README 未说明具体依赖版本，构建前需查阅 INSTALL.md 或 Wiki；浏览器集成和 SSH Agent 等扩展功能需按文档单独配置
keepassxc
keepassxreboot活跃维护跨平台开源密码管理器，兼容 KeePass 数据库格式，把账号密码集中加密保管，支持 YubiKey 等硬件密钥，本地存储不上云。
KeePassXC is a cross-platform community-driven port of the Windows application “KeePass Password Safe”.
2.8.0发布于 2026-10-21 21:57 UTC29,897star +56 / 7 天2,023fork同步于 2026-11-10 11:21 UTC
README 未给出构建或安装命令，仅指向 INSTALL.md 与下载页 硬件要求按 README 说明
README 未说明
跨平台开源密码管理器，把账号密码等敏感信息加密存进本地 KDBX 文件
跨平台开源密码管理器，兼容 KeePass 数据库格式，把账号密码集中加密保管，支持 YubiKey 等硬件密钥，本地存储不上云。
核心能力
- 以 KDBX4/KDBX3 格式创建、打开和保存数据库
- 所有信息静态加密，不暴露在程序之外
- 内置密码生成器与高级模式搜索
- 支持 TOTP 存储生成与 YubiKey/OnlyKey 挑战响应
- 浏览器集成支持 Chrome、Firefox、Edge 等并支持 passkey
容易踩的坑
内容由模型根据 README 生成，可能不完整或不准确，以官方文档为准。看原文 README
- 2.8.0Release 2.8.0最新正式版2026-10-21 · 2026-10-21 21:57 UTC
New Features
- Add remote database synchronization and import using external tools [#7222, #10896, #11271]
- Allow configuring keyboard shortcuts [#9643]
- SSH Agent: Add support for generating RSA, ECDSA, and Ed25519 keys [#7215]
- Linux: Add Wayland Auto-Type support using XDG Desktop Portals [#13359, #13449, #13579, #13770, #13810]
- Linux: Add Quick Unlock using Polkit (adds a UUID to public metadata, marking database as modified on first launch) [#8983]
- Linux Add AArch64 AppImage [#13816]
- macOS: Allow Quick Unlock using the device password when Touch ID is unavailable [#11410]
- Windows: Allow administrators to enforce certain user settings via global Group Policy overrides [#11223]
- Windows: Add native Arm64 builds [#13678, #13727]
Major Changes
- Migrate to Qt 6 [#11651, #7783, #13456, #13473, #13684, #13784]
- Linux: Store application state in XDG_STATE_HOME instead of XDG_CACHE_HOME [#9755]
- Build: Bundle build features under a single KPXC_MINIMAL CMake option [#11003]
Security Fixes
- Fix use-after-free when importing crafted KDB files (CVE-2026-69150; Credits: A. Ramos (@aramosf)) [#13500]
- Browser: Prevent entry reference injection when creating or updating entries via browser extension (CVE-PENDING; Credits: Davonte (@BadPingHere)) [#13580, #13670, #13688]
- Browser: Fix out-of-bounds writes when encrypting and decrypting native messaging messages (CVE-2026-118673; Credits: @sigure21) [#13679]
- Windows: Randomize shared memory mapping names when sending SSH keys to Pageant (CVE-PENDING; Credits: NATO Cyber Security Centre (NCSC), Viktor Markopoulos NCIA/NCSC) [#13680]
- Fix integer overflow and out-of-bounds read in legacy KDB importer (CVE-PENDING; Credits: NATO Cyber Security Centre (NCSC), Viktor Markopoulos NCIA/NCSC) [#13682]
- Secret Service: Exclude protected attributes from attribute listings (Credits: Koda Reef (@kodareef5)) [#13674]
- Windows: Fix clipboard exclusion format name (Credits: @ByeWhiteLists) [#13352]
- Improve clearing of decrypted database fragments from memory used by zlib [#13677]
Changes
- Change Clone Entry shortcut to Ctrl+D [#10903]
- Show suggestions when adding or renaming additional attributes [#13633]
- Add passkey and TOTP entry counts to database statistics in GUI and CLI [#13632]
- Remove legacy KeePassHTTP attribute conversion [#8007]
- Browser: Support get-database-entries request to list entry titles, URLs, and UUIDs [#7292]
- CLI: Reduce GUI library dependencies and simplify line reader code [#9701, #13330]
- Proton Pass Importer: Support Wi-Fi, SSH keys, and unknown entry types [#13148]
- Update translations and clean up code [#9702, #12611, #13258, #8008, #7999, #7998]
Fixes
- Fix application lockups on systems with one or two CPU cores [#13296]
- Preserve entry custom data in newly created history items [#13573]
- Fix password strength evaluation for referenced passwords [#13479]
- Respect password generator settings when auto-generating passwords for new entries [#13277]
- Fix case-sensitive search with the + prefix modifier [#13493]
- Fix directory creation error handling [#13508]
- Fix favicon download redirect limit being ignored [#13663]
- Fix showing challenge-response credentials without a password [#13615]
- Fix key file selection link not being clickable when translated incorrectly [#13396]
- Prevent database unlock controls from shrinking vertically [#13428]
- Prevent mouse wheel scrolling from changing the unfocused alternative save method setting [#13358]
- Fix password font size not following application font size [#13658]
- Fix typos and documentation links [#10124, #10893, #9993]
- Fix null pointer dereference in Secret Service integration [#13655]
- Fix ellipsis password reuse tooltip in database reports [#13091]
- Fix database lock after autosave due to external changes [#13733]
- Auto-Type: Support {PGDN} placeholder [#13463]
- Auto-Type: Refactor Auto-Type plugins to
- 2.8.0-beta1Release 2.8.0-beta1pre-release2026-09-23 · 2026-09-23 04:08 UTC
查看更新说明
New Features
- Add remote database synchronization and import using external tools [#7222, #10896, #11271]
- Allow configuring keyboard shortcuts [#9643]
- SSH Agent: Add support for generating RSA, ECDSA, and Ed25519 keys [#7215]
- Linux: Add Wayland Auto-Type support using XDG Desktop Portals [#13359, #13449, #13579]
- Linux: Add Quick Unlock using Polkit [#8983]
- macOS: Allow Quick Unlock using the device password when Touch ID is unavailable [#11410]
- Windows: Add native Arm64 builds [#13678]
Major Changes
- Migrate to Qt 6 [#11651, #7783, #13456, #13473, #13684]
- Linux: Store application state in XDG_STATE_HOME instead of XDG_CACHE_HOME [#9755]
- Build: Bundle build features under a single KPXC_MINIMAL CMake option [#11003]
Security Fixes
- Fix use-after-free when importing crafted KDB files (CVE-2026-69150; Credits: A. Ramos (@aramosf)) [#13500]
- Browser: Prevent entry reference injection when creating or updating entries via browser extension (CVE-PENDING; Credits: Davonte (@BadPingHere)) [#13580, #13670, #13688]
- Browser: Fix out-of-bounds writes when encrypting and decrypting native messaging messages (CVE-PENDING; Credits: @sigure21) [#13679]
- Windows: Randomize shared memory mapping names when sending SSH keys to Pageant (CVE-PENDING; Credits: NATO Cyber Security Centre (NCSC), Viktor Markopoulos NCIA/NCSC) [#13680]
- Fix integer overflow and out-of-bounds read in legacy KDB importer (CVE-PENDING; Credits: NATO Cyber Security Centre (NCSC), Viktor Markopoulos NCIA/NCSC) [#13682]
- Secret Service: Exclude protected attributes from attribute listings (Credits: Koda Reef (@kodareef5)) [#13674]
- Windows: Fix clipboard exclusion format name (Credits: @ByeWhiteLists) [#13352]
- Improve clearing of decrypted database fragments from memory used by zlib [#13677]
Changes
- Change Clone Entry shortcut to Ctrl+D [#10903]
- Show suggestions when adding or renaming additional attributes [#13633]
- Add passkey and TOTP entry counts to database statistics in GUI and CLI [#13632]
- Remove legacy KeePassHTTP attribute conversion [#8007]
- Browser: Support get-database-entries request to list entry titles, URLs, and UUIDs [#7292]
- CLI: Reduce GUI library dependencies and simplify line reader code [#9701, #13330]
- Proton Pass Importer: Support Wi-Fi, SSH keys, and unknown entry types [#13148]
- Update translations and clean up code [#9702, #12611, #13258, #8008, #7999, #7998]
Fixes
- Fix application lockups on systems with one or two CPU cores [#13296]
- Preserve entry custom data in newly created history items [#13573]
- Fix password strength evaluation for referenced passwords [#13479]
- Respect password generator settings when auto-generating passwords for new entries [#13277]
- Fix case-sensitive search with the + prefix modifier [#13493]
- Fix directory creation error handling [#13508]
- Fix favicon download redirect limit being ignored [#13663]
- Fix showing challenge-response credentials without a password [#13615]
- Fix key file selection link not being clickable when translated incorrectly [#13396]
- Prevent database unlock controls from shrinking vertically [#13428]
- Prevent mouse wheel scrolling from changing the unfocused alternative save method setting [#13358]
- Fix password font size not following application font size [#13658]
- Fix typos and documentation links [#10124, #10893, #9993]
- Fix null pointer dereference in Secret Service integration [#13655]
- Auto-Type: Support {PGDN} placeholder [#13463]
- Auto-Type: Refactor Auto-Type plugins to integrate them into the main binary [#13469]
- Browser: Fix showing and closing the password generator [#9984, #9743]
- CSV Import: Fix automatic column mapping for English headers with non-English UI languages [#13531]
- Secret Service: Fix crash when a database locks while the item access dialog is open [#13598, #13602]
- SSH Agent: Prevent recursive updates when changing entry settings and
- 2.7.12Release 2.7.122026-03-10 · 2026-03-10 01:16 UTC
查看更新说明
Changes
- Passkeys: Set BE and BS flags to true (NOTE: MAY BREAK EXISTING PASSKEYS) [#13042]
- Support TIMEOTP autotype and entry placeholder [#13117]
- Browser: Show URLs in browser access dialog [#12906]
- Bitwarden Import: Add support for nested folders [#13081]
Fixes
- Prevent exploits through OpenSSL configurations [#13118, #13124]
- Auto-Type: Revert change that caused race condition on Linux [#12738]
- Auto-Type: Fix help button enablement [#12937]
- Browser: Fix showing correct checkbox value in entry Browser Integration settings [#12980]
- Browser: Fix setting browser related values to customData [#13026]
- Passkeys: Add publicKey to register response [#12757]
- Fix main entry URL validation when using placeholders [#12964]
- Fix minor font and theme issues [#12814]
- Fix 'Remove' button in Plugin Data being enabled when no row is selected [#12916]
- Sanitize attachment file names before saving [#13114]
- 2.7.11Release 2.7.112025-11-23 · 2025-11-23 23:29 UTC
查看更新说明
Note: The 2.7.11 macOS DMG and AppImage downloads have issues. Please download the 2.7.11-1 builds instead (also below).
Changes
- Add image, HTML, Markdown preview, and text editing support to inline attachment viewer [#12085, #12244, #12654]
- Add database merge confirmation dialog [#10173]
- Add option to auto-generate a password for new entries [#12593]
- Add support for group sync in KeeShare [#11593]
- Add {UUID} placeholder for use in references [#12511]
- Add “Wait for Enter” search option [#12263]
- Add keyboard shortcut to “Jump to Group” from search results [#12225]
- Add predefined search for TOTP entries [#12199]
- Add confirmation when closing database via ESC key [#11963]
- Add support for escaping placeholder expressions [#11904]
- Reduce tab indentation width in notes fields [#11919]
- Cap default Argon2 parallelism when creating a new database [#11853]
- Database lock after inactivity now enabled by default and set to 900 seconds [#12689, #12609]
- Copying TOTP now opens setup dialog if none is configured for entry [#12584]
- Make double click action configurable [#12322]
- Remove unused “Last Accessed” from GUI [#12602]
- Auto-Type: Add more granular confirmation settings [#12370]
- Auto-Type: Add URL typing preset and add copy options to menu [#12341]
- Browser: Do not allow sites automatically if entry added from browser extension [#12413]
- Browser: Add options to restrict exposed groups [#9852, #12119]
- Bitwarden Import: Add support for timestamps and password history [#12588]
- macOS: Add Liquid Glass icon [#12642]
- macOS: Remove theme-based menubar icon toggle [#12685]
- macOS: Add Window and Help menus [#12357]
- Windows: Add option to add KeePassXC to PATH during installation [#12171]
Fixes
- Fix window geometry not being restored properly when KeePassXC starts in tray [#12683]
- Fix potential database truncation when using direct write save method with YubiKeys [#11841]
- Fix issue with database backup saving [#11874]
- Fix UI lockups during startup with multiple tabs [#12053]
- Fix keyboard shortcuts when menubar is hidden [#12431]
- Fix clipboard being cleared on exit even if no password was copied [#12603]
- Fix single-instance detection when username contains invalid filename characters [#12559]
- Fix “Search Wait for Enter” setting not being save [#12614]
- Fix hotkey accelerators not being escaped properly on database tabs [#12630]
- Fix confusing error if user cancels out of key file edit dialog [#12639]
- Fix issues with saved searches and “Press Enter to Search” option [#12314]
- Fix URL wildcard matching [#12257]
- Fix TOTP visibility on unlock and settings change [#12220]
- Fix KeeShare entries with reference attributes not updating [#11809]
- Fix sort order not being maintained when toggling filters in database reports [#11849]
- Fix several UI font and layout issues [#11967, #12102]
- Prevent mouse wheel scroll on edit username field [#12398]
- Improve base translation consistency [#12432]
- Improve inactivity timer [#12246]
- Documentation improvements [#12373, #12506]
- Browser: Fix ordering of clientDataJSON in Passkey response object [#12120]
- Browser: Fix URL matching for additional URLs [#12196]
- Browser: Fix group settings inheritance [#12368]
- Browser: Allow read-only native messaging config files [#12236]
- Browser: Optimise entry iteration in browser access control dialog [#11817]
- Browser: Fix “Do not ask permission for HTTP Basic Auth” option [#11871]
- Browser: Fix native messaging path for Tor Browser launcher on Linux [#12005]
- Auto-Type: Fix empty window behaviour [#12622]
- Auto-Type: Take delays into account when typing TOTP [#12691]
- SSH Agent: Fix out-of-memory crash with malformed SSH keys [#12606]
- CSV Import: Fix modified and creation time import [#12379]
- CSV Import: Fix duplication of root groups on import [#12240]
- Proton Pass Import: Fix email addresses not being imported w
- 2.7.10Release 2.7.102025-03-02 · 2025-03-02 22:38 UTC
查看更新说明
Check out our updated User Guide --> https://keepassxc.org/docs/KeePassXC_UserGuide
Changes
- Allow adjusting application font size [#11567]
- Add Proton Pass importer [#11197]
- Support KeePass2 TOTP settings [#11229]
- Add New/Preview Entry Attachments dialog and functionality [#11637, #11699, #11650]
- Add database name, color, and icon options for unlock view [#10819, #11725]
- Show entry background color as column [#6798]
- Use icons for password strength [#9844]
- Add "Group Full Path" column in entry view [#10278]
- Passphrase "MIXED case" Type [#11255]
- Allow deleting extension plugin data from Browser Statistics [#11218]
- Add --minimized option to keepassxc [#11693]
- Implement T-CONV and T-REPLACE-RX entry placeholders [#11453]
- Option to disable opening browser when URL field double-clicked [#11332]
- Overhaul action states and add icons to toolbar [#11047]
- Show character count in password generator dialog [#10940]
- Add ability to expire entries from context menu [#8731]
- Add copy field shortcuts to Auto-Type select dialog [#11518]
- Passkeys: Add support for selecting group on creation [#11260]
- Browser: Refactor Access Control Dialog [#9607]
- Browser: Add support for URL wildcards and exact URL [#9835, #11752]
- Browser: Allow groups to restrict by browser integration key [#9852]
- CLI: Add
-ddry-run shortcut to merge command [#11192] - CLI: HTML export [#11590]
- macOS: Add option to disable database lock when switching user [#9707]
- SSH Agent: Implement feature to clear all identities [#10649]
Fixes
- Major enhancements to documentation [#11745, #10875]
- Various UI and style fixes [#11535, #11672, #11511, #11445, #11426, #11273, #11455, #11321, #11594, #11539, #11351, #11354, #10748, #11602, #11303, #11291, #10091, #9417]
- Various improvements to tags [#11676, #11652, #11625]
- Reset splitter sizes on database unlock [#11014]
- Remember sort order in Auto-type popup dialog [#9508]
- Fix database password clearing when modifying key file / hardware key [#11001]
- Fix issues with reloading and handling of externally modified db file [#10612]
- Support passkeys with Bitwarden import [#11401]
- Fix various quirks with CSV import [#11787]
- Show Auto-Type select dialog even if window title is empty [#11603]
- Refactor hardware key code to avoid deadlock [#11703, #10872]
- Show a clear error if hardware key is found slots are not configured [#11609]
- Fix signal/slot disconnect when opening import wizard [#11039]
- Fix setting window title as modified [#11542]
- Fix assert hit when viewing entry history [#11413]
- Fix multiple crashes on Linux [#11513]
- Fix backup file path time substitution [#10834]
- Prevent long-running threads from deadlocking the program with only 1 CPU [#11155]
- Hide the menubar when menus lose focus (if toggled off) [#11355, #11605]
- CLI: Restore the original codepage on windows [#11470]
- Passkeys: Various fixes [#10934, #10951]
- Browser: Fix cancel with database unlock dialog [#11435]
- Browser: Resolve references in Access Confirm dialog [#11055]
- SSH Agent: Add timeout to streams to prevent deadlock [#11290]
- macOS: Replace legacy code for screen recording permissions [#11428]
- macOS: Implement Secure Input Mode [#11623]
- macOS: Fix showing ambigious name in settings [#11373]
- macOS: Fix copy-to-clipboard shortcut in entry preview widget [#10966]
- Linux: Prevent multiple lock requests [#11306]
- Snap: Prevent need for snap helper script to configure browser extension [#10924]
- Windows: Detect outdated VC Redist with MSI installer [#11469]
- Windows: Additional exclusion fields for clipboard [#11521]
用户点评
登录用户的真实使用记录，可按版本和硬件筛选共 0 条
还没有人点评。第一个说出真实体验的人最有价值。
KeePassXC
KeePassXC is a modern, secure, and open-source password manager that stores and manages your most sensitive information. You can run KeePassXC on Windows, macOS, and Linux systems. KeePassXC is for people with extremely high demands of secure personal data management. It saves many different types of information, such as usernames, passwords, URLs, attachments, and notes in an offline, encrypted file that can be stored in any location, including private and public cloud solutions. For easy identification and management, user-defined titles and icons can be specified for entries. In addition, entries are sorted into customizable groups. An integrated search function allows you to use advanced patterns to easily find any entry in your database. A customizable, fast, and easy-to-use password generator utility allows you to create passwords with any combination of characters or easy to remember passphrases.
Quick Start
The QuickStart Guide gets you started using KeePassXC on your Windows, macOS, or Linux computer using pre-compiled binaries from the downloads page. Additionally, individual Linux distributions may ship their own versions, so please check your distribution's package list to see if KeePassXC is available. Detailed documentation is available in the User Guide.
Features List
KeePassXC has numerous features for novice and power users alike. Our goal is to create an application that can be used by anyone while still offering advanced features to those that need them.
Core Features
- Create, open, and save databases in the KDBX format (KeePass-compatible with KDBX4 and KDBX3)
- All information is encrypted at rest and never exposed outside the program
- Store sensitive information in entries that are organized by groups
- Password generator
- Search for entries
- TOTP storage and generation
- YubiKey/OnlyKey challenge-response support
- Auto-Type passwords into applications
- Browser integration with Google Chrome, Mozilla Firefox, Microsoft Edge, Chromium, Vivaldi, Brave, and Tor-Browser
- Support for passkeys using the browser integration
- Entry icon download
- Import databases from CSV, 1Password, Bitwarden, Proton Pass, and KeePass1 formats
Advanced
- Database reports (password health, HIBP, and statistics)
- Database export to CSV, XML, and HTML formats
- TOTP storage and generation
- Field references between entries
- File attachments and custom attributes
- Entry history and data restoration
- Command line interface (keepassxc-cli)
- SSH Agent integration
- FreeDesktop.org Secret Service (replace Gnome keyring, etc.)
- Additional encryption choices: Twofish and ChaCha20
For a full list of changes, read the CHANGELOG document.
For a full list of keyboard shortcuts, see KeyboardShortcuts.adoc
Building KeePassXC
Detailed instructions are available in the Build and Install page and in the Wiki.
Contributing
We are always looking for suggestions on how to improve KeePassXC. If you find any bugs or have an idea for a new feature, please let us know by opening a report in the issue tracker on GitHub, or join us on Matrix community channel or Matrix development channel, or on IRC in Libera.Chat channels #keepassxc and #keepassxc-dev.
You may directly contribute your own code by submitting a pull request. Please read the CONTRIBUTING document for further information.
Contributors are required to adhere to the project's Code of Conduct.
Generative AI
Generative AI is fast becoming a first-party feature in most development environments, including GitHub itself. If the majority of a code submission is made using Generative AI (e.g., agent-based or vibe coding) then we will document that in the pull request. All code submissions go through a rigorous review process regardless of the development workflow or submitter.
License
KeePassXC code is licensed under GPL-2 or GPL-3. Additional licensing for third-party files is detailed in COPYING.