KeePassDX is a free, open-source and ad-free password and passkey manager for Android that keeps credentials in a single encrypted local database file in KeePass format and fills login forms through autofill and its own keyboard.

What it is

KeePassDX is a local password and passkey manager for Android, written in native languages (Kotlin, Java, JNI and C) and released under the GPL-3.0 licence. It allows a user to put all passwords into one database locked by a master key and/or a keyfile, so only one master password or a keyfile selection is needed to unlock the whole database. It lives in the KeePass ecosystem: it edits encrypted data in a single file in KeePass format, supports the .kdb and .kdbx container formats across versions 1 to 4, and uses AES, Twofish, ChaCha20 and Argon2 algorithms. The project states it is open source and ad-free, and that no security features are reserved for a specific version.

The concrete problem it solves is manual password recall and password reuse. Using different passwords for each account is difficult to remember, and using one password everywhere means that a single breach at one site can grant access to an email account or other services without the user noticing. KeePassDX replaces the alternative of remembering an endless list of passwords manually by holding them in one encrypted file, and it replaces the reuse of a single credential by keeping each account's password distinct and encrypted at rest. Because it is compatible with the majority of alternative programs such as KeePass, KeePassXC and KeeWeb, the database remains portable across clients.

Key capabilities

• Passkeys for authentication and local storage of private keys.
• Biometric recognition for fast unlocking, including fingerprint and face unlock.
• One-Time Password management with HOTP and TOTP for two-factor authentication.
• Autofill for form filling with passwords, plus the Magikeyboard for filling any field.
• Creation of encrypted database files, with support for .kdb and .kdbx files (version 1 to 4) using AES, Twofish, ChaCha20 and Argon2.
• Organisation of credentials by entry and in group trees, with dynamic templates for each entry type, a history for each entry, and quick copying of URI/URL fields.
• Material design with themes, alongside precise management of settings.

Who uses it and how

• Android users who hold many accounts and want distinct passwords per account without memorising them.
• Existing KeePass, KeePassXC or KeeWeb users who need a compatible Android client for the same database files.
• Users who keep two-factor codes alongside passwords in one vault through HOTP and TOTP.
• Users who fill credentials into Android apps and browsers via Autofill and the Magikeyboard instead of copying and pasting.
• Privacy-focused users who want local storage of credentials, no advertising and no account, with source available to check whether the encryption algorithms are implemented correctly.

Getting started

F-Droid is the recommended installation route, from the package com.kunzisoft.keepass.libre, which the project describes as verifying that all libraries and app code are libre software. A build is also distributed on Google Play as com.kunzisoft.keepass.free.

How it compares

The facts name KeePass, KeePassXC and KeeWeb as compatible alternative programs rather than competitors, and KeePassDX is built to open the same database files, so it functions as the Android client inside an existing KeePass workflow rather than a replacement for those tools. A separate support version, KeePassDX Pro, is obtained by donation and grants optional visual styles only; the project states it does not improve safety and provides no functional advantage, so encryption and data protection are the same for all users.

When to use it — and when not to

Because it is a local Android application, there is no database server, object storage or SMTP service for a self-hoster to operate; the user runs the app and holds the encrypted database file themselves. The project is developed and maintained on a volunteer basis and carried 541 open issues at the time of this record, so fixes and new features depend on contributions and donations rather than a staffed release process. Users who need a desktop client, a browser extension or a managed hosted service should instead look to the KeePass-compatible programs named above; KeePassDX is not the right pick for a non-Android primary device.

apksigner --version

apksigner verify --verbose --print-certs -min-sdk-version 24 KeePassDX-*.apk

Verified using v2 scheme (APK Sign