KeePassium

What KeePassium does

KeePassium brings KeePass databases to iPhone, iPad and Mac. It reads and writes every current KeePass format (kdb, kdbx3 and kdbx4), so the same file can be shared with KeePassXC on a PC or Keepass2Android on an Android phone. Passwords are filled through Apple’s system Password AutoFill, which places a “Passwords” button above the keyboard in apps and Safari.

The file can live anywhere iOS can reach. KeePassium works with storage that appears in the Files app, such as iCloud Drive or Box, and has direct connections to Dropbox, Google Drive and OneDrive and to WebDAV servers such as Nextcloud, ownCloud and QNAP NAS devices. Its support site keeps a list of tested providers with notes on how reliably each one works. Each entry keeps its history, deleted items go to a recycle bin, and the app copies the database before saving.

Security and audits

KeePassium supports AES, ChaCha20, Salsa20, Twofish and Argon2, using Apple’s CommonCrypto library for AES and SHA. Protection is layered: an App Lock (a passcode, or Face ID or Touch ID) hides all app screens, and a Database Lock closes open databases after a timeout and clears remembered master keys from the keychain.

It is one of the few KeePass apps with a published audit. Cure53 reviewed the full source for 10 days in October 2024. The most sensitive finding was that weak master passwords were accepted without a warning, and the project says all issues were fixed in the next update. KeePassium also holds a CASA Tier 2 assessment from July 2024, which Google requires for apps using the Google Drive API.

Self-hosting KeePassium

There is no server. You install the app from the App Store or join the TestFlight beta, and you can build it yourself in Xcode. The README notes that people may build their own premium version from the source for free, as long as they do not ask for premium support. For managed devices, the documentation covers Managed AppConfig (MDM) and Microsoft Intune.

Hosted version

None. Your database stays in storage you choose.

Free and premium

The free version covers core password management with no ads. A premium subscription, or a “rent-to-own” license, adds multiple databases with copying between them, YubiKey challenge-response (compatible with KeePassXC and Keepass2Android), field references, one-tap Quick AutoFill, direct connections to business accounts such as OneDrive for Business and SharePoint, and priority support.

Limitations

KeePassium runs only on Apple devices, and some features many people want, such as a hardware key or a second database, are paid. Because of the App Store’s terms, the project cannot accept code contributions, so development depends on its own small team. Sync quality depends on the storage provider; the README says Nextcloud through the Files app works “with hiccups”, which is why the direct WebDAV connection exists.

Who it suits

KeePassium suits iPhone, iPad and Mac users who keep a KeePass database and want native AutoFill and an audited app. It pairs with KeePassXC on Windows or Linux.