KeePass

KeePass at a glance

KeePass is a long-standing, open-source password manager that keeps an encrypted local database — a widely used, self-controlled option. The project ships updates in an unhurried cadence, occasionally with important security fixes.

For admins KeePass is security-critical: it protects credentials at rest, so a stale version or misconfiguration can undermine that protection. Source it from the official site and keep it current. The database format is stable across versions. The real risk lies in the master password/key file and where the database is stored — use a strong master secret, protect the file, and back it up (losing it loses the credentials). Plugins extend KeePass and run with its privileges — vet their origin. Manage the auto-type and trigger features carefully in sensitive environments.