OpenSourcePicks

Open source alternatives to popular software, with live GitHub data

GitHub stats refreshed every day

KeeWeb

KeePass-compatible password manager that runs in the browser or as a desktop app

Visit KeeWebGitHubDocumentation

Main features

  • Web app plus desktop apps for Windows, macOS and Linux
  • Opens and creates KeePass KDBX files
  • Files stored locally or on Dropbox, Google Drive, OneDrive or WebDAV
  • Several files open at once with one search across all of them
  • Offline copies of cloud files, merged when back online
  • Entry history with rollback to earlier states
  • Tags, color marks, custom icons and attachments
  • YubiKey protection for database files
  • KeeWeb Connect extension for Chrome, Firefox, Edge and Safari
  • Auto-type and signed automatic updates on desktop

What KeeWeb does

KeeWeb is a client for KeePass databases. It opens the same KDBX file that KeePassXC, KeePass and Android apps such as KeePassDX use, and it can create new ones. What sets it apart is that one code base runs both in a browser and as a desktop app for Windows, macOS and Linux, and the web version needs no installation. You can keep several files open, search across all of them at once, mark entries with colors and tags, attach files and roll an entry back through its history.

Files can live on the local disk or with Dropbox, Google Drive, OneDrive or any WebDAV server, such as Nextcloud. KeeWeb keeps an offline copy of cloud files and merges changes when it reconnects. On the desktop, the KeeWeb Connect extension for Chrome, Firefox, Edge and Safari fills logins in the browser, and auto-type covers other apps.

Security and encryption

All data stays in the KDBX file, encrypted and unlocked with a master password, a key file or both, and optionally a YubiKey. KeeWeb has no account or server of its own: a cloud provider only stores the encrypted file. The FAQ says the app sends nothing over the network unless you ask it to, for example to sync, and contains no analytics or ads. Lost passwords or key files cannot be recovered.

According to the FAQ, Hackmanit ran a penetration test of KeeWeb in April and May 2020 through its pro bono program, and the issues it found were fixed in version 1.14.2. Desktop updates are delivered over HTTPS and checked against a signature, and plugins must be signed unless you explicitly allow third-party ones.

Self-hosting KeeWeb

The web app is a single HTML file with an optional service worker for offline use, so self-hosting means serving static files from the gh-pages branch with nginx, Apache or any other web server. There is also an official Docker image on Docker Hub and the GitHub Container Registry. A public copy should sit behind HTTPS. WebDAV storage needs CORS enabled on the WebDAV server, and using Dropbox from a self-hosted copy requires registering your own Dropbox app.

Hosted version

The developers publish the web app at app.keeweb.info, but it is only the client. There is no KeeWeb account or storage service; your file stays on your device or with the storage provider you pick.

Limitations

Development stalled for several years: the release notes go from v1.18.7 in July 2021 to v1.18.8 in April 2026, after which releases resumed. The desktop app is still built on Electron 13 according to its package.json, an old major version. There is no native iOS app; the wiki suggests adding the web app to the home screen, which gives no AutoFill or Face ID. Passkey support is not documented. Only KDBX (KeePass 2) files are supported, not the older KDB format.

Who it suits

KeeWeb suits people who already keep a KeePass file and want to open it from any browser, including on computers where they cannot install software, or who want a self-hosted web front end for a file kept on Nextcloud. For a more actively developed desktop client, look at KeePassXC; on Android, Keepass2Android and KeePassDX, and on iPhone, KeePassium.

License details

MIT. GitHub does not detect the license automatically, but the LICENSE file is the MIT text; dependency licenses are listed in DEPS-LICENSE.

Technical details

Built with

  • JavaScript
  • Electron

GitHub topics

  • electron
  • javascript
  • keepass
  • keeweb
  • password
  • password-manager
  • security

Reviewed by the OpenSourcePicks editors from the project's repository and documentation. Something out of date? Tell us.