KeePass Password Safe

CNET Editors' review

by: CNET staff on July 05, 2011

Here's the thing about passwords: If you can remember them, they're too weak. If you copy them or write them down, you compromise security (plus you'll lose that piece of paper; trust us on this one). Password managers can help you keep your PC secure by making it easy to use strong passwords without committing them to memory or paper. KeePass Password Safe stores passwords in encrypted database files that can only be unlocked by a master password or key file, or both. It's open-source freeware that runs in Windows versions from 98 to 7.

KeePass Password Safe's main interface is a fairly simple, compact dialog with a left-hand list view and a main window displaying Title, User Name, Password, URL, and Notes. We clicked File/New and named and saved a database file in which to store our passwords, which automatically opened the Create Composite Master Key wizard, in which we twice entered our Master password and Key file or provider. Next we were able to configure the settings for our password database on a tabbed properties dialog, including Compression settings, Security levels, and Templates. When we'd finished, our master password showed up in the left-hand panel under General with subheadings of Windows, Network, Internet, eMail, and Homebanking for which we could add and manage Groups of passwords. The next step is to add Entries, which are actual stored passwords, via a tabbed wizard that has many more options than most users will require, such as string fields, file attachments, and even two-channel auto-type obfuscation (look it up). There are several ways to use Entries: you can copy to the Clipboard, drag-and-drop, or open URLs directly from the interface. Saving our database completed the basic setup, though KeePass Password Safe also offers advanced features like TAN entries, command-line options, and plug-ins.

As with any password manager, you'll need to break bad old habits to make it work. Once it's up and running, KeePass Password Safe can help you with that. While it makes it easy to generate strong passwords and save them securely, it's not a set-and-forget tool; it requires some attention, just like your passwords.

Publisher's Description

From Dominik Reichl:

KeePass is a free, open source, light-weight and easy-to-use password manager for Windows and mobile devices. You can store your passwords in highly-encrypted databases, which can only be unlocked with one master password and/or a key file. A database consists of only one file that can be transferred from one computer to another easily. The program supports password groups, in which you can sort your passwords into. You can drag-n-drop passwords into almost any other window. The auto-type feature types your login information into other windows automatically (just press a hot key). Fast copying passwords or user names to the Windows clipboard is possible by just double-clicking on the specific field in the password list.

KeePass can import data from various file formats. The password list can be exported to various formats, including TXT, HTML, XML and CSV files. The password list can of course also be printed (complete database or only current view). Searching and sorting the password database is possible. KeePass ships with a strong random password generator (you can define the possible output characters, length, patterns, rules and restrictions). The program is available in over 40 languages. It has a plugin framework; plugins provide additional functionality like backup features, network features, integration with other applications, etc.; they are available from the KeePass website.

What's new in this version: Version 1.25:

Added option to show the tray icon only if the main window has been sent to the tray.
The caret position in a secure edit control is now preserved when unhiding and hiding the content.
When starting KeePass for the first time, it asks whether to enable the automatic update check or not (if not enabled already).
KeePass now shows an error message when the user accidentally attempts to use a database file as key file.
When holding Alt whil... See all new features