KeePassXC

Encrypted password/document vault guidance and setup basics.
What is KeePassXC?

KeePassXC is a way for you to encrypt all of your data in a single file which you alone hold the key to.

This prevents brute force attacks on your data - and prevents any access even by us.

We strongly recommend you store your data in KeePassXC before uploading to Safeinity. We have no affiliation with KeePassXC.

KeePassXC is a free, open-source account and document manager designed to securely store and manage passwords, usernames, notes, full documents and other sensitive information in a single encrypted database file.

KeePassXC is community maintained, open source, and built around the widely used KDBX database format. Its source code is publicly available for review, modification, and auditing, which helps security-minded users evaluate how it stores and protects sensitive information.

KeePassXC uses well-established encryption and an auditable codebase, but its real-world safety still depends on strong device security, a strong master passphrase, and disciplined operational practices.

Features
  • Encrypted Database: Stores all data in a .kdbx file encrypted with AES-256 (or optionally Twofish or ChaCha20), considered unbreakable with current technology when paired with a strong master password.
  • Password Generator: Creates complex, random passwords with customizable options (length, character sets, excluding similar characters) to promote unique, secure passwords for each account.
  • Cross-Platform Compatibility: Runs natively on Windows, macOS, and Linux, with compatible KDBX apps such as KeePassDX available for mobile workflows.
  • Auto-Type Functionality: Simulates keystrokes to securely enter credentials into login forms, reducing risks from keyloggers or clipboard snooping, with customizable window title matching.
  • Browser Integration and Extensibility: Supports browser integration, import/export tooling, and a range of entry and database management features for offline-first workflows.
  • Portable Mode: Runs directly from a USB drive without installation, ideal for secure use on shared or temporary systems.
  • Customizable Organization: Allows grouping entries into folders, tagging, and adding custom fields, attachments, or expiration dates for passwords.
  • Additional Security Layers: Supports key files, time-based one-time passwords (TOTP) for 2FA, and secure entry sharing via protected exports.

How to Download

Always download KeePassXC from official sources to ensure security and avoid tampered versions:

  1. Visit the official download page at keepassxc.org/download, maintained by the KeePassXC project.
  2. Select the appropriate build for your operating system. Desktop releases are available for Windows, macOS, and Linux.
  3. Choose between the installer (for system integration) or portable ZIP archive (for USB use).
  4. Verify the download's integrity using SHA-256 hashes provided on the site with tools like Windows' certutil.
  5. If you need mobile access, use a compatible KDBX application such as KeePassDX from a trusted official app source.
  6. After downloading, scan the file with antivirus software and verify the hash to ensure authenticity. Avoid third-party download sites to prevent bundled malware.

The open-source community regularly updates KeePassXC.

How to Use

Setting up and using KeePassXC is straightforward but requires careful configuration to maximize security:

  1. Install and Create a Database: Install KeePassXC or extract the portable version. Launch the app and create a new database.
  2. Set Up the Master Password: Create a strong master passphrase (12-16+ characters, mixed types). Optionally, add a key file generated by KeePassXC and store it separately, such as on a USB drive, for dual-factor security.
  3. Add and Organize Entries: Use "Entry > Add Entry" to input details like title, username, password, URL, and notes. Organize entries in groups (e.g., "Banking," "Email") via "Group > Add Group." Attach files or set custom auto-type sequences.
  4. Access and Auto-Fill Credentials: Search entries in the database. Double-click to copy details (Ctrl+C for password, Ctrl+U for username) or use Ctrl+Alt+A for auto-type to securely fill login forms. Enable clipboard auto-clear for added security.
  5. Data: When complete, upload the .kdbx file to Safeinity.
  6. You can create beneficiary specific KeePassXC databases: Make separate databases for each beneficiary to limit access. Shard the KeePassXC master password and pass the partial keys out to two or more beneficiaries. At any time (such as on your death or incapacitation), the beneficiaries can combine their keys to open the KeePassXC database.