KeePass review: A free password manager strictly for tech-savvy users

KeePass is a free, open-source password supervisor that’s been round for 20 years. While functionally strong, the core program lacks lots of the options we’ve come to count on from fashionable password managers reminiscent of password seize and replay, password auditing, darkish internet monitoring, and a local cell app. On the plus aspect, it gives a excessive diploma of customizability however requires a sure technical proficiency to reap the benefits of it, one thing the typical person most likely doesn’t have.

KeePass: Getting began

If you’re a kind of common customers, issues get muddy the second you go to obtain KeePass. There are two editions, 1.x and a pair of.x, and builders proceed to assist each. However, there’s little to information your resolution about which model to obtain. KeePass offers a hyperlink to an version comparability web page, which states the 2 editions are “fundamentally different (2.x is not based on 1.x).” But lots of the differentiators are powerful to decipher if you happen to don’t have the requisite technical background. In the top, I selected the most recent launch of version 2.x as a result of it helps further security measures that 1.x doesn’t.

Note: See our roundup of the best password managers to study competing merchandise, what to search for in a password supervisor, and product suggestions.

Once the KeePass set up is full, an empty password database window seems with nearly each button grayed out and no directions on methods to get began. After returning to the KeePass internet web page and poking round a bit, I stumbled upon a “first steps tutorial” that describes primary utilization.

You first must create a brand new database, by deciding on File > New in the principle menu. You’ll be requested the place to retailer the database file; KeePass shops your database domestically in your machine somewhat than within the cloud, which enormously reduces the chance of a breach. Next, you’re prompted to create a grasp password. There’s additionally a checkbox right here to show “expert options,” which lets you allow multi-factor authentication in your KeePass account. You can both create a key file, which you’ll have to put in on a USB drive that should be plugged into your pc when accessing your database, or you possibly can connect the information to your Windows person account.

After you’ve created your grasp password, you possibly can see your database. KeePass exhibits its age. The database is a bare-bones window. A menu on the left types your passwords into groupings circa 2003 (Networks, Internet, eMail, and so on.), and your passwords for the energetic group are listed in a bigger pane on the appropriate.

KeePass: Features

Importing passwords from different databases is fairly simple. KeePass can import from greater than 40 different password managers, together with widespread industrial choices reminiscent of Dashlane, Bitwarden, and LastPass, in addition to from Firefox and Chrome browsers.

Michael Ansaldo/Foundry

Adding and creating new passwords takes much more work. Unlike fashionable password managers, KeePass doesn’t have a browser extension that mechanically captures and replays login credentials as you utilize and replace them. Any credentials not included in your preliminary import must be added to your database manually one after the other. New entries mechanically populate with a 20-character generated password containing lowercase and uppercase letters and numbers. KeePass’ password generator gives a dizzying array of choices for how passwords are generated, however most of those are most likely past the scope of the typical person’s wants.

Most industrial password managers fill in your login credentials on safe websites both mechanically or when you choose the location’s entry from a browser extension. KeePass as a substitute makes use of one thing known as Auto-Type. It makes use of a sequence of keystrokes that simulate the act of you manually typing in your login credentials. When you invoke this sequence by urgent Ctrl-V in a login window, KeePass basically performs these keystrokes.

The default keystroke sequence is about to {USERNAME}{TAB}{PASSWORD}{ENTER}. In different phrases, KeePass will simulate typing your username, tabbing to the following discipline, typing your password, after which urgent enter once you invoke Auto-Type. If a selected web site requires a unique sequence of keystrokes, you’ll must outline a brand new Auto-Type sequence for that entry in your database.

Michael Ansaldo/Foundry

Auto-type works however it’s not notably user-friendly. You have to make sure your cursor is in the appropriate enter discipline earlier than you invoke Auto-Type or it gained’t work. I additionally discovered that the characteristic didn’t work as anticipated on each website, during which case I needed to merely copy and paste my credentials, toggling between the location and my KeePass database.

In addition to passwords, you possibly can retailer bank cards, notes, and different delicate private data in KeePass. But as with passwords, it sometimes takes extra steps and tweaking than in different password managers.

KeePass: Syncing

KeePass additionally permits you to sync your databases throughout units however it’s not as simple as with cloud-based password managers. The base program helps syncing database information to different units utilizing native community shares, FTP, HTTP, and WebDAV. Things get trickier if you wish to use the cloud to retailer and sync your database. Popular choices like Dropbox, Microsoft OneDrive, and Google Drive could present an integration that permits you to entry your saved information utilizing Windows Explorer. If not, you’ll must discover a specialised KeePass plugin to assist do the job.

Speaking of plugins, KeePass has greater than 100 that facilitate every thing from backup to importing and exporting information, to integrating with third-party functions. If you resolve to make use of KeePass, you’ll need to familiarize your self with these as a result of many deliver this system’s capabilities on par with fashionable password managers, including options like automated password seize and replay, password change reminders, and cloud syncing.

Should you utilize KeePass password supervisor?

This customizability means you possibly can form KeePass to your exact wants if you happen to’re keen to place within the work. Most customers, although, are turning to password managers to cut back complexity and psychological labor, not improve it. If you’re not a tech-savvy tinkerer, KeePass’s calls for and the necessity to repeatedly seek the advice of its assist documentation will possible tie you in knots fairly shortly. I’d strongly suggest you permit KeePass to these with the know-how to maximise it and look as a substitute to one of many high picks in our password manager guide.