Password managers
KeePass privacy rating
Offline, open source password manager for Windows that stores passwords in an encrypted local database file. It has no built-in cloud sync, and community ports exist for other platforms.
Summary
KeePass scores 63 out of 100 (grade C) on the password managers criteria. It meets 4 of 7 criteria: open source, end-to-end encrypted vault, local or self-hosted option and full export. It partly meets independent audit. It does not meet no trackers or telemetry and no ads or data sales. Automated tests: Mozilla HTTP Observatory grade D-.
Score 63 out of 100. How scoring works
Criteria
-
Yes
Open source Weight 3 of 3
Is all the source code needed to run the product public?
GPL-2.0 or later.
-
No
No trackers or telemetry Weight 3 of 3
Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?
The app has no telemetry, but the website loads Google AdSense.
-
No
No ads or data sales Weight 2 of 3
Is the product funded without advertising, ad targeting or selling user data?
The app has no ads, but the website shows Google AdSense ads alongside donation requests.
-
Partial
Independent audit Weight 2 of 3
Has an independent security or privacy audit been published within the last three years?
A full code review by the European Commission EU-FOSSA project is public but older than three years.
-
Yes
End-to-end encrypted vault Weight 3 of 3
Is the vault encrypted on the device before it is synced, with a key the provider does not hold?
Local-only: the whole database is encrypted with AES-256 or ChaCha20 using a key derived from the master key.
-
Yes
Local or self-hosted option Weight 2 of 3
Can the vault be kept locally or on your own server?
The database is a local file.
-
Yes
Full export Weight 1 of 3
Can every item be exported in an open format?
Exports to KeePass XML, which includes all fields, and CSV.