KeePass is a free, open-source password manager that helps you securely manage your passwords. You can store all your passwords in a single database, secured with either a master key or a key file. This way, you only need to remember one master password or select the key file to unlock the entire database.
The databases are encrypted using the best and most secure encryption algorithms. A password database is stored in a single file, making it easy to transfer from one computer to another.
KeePass encrypts its password databases using the Advanced Encryption Standard (AES, Rijndael) and the Twofish algorithm.
Both of these ciphers are considered highly secure. For example, AES became a U.S. federal government standard and was approved by the National Security Agency (NSA) for securing top-secret information.
KeePass All Features
KeePass uses the common CSV export format used by various password managers, such as Password Keeper and Password Agent. Exports from these programs might be imported to your KeePass databases. The password list might be exported to formats like TXT, HTML, XML, and CSV.
The application has a portable edition: you may carry it on a USB stick and run it on Windows systems without installation.
Strong Security
- KeePass supports the Advanced Encryption Standard (AES, Rijndael) and the Twofish algorithm to encrypt its password databases. Both of those ciphers are thought to be very safe. AES e.g. grew to become efficient as a U.S. Federal authorities standard and is authorized by the National Security Agency (NSA) for high secret information.
- The full database is encrypted, not solely the password fields. So, your user names, notes, etc. are encrypted, too.
- SHA-256 is used to hash the master key components. SHA-256 is a 256-bit cryptographically safe one-way hash function. No assaults are recognized but towards SHA-256. The output is remodeled using a key derivation function.
- Protection towards dictionary and guessing assaults: by remodeling the master key part hash using a key derivation function (AES-KDF, Argon2, โฆ), dictionary and guessing assaults might be more durable.
- Process memory protection ensures that your passwords remain encrypted while KeePass is running. Even if the operating system dumps the KeePass process to disk, your passwords will not be exposed.
- [2.x] Protected in-memory streams: passwords are encrypted using a session key when loading the interior XML format.
- Security-enhanced password edit controls: KeePass is the primary password manager with security-enhanced password edit controls. None of the available password edit control spies work towards these controls, and the passwords entered in these controls arenโt even seen within KeePass’s process memory.
- The master key dialog can be shown on a secure desktop, where almost no keylogger can operate. Auto-Type can also be protected against keyloggers.
Changes in KeePass 2.57.1 Professional :
- Added options โShow confirmation dialog when running/opening a cmd:// URIโ, โShow confirmation dialog when evaluating/replacing a {CMD:โฆ} placeholderโ, and โShow confirmation dialog when evaluating/replacing a {REF:P@โฆ} placeholder (action)โ (in โToolsโ โ โOptionsโ โ tab โInterface (1)โ, turned on by default).
- Added option โFollow redirectsโ on the โAdvancedโ tab page of the โOpen From URLโ dialog.
- When an exception occurs while creating/compiling a PLGX file, streams/readers/writers are now closed immediately.
- When an exception occurs while a plugin performs a certain web request, streams/readers are now closed immediately.
- Refactored code related to streams, import modules, menu/toolbar renderers, and registry accesses.
- I removed the Spamex.com import module.
- Minor other improvements.