KeePassXC

KeePassXC answers the same question as KeePass — passwords in an encrypted KDBX file on your own device, no account, no sync server, no company holding anything — and adds the one thing KeePass cannot show: an independent examination.

The French cybersecurity agency ANSSI granted KeePassXC a CSPN security visa for version 2.7.9 on Windows 10, valid from 17 November 2025 to 17 November 2028.

A CSPN visa is a state-run evaluation with a defined scope and a published result, which is a different kind of assurance from "the source is on GitHub, look for yourself". For a vault with no provider to audit, the client is the whole security story, and this is the only offline manager in this directory where someone outside the project has audited it.

It is a community project rather than a company. The legal contact given on keepassxc.org/team is Janek Bevendorff in Weimar, Germany, the same arrangement as KeePass with Dominik Reichl, and the copyright line dates the team to 2016. The licence is GPL-2 or GPL-3, the project publishes native builds for Windows, macOS and Linux, and the feature set covers Auto-Type and passkeys alongside the vault. It is free, with nothing to upgrade to.

What you give up is everything a vendor provides. There is no support contract, no service level and no one to escalate to; there is no KeePassXC cloud, so sync and backup are your own arrangements through whatever storage you already trust.

Team sharing is as awkward here as in KeePass — Psono and Passbolt exist for that. And read the certificate for what it says: the visa covers version 2.7.9 on Windows 10, not every later build on every platform.

What KeePassXC does well

• ANSSI CSPN security visa for version 2.7.9, running 17 November 2025 to 17 November 2028
• An encrypted KDBX file on your own device — no KeePassXC cloud to breach
• Open source under GPL-2 or GPL-3, free with no paid tier
• Native builds for Windows, macOS and Linux from the project itself
• Auto-Type and passkeys in an offline vault

Where KeePassXC falls short

• No company behind it: no support contract and no service level
• You arrange sync and backup yourself, and a lost file without a backup is gone
• The CSPN visa covers one version on Windows 10, not every build on every platform
• Team sharing is awkward — Psono or Passbolt fit that better

Standout feature. A state-certified offline vault: KeePassXC is the only manager here with no service at all whose client has been examined by an outside body, under visa ANSSI-CSPN-2025/16.