Bitwarden is the easiest and safest way to store your logins and passwords across all of. The window title of your browser window was 'Test Form - KeePass - Internet Explorer' or 'Test Form - KeePass - Mozilla Firefox', depending on the browser you are using. Because we gave the entry in KeePass the title Test Form, the entry title is contained in the window title, therefore KeePass uses this entry. KeePassXC is for people with extremely high demands of secure personal data management. It saves many different types of information, such as usernames, passwords, URLs, attachments, and notes in an offline, encrypted file that can be stored in any location, including private and public cloud solutions.
KeePass is an encrypted password database format. It is an alternative to online password managers and is supported on all major platforms.
There are two versions of the format: KeePass 1.x (Classic) and KeePass 2.x
Installation
There are three major implementations of KeePass, two are available in the official repositories:
- KeePass — A cross-platform password manager that has autotype and clipboard support when respectively xdotool and xsel are installed. It lets you import many formats and has many plugins.
- https://keepass.info || keepass

- KeePassXC — Fork of KeePassX that is actively maintained and has additional features like browser integration, ssh agent support, yubikey support, a TOTP generator and KeeShare included. Also provides a CLI.
- https://keepassxc.org || keepassxc
- KeePassX — Started as a Linux port of KeePass. keepassx2AUR uses the KeePass 2.x format, but can import 1.x databases. It also lets you import PwManager and KWallet XML databases. It does not support plugins. [1] No active development since 2016. [2]
- https://www.keepassx.org/ || keepassxAURkeepassx2AUR
Other lesser-known alternatives can be found in the AUR:
- keepassc — A curses-based password manager compatible to KeePass v.1.x and KeePassX. It uses
xselfor clipboard functions.
- https://raymontag.github.io/keepassc/ || keepasscAUR
- kpcli — A command line interface for KeePass database files
*.kdbor*.kdbx.
- https://sourceforge.net/projects/kpcli/ || kpcliAUR
- keepmenu — Dmenu/Rofi frontend for Keepass database files.
- https://github.com/firecat53/keepmenu || python-keepmenu-gitAUR
- keeweb — A web app (online / Electron) compatible with KeePass 2.x. KeeWeb is the only version with default Sync support for major cloud services, Gdrive, Onedrive, Dropbox etc.
- https://keeweb.info || keewebAURnextcloud-app-keewebAUR
Integration
Many plugins and extensions are available for integrating KeePass to other software. KeePassX and KeePassXC do not have a plugin interface, but KeePassXC has various integrations built-in.
Plugin installation in KeePass
KeePass is by default installed at /usr/share/keepass/. Copy plugin.plgx to a plugins sub-directory under the KeePass installation directory as demonstrated below:
Browser integration
keepassxc-browser for KeePassXC
keepassxc-browser is the browser extension of KeePassXC’s built-in browser integration using native-messaging and transport encryption using libsodium. It was developed to replace KeePassHTTP, as KeePassHTTP’s protocol has fundamental security problems.
The developers provide the browser extension on
- Firefox Add-ons (for Firefox and Tor Browser) and
- in the chrome web store (for Chromium, Google Chrome, Vivaldi and Brave)
The source code and an explanation how it works can be found on GitHub, the KeePassXC developers provide a configuration guide on their website.
keepassxc-browser for KeePass
keepassxc-browser can also be used with KeePass through Keepass-natmsg Plugin from AUR (keepass-natmsgAUR) and is recommended as successor of KeePassHTTP.
KeePassRPC and Kee
Kee (GitHub repo) is a browser extension for Firefox and Chromium which integrates KeePass through KeePassRPC, a KeePass plugin from the same developers.
The KeePass plugin is available from GitHub or from the AUR (keepass-plugin-rpcAUR).
The browser extension can be found on GitHub, Firefox Add-ons and the chrome web store.
Via autotype feature
Keepassxc Addon
An alternative to having a direct channel between browser and KeePass(XC) is using the autotype feature. There are browser extensions which support this way by putting the page URL into the window name:
- KeePass Helper or TitleURL for Firefox
- URL in title for Chromium
Nextcloud
- Keeweb for Nextcloud (nextcloud-app-keewebAUR)
- Open Keepass stores inside Nextcloud
Yubikey
YubiKey can be integrated with KeePass thanks to contributors of KeePass plugins. KeepassXC provides built-in support for Yubikey Challenge-Response without plugins.
Configuration with KeePass
- StaticPassword
- Configure one of Yubikey slots to store static password. You can make the password as strong as 65 characters (64 characters with leading '!'). This password can then be used as master password for your KeePass database.
- one-time passwords (OATH-HOTP)
- Download plugin from KeePass website: https://keepass.info/plugins.html#otpkeyprov
- Use yubikey-personalization-gui-gitAUR to setup OATH-HOTP
- In advanced mode untick OATH Token Identifier
- In KeePass additional option will show up under Key file / provider called One-Time Passwords (OATH HOTP)
- Copy secret, key length (6 or 8), and counter (in Yubikey personalization GUI this parameter is called Moving Factor Seed)
- You may need to setup Look-ahead count option to something greater than 0, please see this thread[dead link 2020-03-29 ⓘ] for more information
- See this video[dead link 2020-12-27 ⓘ] for more help
- Challenge-Response (HMAC-SHA1)
- Get the plugin from AUR: keepass-plugin-keechallengeAUR
- In KeePass additional option will show up under Key file / provider called Yubikey challenge-response
- Plugin assumes slot 2 is used
SSH agent
KeePassXC offers SSH agent support, a similar feature is also available for KeePass using the KeeAgent plugin.
The feature allows to store SSH keys in KeePass databases, KeePassXC/KeeAgent acts as OpenSSH Client and dynamically adds and removes the key to the Agent.
The feature in KeePassXC is documented in its FAQ.
ssh-add -d or ssh-add -D, therefore KeePassXC/KeeAgent cannot remove them when locking the database. [3][4]Tips and tricks
Disable your clipboard manager
If you are an avid user of clipboard managers, you may need to disable your clipboard manager before you launch keepass and then re-start your clipboard manager afterwards.

Troubleshooting
User interface scaling issues with KeePassXC 2.6
If the user interface elements are not scaled properly, see HiDPI#Qt 5 and upstream bug report.
See also
Mozilla Firefox Free Download
I am using the excellent KeepassXC on all my computers, it works on Windows (work-supplied laptop), Linux (home) and there are mobile clients too. On my Windows work laptop I am using the PortableApps version. The keepassxc devs offer a portable zip for download (KUDOS!) but I do like the seamless upgrades and the start menu the PortableApps platform offers. So far, so good.
However, I – seemingly like many others – have trouble to connect the portable version with the Firefox browser extension to enable autofill. After lots of trial and error and debugging attempts (debugging led to no more detail than “key exchange failed”, unfortunately), I have gotten it working. See below what I did, in the hope that it might be useful for others and for future reference to myself (I posted this in the portable app forum too -and- as the problem seems widespread as an issue in the keepassxc issue tracker. It was quickly closed there as the devs don’t want to support PortableApps versions, fair enough, but would perhaps saved them a few support requests if the information were to be find in their development wiki):
Firefox Export Bookmarks And Passwords
Initial Problem PortableApps Keepassxc (2.5.3)
Some things worked as intended:
- I had a registry key under “ComputerHKEY_CURRENT_USERSoftwareMozillaNativeMessagingHostsorg.keepassxc.keepassxc_browser”,
- it pointed to the correct org.keepassxc.keepassxc_browser_firefox.json file
- which pointed to a correct path “C:UsersspaetzbinPortableAppsKeePassXCPortableAppKeePassXCkeepassxc-proxy.exe”
When I started Firefox, I got a running keepassxc-proxy.exe process as a Firefox child process. However, trying to connect, all I got is a “key exchange failed” error. Turning on add-on debugging led to the same result and not more helpful information.
When I turned off the use of a proxy in the keepassxc settings (Browser integration -> Advanced), starting Firefox actually also started a keepassxc instance automatically, however all I still got was a “key exchange failed” error. NO combination of options, deleting of keepassxc and/or the browser extension, deletion of registry entries, or using a fresh Firefox profile helped.
Possible Solution
I noted that there are actually 2 binaries:
BINARY1:
C:UsersspaetzbinPortableAppsKeePassXCPortableKeePassXCPortable.exe (248kb) and
BINARY2:
C:UsersspaetzbinPortableAppsKeePassXCPortableAppKeePassXCKeePassXC.exe (7094kb)
The latter is also the directory which contains the keepassxc-proxy.exe. The binary in the former directory is what is started when one starts keepassxc through the PortableApps menu.
IF I directly start the latter binary, the Firefox extension is able to connect to the running keepassxc. If I start the former, I will get a key exchange failed error. Somehow, in this case the proxy will probably try to talk to the wrong binary. (not sure what weird wrapper the first binary is).
I autostart BINARY2 now on system start (Hit WIN-R, type shell:startup and paste a “link” to the correct keepassxc.exe) and that seems to do the trick for me. I realize that this is not the fault of keepassxc, but given the multitude of reported errors and the unhelpful error message I think this might be of use for other users of the Portable Version. It might be useful on the wiki if confirmed by other users of the portable version on windows….
