KeePassXC runs on macOS and Linux and stores credentials in encrypted KDBX database files. You can install it using the package options listed for your operating system, create a database protected by a long, randomized password, and connect a browser through KeePassXC-Browser. (KeePassXC Getting Started guide)

Before you start

You’ll need a Mac or Linux computer. If you want browser integration, have a supported browser installed as well. Choose a long, randomized database password before you begin; losing it can permanently lock you out of the database.

Install KeePassXC on macOS and Linux

Easy Tech Steps demonstrates KeePassXC’s DMG installation and initial database setup on macOS.
  1. Get the installer from KeePassXC’s download page or GitHub Releases. Check its signature against the signature published with the release package, as KeePassXC recommends.
  2. On macOS, choose the DMG installer or Homebrew Cask. To use the DMG, open it and move KeePassXC into place.
  3. On Linux, choose an AppImage, Snap package, or package for your distribution. KeePassXC lists distribution-specific packages as well as those cross-distribution options.

Create and protect a KDBX database

  1. Create a database and enter a name. Add a description if you want one.
  2. Review the encryption settings and set a long, randomized password. KeePassXC’s wizard lets you adjust decryption time: a higher setting increases protection and also makes the database take longer to open.
  3. Save the database with the .kdbx extension. KeePassXC uses this format for its encrypted database files.

A key file is optional. You can select one as an additional authentication factor when unlocking the database, but keep the database password somewhere you can recover it: losing that password can mean permanent loss of access.

Connect KeePassXC-Browser

  1. Install the KeePassXC-Browser extension in your browser. The guide lists Google Chrome, Vivaldi, Brave, Firefox, Tor Browser, Microsoft Edge, and Chromium.
  2. Enable Browser Integration in KeePassXC’s settings and select the browser you’re connecting.
  3. Unlock the database, then open or restart the browser.
  4. Click the extension and connect it to KeePassXC.
  5. Approve a unique connection name. Reusing a name in a database overwrites the previous browser connection and can prevent access.

On Linux, KeePassXC’s guide says Flatpak and Snap browser builds are generally unsupported for this integration. It names Ubuntu’s Firefox Snap as an exception. This limitation concerns the browser package, not KeePassXC’s own installation options.

Store the database and keep a recovery copy

KeePassXC says you can store the encrypted KDBX file in a cloud service, including OneDrive, Dropbox, Google Drive, Nextcloud, or Syncthing. It recommends choosing a service with automatic backups or version history, which can help recover a file after accidental deletion or corruption. That storage guidance doesn’t provide a procedure for resolving simultaneous edits from multiple devices.

Check that the setup is ready

  • Confirm that you saved the database as a .kdbx file and can unlock it with your password.
  • In the browser extension, confirm the connection to KeePassXC using its unique name.
  • If the database is cloud-stored, check that your chosen service offers automatic backups or version history.

KeePassXC also lists Auto-Type, a command-line interface, SSH Agent, and FreeDesktop.org Secret Service among its features. Its Auto-Type shortcut is Ctrl+Shift+V; on macOS, substitute Cmd for Ctrl, making the shortcut Cmd+Shift+V.