{
  "slug": "keepassxc",
  "category": "password-managers",
  "name": "KeePassXC",
  "description": "Open source, offline password manager for Windows, macOS and Linux that stores passwords in an encrypted KeePass (KDBX) database file. It includes browser integration, TOTP, SSH agent and YubiKey support, with no built-in cloud sync.",
  "website": "https://keepassxc.org",
  "source": "https://github.com/keepassxreboot/keepassxc",
  "license": null,
  "platforms": [
    "windows",
    "macos",
    "linux"
  ],
  "jurisdiction": null,
  "pick": false,
  "pick_reason": null,
  "disclosure": null,
  "grade": "A",
  "score": 91,
  "coverage": 100,
  "summary": "KeePassXC scores 91 out of 100 (grade A) on the password managers criteria. It meets 6 of 7 criteria: open source, no ads or data sales, independent audit, end-to-end encrypted vault, local or self-hosted option and full export. It partly meets no trackers or telemetry.",
  "url": "https://privacyratings.com/password-managers/keepassxc/",
  "markdown": "https://privacyratings.com/password-managers/keepassxc/index.md",
  "answers": {
    "open_source": {
      "title": "Open source",
      "weight": 3,
      "answer": "yes",
      "evidence": "https://github.com/keepassxreboot/keepassxc/blob/develop/COPYING",
      "note": "GPL-2.0 or GPL-3.0."
    },
    "no_trackers": {
      "title": "No trackers or telemetry",
      "weight": 3,
      "answer": "partial",
      "evidence": "https://keepassxc.org/privacy/",
      "note": "The app sends no data unless the user requests it, but the website uses self-hosted Matomo and Cloudflare Web Analytics."
    },
    "no_ads": {
      "title": "No ads or data sales",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://keepassxc.org/donate/",
      "note": "Volunteer project funded by donations, with no ads."
    },
    "independent_audit": {
      "title": "Independent audit",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://keepassxc.org/assets/pdf/Synacktiv-ANSSI-CSPN-KeePassXC-RTE-v1.3.pdf",
      "note": "Synacktiv evaluated KeePassXC for the French ANSSI CSPN certification, and the full technical report is public."
    },
    "transparency_report": {
      "title": "Transparency report",
      "weight": 2,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    },
    "user_notice": {
      "title": "Tells users about requests",
      "weight": 1,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    },
    "tls": {
      "title": "TLS configuration",
      "weight": 2,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    },
    "security_headers": {
      "title": "Security headers",
      "weight": 1,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    },
    "web_standards": {
      "title": "Modern web standards",
      "weight": 1,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    },
    "e2ee_vault": {
      "title": "End-to-end encrypted vault",
      "weight": 3,
      "answer": "yes",
      "evidence": "https://keepassxc.org/privacy/",
      "note": "Local-only: the database is an encrypted file on the device, and no data is sent to the developers."
    },
    "self_host_or_local": {
      "title": "Local or self-hosted option",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://keepassxc.org/docs/KeePassXC_UserGuide",
      "note": "The database is a local file."
    },
    "export": {
      "title": "Full export",
      "weight": 1,
      "answer": "yes",
      "evidence": "https://keepassxc.org/docs/KeePassXC_UserGuide",
      "note": "The database is a KDBX file, an open format read by many apps. CSV, XML and HTML exports are also available."
    }
  },
  "tests": {
    "ssllabs": null,
    "observatory": null,
    "internetnl_web": null,
    "internetnl_mail": null,
    "trackers": [
      {
        "name": "Cloudflare Web Analytics",
        "host": "static.cloudflareinsights.com",
        "effect": "partial"
      }
    ],
    "tested_at": "2026-10-01T10:59:36.112Z"
  },
  "last_modified": "2026-10-01T11:14:42Z"
}