KeePass is a free, open-source password supervisor that’s been round for 20 years. While functionally strong, the core program lacks most of the options we’ve come to anticipate from fashionable password managers reminiscent of password seize and replay, password auditing, darkish internet monitoring, and a local cellular app. On the plus aspect, it provides a excessive diploma of customizability however requires a sure technical proficiency to make the most of it, one thing the typical person in all probability doesn’t have.

KeePass: Getting began

If you’re a type of common customers, issues get muddy the second you go to obtain KeePass. There are two editions, 1.x and a couple of.x, and builders proceed to help each. However, there’s little to information your resolution about which model to obtain. KeePass offers a hyperlink to an version comparability web page, which states the 2 editions are “fundamentally different (2.x is not based on 1.x).” But most of the differentiators are robust to decipher for those who don’t have the requisite technical background. In the top, I selected the newest launch of version 2.x as a result of it helps extra safety features that 1.x doesn’t.

Note: See our roundup of the best password managers to find out about competing merchandise, what to search for in a password supervisor, and product suggestions.

Once the KeePass set up is full, an empty password database window seems with nearly each button grayed out and no directions on easy methods to get began. After returning to the KeePass internet web page and poking round a bit, I stumbled upon a “first steps tutorial” that describes primary utilization.

Michael Ansaldo/Foundry

You first should create a brand new database, by deciding on File > New in the primary menu. You’ll be requested the place to retailer the database file; KeePass shops your database domestically in your gadget slightly than within the cloud, which enormously reduces the probability of a breach. Next, you’re prompted to create a grasp password. There’s additionally a checkbox right here to show “expert options,” which lets you allow multi-factor authentication on your KeePass account. You can both create a key file, which you’ll have to put in on a USB drive that must be plugged into your laptop when accessing your database, or you may connect the information to your Windows person account.

After you’ve created your grasp password, you may see your database. KeePass exhibits its age. The database is a bare-bones window. A menu on the left kinds your passwords into groupings circa 2003 (Networks, Internet, eMail, and many others.), and your passwords for the lively group are listed in a bigger pane on the fitting.

KeePass: Features

Importing passwords from different databases is fairly simple. KeePass can import from greater than 40 different password managers, together with well-liked industrial choices reminiscent of Dashlane, Bitwarden, and LastPass, in addition to from Firefox and Chrome browsers.

Michael Ansaldo/Foundry

Adding and creating new passwords takes much more work. Unlike fashionable password managers, KeePass doesn’t have a browser extension that robotically captures and replays login credentials as you utilize and replace them. Any credentials not included in your preliminary import should be added to your database manually one after the other. New entries robotically populate with a 20-character generated password containing lowercase and uppercase letters and numbers. KeePass’ password generator provides a dizzying array of choices for how passwords are generated, however most of those are in all probability past the scope of the typical person’s wants.

Most industrial password managers fill in your login credentials on safe websites both robotically or when you choose the positioning’s entry from a browser extension. KeePass as an alternative makes use of one thing known as Auto-Type. It makes use of a sequence of keystrokes that simulate the act of you manually typing in your login credentials. When you invoke this sequence by urgent Ctrl-V in a login window, KeePass primarily performs these keystrokes.

The default keystroke sequence is about to {USERNAME}{TAB}{PASSWORD}{ENTER}. In different phrases, KeePass will simulate typing your username, tabbing to the following area, typing your password, after which urgent enter whenever you invoke Auto-Type. If a specific web site requires a distinct sequence of keystrokes, you’ll should outline a brand new Auto-Type sequence for that entry in your database.

Michael Ansaldo/Foundry

Auto-type works nevertheless it’s not significantly user-friendly. You have to make certain your cursor is in the fitting enter area earlier than you invoke Auto-Type or it received’t work. I additionally discovered that the function didn’t work as anticipated on each web site, during which case I needed to merely copy and paste my credentials, toggling between the positioning and my KeePass database.

In addition to passwords, you may retailer bank cards, notes, and different delicate private data in KeePass. But as with passwords, it sometimes takes extra steps and tweaking than in different password managers.

KeePass: Syncing

KeePass additionally means that you can sync your databases throughout units nevertheless it’s not as simple as with cloud-based password managers. The base program helps syncing database recordsdata to different units utilizing native community shares, FTP, HTTP, and WebDAV. Things get trickier if you wish to use the cloud to retailer and sync your database. Popular choices like Dropbox, Microsoft OneDrive, and Google Drive could present an integration that means that you can entry your saved recordsdata utilizing Windows Explorer. If not, you’ll should discover a specialised KeePass plugin to assist do the job.

Speaking of plugins, KeePass has greater than 100 that facilitate every little thing from backup to importing and exporting knowledge, to integrating with third-party functions. If you determine to make use of KeePass, you’ll wish to familiarize your self with these as a result of many carry this system’s capabilities on par with fashionable password managers, including options like automated password seize and replay, password change reminders, and cloud syncing.

Should you utilize KeePass password supervisor?

This customizability means you may form KeePass to your exact wants for those who’re keen to place within the work. Most customers, although, are turning to password managers to scale back complexity and psychological labor, not improve it. If you’re not a tech-savvy tinkerer, KeePass’s calls for and the necessity to repeatedly seek the advice of its help documentation will doubtless tie you in knots fairly shortly. I’d strongly suggest you allow KeePass to these with the know-how to maximise it and look as an alternative to one of many prime picks in our password manager guide.