macOS
brew install --cask keepassxclocal Homebrew cask metadata
cask
Password manager app. Version 2.8.0,2.8.0-1 via Homebrew Cask; verified from local package data.
install
brew install --cask keepassxclocal Homebrew cask metadata
overview
Password manager app
history
KeePassXC is a free, community-driven, cross-platform password manager that stores credentials in encrypted local KDBX database files. It emphasizes user-controlled storage while supporting desktop integration, browser filling, Auto-Type, one-time passwords, SSH-agent use, and command-line access.
KeePassXC is a community-driven fork in the KeePass family, created after a decline in KeePassX development. The XC name reflects its focus on continued, cross-platform maintenance.
The 2.1.0 release in January 2017 established the KeePassXC release line. Version 2.2.0 added a CLI, YubiKey challenge-response, TOTP, Diceware generation, and portable mode. Version 2.3.0 added KDBX 4, Argon2, SSH-agent integration, and the KeePassXC-Browser integration.
KeePassXC became the actively maintained community continuation for KeePassX users after development activity in KeePassX declined; the official FAQ notes that KeePassX later formally ceased development.
The project expanded distribution across Linux, Windows, and macOS, including AppImage and Snap builds and an official Ubuntu PPA. Browser integration, a command-line client, and hardware-token support broadened it beyond a basic desktop password vault.
Users create or open a KDBX database, protect it with a master password and optionally a key file or hardware token, then organize credentials and generate unique passwords. Database files remain at user-selected locations rather than in a fixed credential directory.
Common companion workflows include KeePassXC-Browser for browser filling, Auto-Type for desktop applications, TOTP storage, SSH-agent integration, and keepassxc-cli for scripts or terminal access.
KeePassXC is important to package-oriented users because it keeps password storage local and file-based rather than requiring a hosted account. A KDBX database can be backed up or synchronized with tools chosen by the user and opened by other compatible implementations.
It is also a notable cross-platform Qt security application with GUI, CLI, browser-integration, SSH-agent, Auto-Type, TOTP, and hardware-token workflows packaged across multiple desktop ecosystems.
security posture
No matching local secret-handling manifest was found for keepassxc. Package metadata is still published here so future coverage has a stable package URL.
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
local files
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Config paths the tool may read or write during local use.
~/.config/keepassxc/keepassxc.ini~/.local/state/keepassxc/keepassxc_local.ini~/Library/Application Support/KeePassXC/keepassxc.ini~/Library/Caches/KeePassXC/keepassxc_local.ini%APPDATA%\KeePassXC\keepassxc.ini%LOCALAPPDATA%\KeePassXC\keepassxc_local.iniexecutables
| Command | Kind | Exposure | Note |
|---|---|---|---|
keepassxc-cli | binary | Homebrew cask binary | keepassxc-cli |
freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
https://github.com/keepassxreboot/keepassxc
install metadata
| Package key | cask:keepassxc |
|---|---|
| Version | 2.8.0,2.8.0-1 |
| Package manager | Homebrew Cask |
| Package manager page | https://formulae.brew.sh/cask/keepassxc |
| Homepage | https://keepassxc.org/ |
| Repository | https://github.com/keepassxreboot/keepassxc |
| Upstream docs | https://keepassxc.org/ |
| Source archive | https://github.com/keepassxreboot/keepassxc/releases/download/2.8.0/KeePassXC-2.8.0-1-arm64.dmg |
| SHA-256 | 85f0e75e258ef513f0fc7f5bf470cad0943b7d7e8191b2171f9898ad32e62b9c |
| Bottle | not recorded |
| Homebrew post-install | not defined |
| Service | none declared |
registry facts
| Source Database | Homebrew cask API |
|---|---|
| Tap | homebrew/cask |
| Full Token | keepassxc |
| Names |
|
| Depends On | |
| Conflicts With | |
| Artifacts | |
| Deprecated | no |
| Disabled | no |
source trail
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
View the package source record on GitHub.