verifier.org

KeePassXC

free, fully open, and the only one with no server at all — there is no vendor vault for anyone to steal.

free#people-who-would-rather-

structurally immune to the incident that defines this category, at the cost of doing your own syncing — a trade that is obviously right for some people and obviously wrong for others.

there is no keepassxc server. the vault is an encrypted file on your machine, aes-256 in the kdbx format with chacha20 and twofish also available, and nothing is transmitted anywhere because there is nowhere to transmit it to. the lastpass incident — cloud backups exfiltrated from a vendor — cannot happen here in principle.

it is free under gplv3 with no tiers, no upsells and no account. version 2.7.9 holds a cspn security certification from anssi, france's national cybersecurity agency, which is a meaningful independent assessment even if the dedicated audit-history page returned a 404 when we looked.

the description above is ours, condensed from the ranking. pricing moves — check it on the vendor's own page before you rely on it.

pricing
free
our verdict

structurally immune to the incident that defines this category, at the cost of doing your own syncing — a trade that is obviously right for some people and obviously wrong for others.

we researched this category against vendors' own pricing pages and licence files. that is where this line comes from — not from the vendor, and not from anything they paid for.

more password managers

Enpass

stores its vault in your own cloud drive, with a one-time licence option

#byo-storage#one-time

Psono

self-hosted manager aimed at teams, open source and audited

#self-hosted#teams

Passbolt

open-source team manager built around per-user gpg keys

#self-hosted#gpg

Bitwarden

we checked this$19.80/yr

the only one open source top to bottom, audited by a named firm every year since 2018, and the cheapest here.

#almost-everyone-it-wins-#on-price#on-the-free-tier-simulta