KeePassXC
free, fully open, and the only one with no server at all — there is no vendor vault for anyone to steal.
structurally immune to the incident that defines this category, at the cost of doing your own syncing — a trade that is obviously right for some people and obviously wrong for others.
there is no keepassxc server. the vault is an encrypted file on your machine, aes-256 in the kdbx format with chacha20 and twofish also available, and nothing is transmitted anywhere because there is nowhere to transmit it to. the lastpass incident — cloud backups exfiltrated from a vendor — cannot happen here in principle.
it is free under gplv3 with no tiers, no upsells and no account. version 2.7.9 holds a cspn security certification from anssi, france's national cybersecurity agency, which is a meaningful independent assessment even if the dedicated audit-history page returned a 404 when we looked.
the description above is ours, condensed from the ranking. pricing moves — check it on the vendor's own page before you rely on it.
- category
- password managers
- pricing
- free
- website
- keepassxc.org
structurally immune to the incident that defines this category, at the cost of doing your own syncing — a trade that is obviously right for some people and obviously wrong for others.
we researched this category against vendors' own pricing pages and licence files. that is where this line comes from — not from the vendor, and not from anything they paid for.
more password managers
Bitwarden
we checked this$19.80/yrthe only one open source top to bottom, audited by a named firm every year since 2018, and the cheapest here.
Proton Pass
we checked this~$23.88/yropen-source clients under gplv3, a fresh 2026 audit, and a server you still have to take on faith.