KeePass

Going back in time when the Internet was much smaller - the Windows password login was the only password I needed between 1996-1999. If I remember well, I created my first email address back in 1999. No big deal - two passwords and back then the Internet was so expensive and a luxury.

What security? What kind of complexity? Most passwords were "123456" or "john123"

However, as soon as I switched from spending more and more time on the Internet and it was back in 2001 - I kept creating more users or emails. At first, I wrote them down on sticky notes, saved in text files, I was sending them from one email address to another (pretty stupid nowadays but I had no secrets or sensitive informations back in 2003).

Back then, there were a lot of viruses hanging around and I've learned a hard lesson getting infected with a version of Virut virus back in 2005 and I've lost all of my data in one night. I was using an anti-virus but unfortunately not a great one.

This was a turning point for me. I started to research and read the best security practices. That's how I found out about password managers.

I think I found both KeePass and Password Safe and I used them both. I used one in VMWare (a popular virtual machine) and another one on my desktop. I saved one database on an external HDD along with the encrypted virtual machine which contained, obviously another database. The logic behind using two password managers was that I became a paranoid.

One day I've read an article about an infected machine that was running with a fully updated anti-virus. It made me sick. No antivirus could be trusted and a password manager among other things became a priority.

But, this is where KeePass comes in - and please don't run away - using this password manager is easier than you might think and has some great benefits.

So, KeePass is a free, open source password manager created by Dominik Reichl. To make it as simple as possible: you store all your passwords in one encrypted database file that you control completely. There is NO cloud service, NO subscription, NO company watching your data. You just need to remember one master password to unlock everything else.

I repeat, just make sure that you always remember the master password which gives you control over all the other passwords! Don't forget this master password!

KeePass Features

Feature	Description
AES-256 encryption	You get the same encryption that governments use for their secret or classified documents - your get the highest level of protection
Password generator	You can create random passwords with custom length and characters - don't use simple passwords that are easy to guess or brute-forced easily such as "123456" or "mama2025" etc.
Auto-Type	You can press Ctrl + Alt + A, and KeePass will type your username and password automatically into any window - including the annoying pages that split the login into two steps - that require the username first, wait and then you have to type the password on another page - more info on how to deal with such pages is available here - https://keepass.info/help/kb/faq.html#at2step
Key file authentication	You can use a file on your USB drive as a second factor - even if someone knows your master password, they need this file too, I used Yubikey with KeePass in the past - you get some great info right here: https://www.yubico.com/works-with-yubikey/catalog/keepass/
Database groups	You can organize your passwords into folders and subfolders - such as one for work, another one for personal stuff
Entry attachments	You can attach files and documents to password entries - great if you want to store software licences or recovery codes or anything similar
Import/export	You can import from a dozen of formats including browser exports, and export to HTML, XML, CSV or TXT
Plugin system	You can extend KeePass with its community plugins for browser integration, cloud sync, and more, I think it has the most plugins available compared to other password managers.
Portable mode	You can run KeePass from a USB stick without installing anything - this is great and it means that you can take your passwords anywhere

KeePass Interface

Okay, I have to be honest - KeePass looks like something from my age and its great for me and bad for some young people who cares about the design more than the functionality of a software. Porsche 911 design didn't changed much but its still a great car. I will just say it means you'll figure it out in about 2 minutes. There is no complicated stuff to learn.

You open KeePass and see your groups on the left, entries on the right. You create a new entry by clicking the "key" icon (or CTRL+I). Fill in the title, username, password, URL. If you need a strong password, just Click generate, set the length and characters, and that's it - done. The quality bar shows you how strong it is.

The Auto-Type (or CTRL+V) feature is one of my favorite features. You're on a website login page, you press Ctrl+Alt+A, and KeePass finds the matching entry and types everything. You can customise the sequence - maybe the site needs the password first, or has extra fields like a PIN. You set it up once and KeePass will remember.

Important: For this to work, the entry title must be a substring of the current windows title, and the cursor must be in the correct field for the typed info.

Example:

Create an Entry in your KeePass DB (database) with a title that will match the website or the app you want to log into (for example, "MyPersonalEmail" for mail.yahoo.com).

Open the web page or the app where you want to enter your credentials.

Please make sure the Cursor is in the right field, usually the username or password box, on the page or in the app.

Press "Ctrl+Alt+A."

Now, KeePass will automatically type: your username and password in the correct field.

Your database will stay on your computer - that's very important. It allows you to decide where to save it. You back it up yourself (for example I use an SSD)

There is no automatic cloud saving unless you set it up using its plugins (if you prefer this way).

So, in cloud or on an external device? SSD/DVD etc

You can call me an old school grandpa and it sounds like extra work but if you go this route it means you control everything. No company can access your passwords. No subscription that expires. No account that can be hacked. Again, I am talking about the offline part. Just make sure you save it on multiple devices and perhaps more than one location if you have important passwords there.

The password generator uses proper randomness - you can move your mouse and type random keys to add entropy.

You can save profiles - one for banking with 20 characters and symbols, another one for forums with 12 letters and numbers. You just need to apply the right profile when you create accounts.

Lock the workspace (CTRL+L)

Don't forget to lock the workspace when you step away. KeePass will close the database, removing everything from memory. Even if someone has access to your computer, they cannot read passwords from RAM. Unlock it later and KeePass will reopen exactly where you left off.

Again, plugins fix what's missing. For example KeeAnywhere adds cloud storage support (not my thing but others love it). KeePassRPC enables browser autofill. If you want to add a new plugin, just download a plugin file, drop it in the KeePass folder, then restart. That's it.

KeePass Alternatives

Name	Free or Paid	The main difference
Bitwarden	Free with paid options	You get cloud sync by default, modern interface, browser extensions built-in - but your data is there - on their servers/cloud - again not a bad thing if you use and like the newer technologies
KeePassXC	Free	You get maybe a better cross-platform support, native Mac/Linux experience, nice interface - basically KeePass reimagined
1Password	Paid subscription	You get a nice polished design, family sharing, travel mode - but it will cost you around $3-5 per month
Dashlane	Paid subscription	You get VPN included, dark web monitoring, automatic password changer - but again it is not free and around $5+ per month
Password Safe	Free	You get Bruce Schneier's original vision simpler alternative and improved by Rony Shapiro - fewer features but rock solid and easy

Final Conclusion

KeePass will give you complete control over your passwords. The best thing in my opinion is that you keep them on your device. You decide how to organise them, where to store them, how to back them up. Keepass will never spy on your data. It will never shows ads or ask for money.

Yes, some will say that the interface is not so modern. But you get unbreakable encryption, unlimited customisation, and zero tracking. You own your data and that's a big thing - I really don't know if people pay attention to this.

If you want something that works, it has been developed for over two decades and keeps your passwords secure without any monthly fees KeePass is fantastic. Please consider a donation if you like it!

• Improved workaround for focus bug after returning from a secure desktop.
• Improved initial application of the 'Always on Top' option.
• Improved dialog management.
• Improved HTML viewer initialization.
• Reduced flickering in the 'Print' dialog.
• The option 'Unhide empty data' (in 'Tools' -> 'Options' -> tab 'Advanced') is now turned on by default.
• Improved filtering in the field reference creation dialog.
• Improved disposal of process objects.
• Improved performance of the initial key modifier release when performing auto-type on Unix-like systems with XDoTool.
• File transactions where the base file does not exist yet and is accessed via a URL do not fail anymore.
• Various code optimizations.
• Minor other improvements.