Introduction
KeeWeb is a free, open-source password manager that works in the browser and as a desktop application on Linux, macOS, and Windows. It is fully compatible with the KeePass kdbx file format, allowing you to open existing KeePass databases without migration. KeeWeb needs no server or cloud account to function; your encrypted vault lives as a local file that you control.
What KeeWeb Does
- Opens and edits KeePass-compatible .kdbx database files with full read-write support
- Runs as a desktop app (Electron) or entirely in the browser with no server required
- Syncs vault files through Dropbox, Google Drive, OneDrive, or any WebDAV server
- Generates strong passwords with configurable length, character sets, and pronounceability
- Auto-fills credentials using browser integration or clipboard with auto-clear
Architecture Overview
KeeWeb is built with JavaScript and uses the kdbxweb library for reading and writing KeePass database files. The encryption layer supports AES-256, ChaCha20, and Argon2 key derivation, matching KeePass 2.x capabilities. The desktop version is packaged with Electron. The web version runs entirely client-side; the kdbx file is decrypted in the browser and never sent to any server. Plugins extend functionality through a sandboxed JavaScript API.
Self-Hosting & Configuration
- Download desktop installers from keeweb.info for Windows, macOS, and Linux
- Self-host the web app by serving the static files from any web server (no backend needed)
- Sync databases via Dropbox, Google Drive, OneDrive, or a WebDAV endpoint
- Install plugins from the built-in plugin gallery for themes, integrations, and generators
- Configure auto-lock timeout, clipboard clear delay, and master password requirements in settings
Key Features
- Fully offline capable: no internet connection required after downloading the app
- Plugin system supports custom themes, cloud storage providers, and OTP generators
- Tags, colors, and custom fields for organizing entries beyond basic username/password
- File attachment support for storing secure documents inside the vault
- Built-in TOTP (Time-based One-Time Password) support for two-factor authentication codes
Comparison with Similar Tools
- KeePassXC — Native C++ desktop app with tighter OS integration; KeeWeb offers a web version and a more modern UI
- Bitwarden — Cloud-first with team sharing features; KeeWeb is file-based with no server dependency
- 1Password — Polished commercial product with Watchtower monitoring; KeeWeb is free and open source
- Vaultwarden — Self-hosted Bitwarden server; KeeWeb requires no server at all
- KeePass — The original Windows-only app; KeeWeb provides the same format on all platforms including browsers
FAQ
Q: Is KeeWeb compatible with existing KeePass databases? A: Yes. KeeWeb reads and writes standard .kdbx files used by KeePass 2.x and KeePassXC.
Q: Can I use KeeWeb without installing anything? A: Yes. Visit app.keeweb.info to use KeeWeb directly in your browser. Your database is decrypted locally and never uploaded.
Q: Does KeeWeb support browser auto-fill? A: KeeWeb can copy credentials to the clipboard with auto-clear. For full auto-fill, use the KeeWeb Connect browser extension or pair with KeePassXC-Browser.
Q: Is the web version secure? A: Yes. All cryptographic operations happen in the browser. The static site only delivers the application code; your vault data never leaves your machine.