[{"data":1,"prerenderedAt":159},["ShallowReactive",2],{"en-post-109":3},{"id":4,"title":5,"body":6,"description":12,"extension":152,"meta":153,"navigation":154,"path":155,"seo":156,"stem":157,"__hash__":158},"content/post/109.md","109",{"type":7,"value":8,"toc":139},"minimark",[9,13,18,32,36,39,43,62,66,69,73,76,80,94,98,103,107,110,114,121,127,133],[10,11,12],"p",{},"KeePassXC is a cross platform open source password manager driven by the community, and it is the modern, cross platform fork of the classic Windows password tool KeePass. Written in C plus plus, it runs on Windows, macOS, and Linux, and stores all your accounts, passwords, TOTP codes, attachments, and notes in one locally encrypted KDBX database file. The project has about 29k stars on GitHub and is dual licensed under GPL 2 or GPL 3, with fully open source code, no cloud account required, and no user data collected. If you are tired of the browser built in password box and the privacy tradeoffs of various cloud sync services, it is one of the safest local first choices.",[14,15,17],"h2",{"id":16},"what-keepassxc-is","What KeePassXC is",[10,19,20,21,26,27,31],{},"Think of KeePassXC as the modern continuation of KeePass, moving that originally Windows centric local password vault to every platform and adding the abilities modern habits require. Unlike storing passwords in a browser or a cloud account, everything lives in a KDBX file you control, and you decide whether that file sits on a local drive, a USB stick, or a private cloud. It shares roots with ",[22,23,25],"a",{"href":24},"/post/67/","What Is KeePass and How to Use It"," but is more active and more aligned with today multi OS reality, and if you care about encrypting the whole machine you can also read ",[22,28,30],{"href":29},"/post/44/","How to Enable BitLocker on Windows and Back Up the Recovery Key",".",[14,33,35],{"id":34},"main-features","Main features",[10,37,38],{},"First, offline encrypted database, all sensitive data is encrypted with AES 256, Twofish, or ChaCha20 inside a local KDBX file, and you choose where to keep it. Second, password generator, with both random character and memorable passphrase modes, and adjustable length and character sets. Third, TOTP and auto type, with built in TOTP storage and generation, plus an Auto Type feature that fills accounts and passwords into any window. Fourth, browser integration, through the official extension for Chrome, Firefox, Edge, Brave, and others, with passkey support. Fifth, hardware keys and SSH, compatible with YubiKey and OnlyKey challenge response, plus a built in SSH agent and the keepassxc-cli command line tool. Sixth, one click migration, importing existing data from CSV, 1Password, Bitwarden, Proton Pass, and KeePass1.",[14,40,42],{"id":41},"how-to-install","How to install",[10,44,45,46,51,52,56,57,61],{},"Get the installer from the official site or the GitHub releases page. Download at ",[22,47,48],{"href":48,"rel":49},"https://github.com/keepassxreboot/keepassxc/releases",[50],"nofollow"," , pick the KeePassXC-X.X.X-Win64.msi or the portable build. Official site ",[22,53,54],{"href":54,"rel":55},"https://keepassxc.org/",[50]," , download page ",[22,58,59],{"href":59,"rel":60},"https://keepassxc.org/download",[50]," . The steps are open the download page, get the Windows 64 bit MSI, double click and follow the wizard with Next, installed by default to C:\\Program Files\\KeePassXC, then launch from the Start menu. If you use the Windows package manager, run winget install KeePassXC.KeePassXC in a terminal and it is done in one line.",[14,63,65],{"id":64},"how-to-use-it","How to use it",[10,67,68],{},"On first launch click Database then New Database to create a database and set a master password, and it is wise to save a key file as a second factor. Click the plus at the bottom left, Add Entry, and fill in title, username, password, and URL. Select an entry and click Copy Username or Copy Password, or click Auto Type to fill it in the target window. For TOTP, edit the entry, switch to the TOTP tab, and paste the secret from the QR code to generate rotating codes. For browser auto fill, install KeePassXC-Browser from the extension store and complete one pairing with the desktop app.",[14,70,72],{"id":71},"things-to-watch","Things to watch",[10,74,75],{},"The master password is the only way to recover your data, and if you forget it there is no decryption, so back it up carefully. The KDBX file is your entire data set, so when changing devices copy it together with the key file, and do not sync it in plaintext through a cloud drive. After enabling browser integration, only pair on trusted computers to avoid leaving connections on public devices. On Windows keep it updated, since recent versions fixed DLL injection class risks. Export an offline backup to separate media periodically to guard against a single file getting corrupted.",[14,77,79],{"id":78},"download","Download",[10,81,82,83,86,87,56,90,93],{},"GitHub releases ",[22,84,48],{"href":48,"rel":85},[50]," (pick KeePassXC-X.X.X-Win64.msi or portable), official site ",[22,88,54],{"href":54,"rel":89},[50],[22,91,59],{"href":59,"rel":92},[50]," .",[14,95,97],{"id":96},"official-site","Official site",[10,99,100],{},[22,101,54],{"href":54,"rel":102},[50],[14,104,106],{"id":105},"advanced-tips","Advanced tips",[10,108,109],{},"To really use it well, keep the database file on an encrypted private cloud or a USB stick, and add a key file for two factor protection, so even if the database leaks, there is no opening without the key file and master password. After enabling browser auto fill, pair once on the desktop and use the official mobile version to read the same database on the go. When a few accounts are shared with a family or team, hand out a copy containing only those entries rather than exposing every password to one person. A periodic offline export is the last line of defense against file corruption.",[14,111,113],{"id":112},"faq","FAQ",[10,115,116,120],{},[117,118,119],"strong",{},"What is the relationship between KeePassXC and KeePass?"," KeePassXC is the community fork of KeePass, focused on cross platform and modern use, and the KDBX formats are compatible, so old KeePass data imports directly.",[10,122,123,126],{},[117,124,125],{},"Can it sync with my phone?"," Yes. The official mobile version reads the same KDBX file, and syncing the database through a private cloud or local copy keeps everything off any third party password service.",[10,128,129,132],{},[117,130,131],{},"Can I get my data back if I forget the master password?"," No. The master password plus key file is the only decryption path, with no backdoor, so backing up the key file matters more than anything else.",[10,134,135,138],{},[117,136,137],{},"Is browser auto fill safe?"," The official KeePassXC-Browser extension only works after pairing, and fills only on sites you confirm, which is more controllable than letting the browser remember passwords.",{"title":140,"searchDepth":141,"depth":141,"links":142},"",2,[143,144,145,146,147,148,149,150,151],{"id":16,"depth":141,"text":17},{"id":34,"depth":141,"text":35},{"id":41,"depth":141,"text":42},{"id":64,"depth":141,"text":65},{"id":71,"depth":141,"text":72},{"id":78,"depth":141,"text":79},{"id":96,"depth":141,"text":97},{"id":105,"depth":141,"text":106},{"id":112,"depth":141,"text":113},"md",{},true,"/post/109",{"description":12},"post/109","bL5naV56xC87X4jUPFGkP4PvGT9hVvgYluwQDBLp4u4",1794378304569]