Kipass

Kipass is a native, offline password manager built on the open KeePass (.kdbx) format. Your vault is a standard encrypted file that lives on your device — no account, no cloud, no telemetry. Nothing touches the network until you switch it on.
Free — and staying free. Breach checks, 2FA codes, attachments, hardware keys, templates and sync are all included, unlocked, at no cost. No premium tier, no ads, no tracking.
SECURITY FIRST
• Vetted cryptography: Argon2id key derivation, authenticated AES-256 or ChaCha20-Poly1305 — tampering is caught before anything is decrypted.
• Unlock with fingerprint/Face unlock, a YubiKey, a key file, or any combination.
• Duress PIN opens a decoy vault. Screenshot blocking. Air-gapped by default.
• Continuously fuzz-tested and security-reviewed, release after release.
EVERY DAY
• System-wide autofill and passkeys (FIDO2/WebAuthn).
• TOTP two-factor codes, including Steam Guard.
• Password health: weak, reused, duplicate, expiring and 2FA-missing entries — all offline. Optional breach check (Have I Been Pwned, opt-in).
• Website favicons, item templates, field references, attachments, Markdown notes.
• Sort by column and keep several vaults open at once.
BRING EVERYTHING OVER
• Import from Bitwarden (incl. encrypted), 1Password (.1pux), Enpass, CSV and KeePass 2 (XML).
• Compare two vaults and merge without losing anything.
SYNC ON YOUR TERMS — OR NOT AT ALL
• Direct Wi-Fi sync between two devices, end-to-end encrypted, no cloud (opt-in).
• Or your own WebDAV server (Nextcloud/ownCloud, opt-in). All off by default.
Works on Android, and the same open format opens on iPhone, iPad and Mac.
Kipass is provided as is, without warranty; keep your own backups. Found a bug or an improvement? Write to frank@kinevia.com.