sodcalculator

10 Tech How-To

KeePass Setup Guide: Store Passwords Safely

Guide 10-16401 · Updated · Step by step

This guide walks you through setting up KeePass, a free and open-source password manager that stores your passwords in an encrypted database on your own device. You’ll learn how to install it, create a master password, organize entries, and use its key features. No prior experience is needed, and everything is done locally on your computer.

What You’ll Need

  • A computer running Windows, macOS, or Linux (KeePass 2.x is recommended for all platforms).
  • Administrator rights to install software (if you’re not allowed to install, you can use the portable version).
  • A strong master password that you can remember—this is the only password you’ll need to remember.

Step-by-Step

  1. Download KeePass – Go to the official KeePass website (keepass.info) and download the latest version of KeePass 2.x for your operating system. For Windows, choose the installer or the portable ZIP. For macOS, download the Mono-based version. For Linux, use your package manager (e.g., sudo apt install keepass2).
  2. Install or extract KeePass – If you downloaded the installer, run it and follow the prompts. If you downloaded the portable ZIP, extract it to a folder of your choice (e.g., C:\KeePass). No installation is required for the portable version.
  3. Launch KeePass – Open the KeePass executable (KeePass.exe on Windows). The first time you run it, you’ll see a welcome screen. Click OK to proceed.
  4. Create a new database – Go to File > New (or press Ctrl+N). A dialog will ask you to name the database file and choose its location. Pick a safe location (e.g., your Documents folder or a USB drive). Click Save.
  5. Set a master password – After saving, you’ll be prompted to create a master password. Enter a long, unique passphrase (e.g., a sentence with numbers and symbols). You can also use a key file for extra security, but a strong password alone is fine for most users. Click OK.
  6. Configure database settings – KeePass will ask about encryption settings. The defaults (AES-256, 600,000 iterations) are secure. You can keep them or increase iterations for more security. Click OK to create the database.
  7. Explore the interface – The main window shows a tree of groups on the left (e.g., General, Windows, Network) and entries on the right. The default database includes a few sample entries—you can delete them later.
  8. Add a new entry – Right-click on a group (e.g., General) and select Add Entry (or press Ctrl+I). Fill in the Title (e.g., “Email”), User name, and Password. You can click the dice icon next to the password field to generate a random strong password. Click OK to save.
  9. Save your database – Press Ctrl+S to save. KeePass will ask for your master password again to confirm—enter it and click OK. Always save after adding or editing entries.
  10. Use auto-type – Open a website’s login page, click on the username field, then switch to KeePass, select the entry, and press Ctrl+V (or right-click > Perform Auto-Type). KeePass will type your username and password automatically. You may need to adjust the auto-type sequence if the website has extra fields.
  11. Copy passwords safely – To copy a password to the clipboard, right-click the entry and select Copy Password. KeePass will clear the clipboard after 12 seconds by default (configurable in Tools > Options > Security).
  12. Back up your database – Copy the .kdbx file to a secure location (external drive, cloud storage) regularly. Without a backup, losing the file means losing all passwords.

Common Mistakes

  • Forgetting the master password – There is no recovery. If you lose it, your database is unrecoverable. Choose a passphrase you can remember, and consider writing it down in a safe place.
  • Using a weak master password – A short or common password defeats the purpose. Use at least 12 characters, mixing upper/lowercase, numbers, and symbols.
  • Not saving after changes – If you close KeePass without saving, your new entries are lost. Get into the habit of pressing Ctrl+S after each edit.
  • Storing the database with the key file – If you use a key file, keep it separate from the database. If you store both together, an attacker who gets the file also gets the key.
  • Ignoring updates – KeePass releases security updates. Enable automatic update checks in Tools > Options > Advanced.

Tips

  • Use groups to organize – Create groups like “Work”, “Personal”, “Banking” to keep entries tidy. Right-click on the root group to add new groups.
  • Generate strong passwords – Use KeePass’s built-in generator (click the key icon). Set length to 16+ characters and enable all character sets.
  • Add notes and attachments – Each entry can store notes, URLs, and even file attachments (e.g., a photo of a recovery code). Use the Advanced tab when editing an entry.
  • Use the search feature – Press Ctrl+F to quickly find entries by title, username, or URL.
  • Enable auto-lock – In Tools > Options > Security, set KeePass to lock after a few minutes of inactivity. This protects your data if you step away.
  • Consider a browser extension – KeePass doesn’t have an official extension, but community plugins like KeePassXC-Browser (for KeePassXC) or KeePassHttp can integrate with browsers. Use them cautiously and only from trusted sources.

Troubleshooting

  • Can’t open the database – If KeePass says “Invalid master password”, you’re typing it wrong. Check Caps Lock and keyboard layout. If you have a key file, ensure it’s selected.
  • Auto-type doesn’t work – Some websites use JavaScript or have extra fields. Try pressing Ctrl+Alt+A to perform auto-type globally, or manually copy the username and password. You can also edit the auto-type sequence in the entry’s Auto-Type tab.
  • KeePass won’t start on macOS – The Mono version requires Mono runtime. Install the latest Mono from mono-project.com. Alternatively, use KeePassXC, a native macOS port.
  • Forgot the master password – Unfortunately, there is no way to recover it. If you have a backup of the database from before you changed the password, restore that backup. Otherwise, you’ll need to start a new database.
  • Database corrupted – If KeePass says the file is corrupted, try opening the last backup (if you have one). KeePass also creates .kdbx.bak files if you enable backups in Tools > Options > Backups.
  • Clipboard not clearing – If your password stays in the clipboard, check the clipboard timeout setting. Go to Tools > Options > Security and ensure “Clear clipboard after” is checked.

Frequently Asked Questions

Is KeePass really free?

Yes, KeePass is free and open-source. You can use it for personal or commercial purposes without paying anything.

Can I use KeePass on my phone?

There are third-party apps like KeePassDX (Android) and KeePassium (iOS) that can open .kdbx files. Sync the database file via cloud storage or a USB connection.

What happens if I lose my master password?

There is no recovery mechanism. Your data is encrypted with that password, so it’s unrecoverable. Always have a backup of the database and consider writing down the master password in a secure location.

Is it safe to store my database in the cloud?

Yes, as long as you use a strong master password. The database is encrypted, so even if someone obtains the file, they can’t read it without the password.

Can I import passwords from my browser?

Yes. Export your browser passwords to a CSV file (using browser settings), then in KeePass go to File > Import and select the CSV. Be sure to delete the CSV after importing.

Does KeePass have a password generator?

Yes, built-in. When editing an entry, click the key icon next to the password field to open the generator. You can customize length and character sets.

Related

General steps for current mainstream versions; menus can differ by device and version. See the disclaimer or report an error.

More in this bed

The whole Tech How-To bed →