anywhere, including a USB stick, and run it. KeePass states that this package does not store settings outside its own folder.
- MSI. Listed for network administrators only.
KeePass 2.x supports Windows 7, 8, 10 and 11 and runs natively on x86, x64 and ARM64 processors, so one download fits all of them. On Linux and macOS it runs through Mono.
Windows SmartScreen may show a warning when you start the installer. The KeePass download page mentions this and links to an explanation. The cautious approach is to verify the file first: the project publishes hashes and OpenPGP signatures for every release.
Create your database
- Choose File, New and decide where the database file will live. Pick a folder that is included in your backups.
- Set the master password. Make it long and memorable; a short sentence works better than a clever word. You may add a key file as a second factor, kept for instance on a USB stick.
- Accept the default database settings on the next screen.
- Right-click the entry list and choose Add Entry. Fill in a title, user name, password and URL. Leave empty any field you do not need.
- Press Save.
To use an entry, double-click its user name or password to copy it, or press Ctrl+B for the user name. Auto-Type goes further and types the user name and password into the window you choose, so nothing has to pass through the clipboard.
Keeping the file safe, and available
Back it up. One database file holds everything. Copy it somewhere else regularly, and keep any key file in a different place from the database.
Using it on several devices. KeePass has no sync service of its own. Many people keep the database in a cloud folder they already use, and the file stays encrypted there. Its protection is then only as strong as your master password.
On a phone. KeePass is a desktop program. The download page lists contributed and unofficial ports that open the same database format on other platforms.
When KeePass is the wrong choice
If you want sign-in, sync and browser filling to work without any setup, a hosted manager such as Bitwarden will suit you better. If you like the KeePass file format but want a more modern interface that looks the same on Windows, macOS and Linux, try KeePassXC, a separate project that reads the same databases.
Frequently Asked Questions
What happens if I forget my master password?
The database cannot be opened. KeePass has no reset and no recovery service, because nobody but you has the key. Write the master password down and store the paper somewhere safe.
Is KeePass free?
Yes. It is free and open source, and you can use it at home or at work.
Should I use the portable or the installed version?
Installed on your own PC, portable when you carry KeePass on a stick or cannot install software. Updating is simple either way: run the new installer over the old one, or copy the new files over the old folder. Your settings are kept.
Does KeePass work on a Mac?
KeePass 2.x can run on macOS and Linux through Mono. Many Mac users find a native application such as KeePassXC more comfortable.
- Best for
- Keeping passwords in a file you control, with no account and no cloud service involved.
- Good to know
- There is no password recovery: if you lose the master password or key file, the database stays locked.
Related reading
Compare password managers, encryption tools and VPN clients in our security and privacy category. If you are assembling a USB toolkit, the free portable software guide covers KeePass alongside other tools that run without installation.