這是歷史版本頁面 — 看 KeePass Password Safe 最新版本
密碼多到記不住?KeePass 免費開源密碼管理器能做什麼
你手上至少有十幾個帳號:Windows 登入、Email、網站會員、FTP、論壇……每個都要密碼,而且最好都不一樣。以前偷懶用同一組,結果某個論壇被駭,連 Email 都被登入,才發現事情大條。現在想好好整理,卻不知道從哪裡開始——用瀏覽器記住密碼是方便,但換電腦、換瀏覽器就全部不見,而且瀏覽器本身也不夠安全。
一般人最常做的就是把密碼寫在記事本或 Excel 裡,但這等於把鑰匙放在門口地墊下。密碼管理器的切入點很簡單:你只需要記住一組主密碼,其他所有密碼都鎖在一個加密的資料庫裡,要用時再解鎖。KeePass 就是這個領域的老牌開源工具,從 2005 年開發到現在,靠的是社群信任和可審查的原始碼,而不是華麗的介面。
01KeePass 是什麼?跟一般記密碼的軟體有什麼不同?
KeePass 是一套開源密碼管理器,把所有的帳號密碼集中存放在一個加密資料庫裡,用一組主密碼或金鑰檔案解鎖。跟瀏覽器內建記密碼功能不同,它的資料庫是用 AES 和 Twofish 加密,而且原始碼公開,任何人都可以檢查加密有沒有實作正確。免費、無廣告,也不需要註冊帳號。
02密碼存在哪裡?會不會被偷?
所有密碼存在一個以主密碼或金鑰檔案鎖住的資料庫檔案裡,檔案本身用 AES 和 Twofish 加密。沒有主密碼或金鑰檔案,就無法開啟內容。你可以把這個檔案放在自己的隨身碟、NAS 或雲端硬碟,但 KeePass 本身沒有內建雲端同步,傳輸和備份的責任在自己身上。
03可以帶著走嗎?還是只能裝在電腦上?
有提供免安裝的便攜版,放在隨身碟裡直接執行,不需要安裝。資料庫檔案也可以跟著隨身碟走,換一台電腦就能用。不過要注意,便攜版需要目標電腦有安裝 .NET Framework 4.7 以上版本,而且介面是英文的。
04可以從別的密碼軟體匯入資料嗎?
可以。KeePass 支援從多種格式匯入,也支援匯出成 TXT、HTML、XML 和 CSV。如果你原本用 Excel 或 CSV 記密碼,可以先整理成 CSV 再匯入。匯出功能也可以用來備份或轉移到其他軟體,但匯出後的檔案是明文,要小心存放。
05自動輸入密碼是怎麼運作的?
內建 Auto-Type 功能,可以設定讓 KeePass 自動幫你輸入使用者名稱和密碼。它會模擬鍵盤輸入,所以不需要複製貼上,避免密碼留在剪貼簿裡。也可以設定全域快速鍵,在任何視窗按下快捷鍵就自動填入。但這功能在部分網站或應用程式上可能因為輸入框設計不同而失效,需要自己調整設定。
06適合什麼樣的人用?
適合願意花時間自己管理資料庫的人。KeePass 的運作方式是把所有責任交給你:主密碼自己記、資料庫自己備份、同步自己處理。如果你習慣把東西掌握在自己手裡,不喜歡雲端服務,也不介意英文介面,那它很夠用。它也適合需要管理大量帳號的 IT 人員,可以用群組分類和自訂欄位。
07跟瀏覽器內建的密碼管理比起來,有什麼差別?
瀏覽器內建功能方便,但綁定特定瀏覽器,換瀏覽器或重灌電腦就麻煩。KeePass 的資料庫是獨立檔案,不受瀏覽器限制,而且加密強度更高。但相對的,KeePass 沒有自動填表單的功能,需要靠 Auto-Type 或手動複製貼上,使用上沒有瀏覽器那麼順手。
08手機上能用嗎?
官方沒有提供手機版。資料庫檔案格式是公開的,市面上有第三方 App 可以開啟 KeePass 資料庫,但那些 App 不是官方出品,相容性和安全性需要自行確認。如果你主要用手機記密碼,KeePass 可能不是最方便的選擇。
09需要雲端同步嗎?KeePass 有內建嗎?
KeePass 沒有內建雲端備份或同步功能。如果你要把資料庫放在 Dropbox、Google Drive 之類的地方,需要自己設定,而且每次修改後要手動上傳。如果多台電腦要同步,也要自己處理檔案衝突的問題。不想自己管理同步的人,用起來會覺得很麻煩。
10介面只有英文,看不懂怎麼辦?
介面語系只有英文,沒有官方中文。不過 KeePass 支援多國語言套件,可以另外下載中文語言檔,但需要自己安裝設定。如果連安裝語言檔都覺得困難,或希望介面預設就是中文,那這套軟體對你來說門檻會比較高。
11跟其他密碼管理器比起來,為什麼評分人數不多?
在收錄的比較名單中,KeePass 有 98 人評分,RoboForm 有 117 人,Kaspersky Password Manager 有 77 人。評分人數少不代表不好,但表示使用者的基數相對小。KeePass 的介面停留在早期風格,沒有現代密碼管理器常見的自動填表、雲端同步、行動裝置 App,這些都是它評分人數不多的可能原因。
12什麼樣的人不建議用 KeePass?
如果你需要手機和電腦之間無縫同步、想要自動填寫網頁表單、或希望介面是中文且現代化,那 KeePass 會讓你花很多時間在設定和維護上。它沒有官方手機版、沒有內建雲端同步、介面老舊且只有英文。這些需求可以考慮其他有持續更新、介面較現代的密碼管理器,但那些通常是付費或訂閱制。
下載與官方連結
前往官方網站 下載 KeePass Password Safe
KeePass-2.08-Setup.exe · 1.74 MB · 連結指向軟體原廠
版本紀錄
- 2026-05-02 KeePass 2.61.1 4.38 MB
- 2026-03-05 KeePass 2.61 4.38 MB
- 2025-11-03 KeePass 2.60 4.23 MB
再看 5 筆
- 2025-07-10 KeePass 2.59 4.15 MB
- 2025-03-05 KeePass 2.58 4.34 MB
- 2024-10-08 KeePass 2.57.1 4.32 MB
- 2024-06-02 KeePass 2.57 4.2 MB
- 2024-02-05 KeePass 2.56 4.19 MB
這一版改了什麼
What's new in this version:
New Features:
- Key transformation library: KeePass can now use Windows' CNG/BCrypt API for key transformations (about 50% faster than the KeePass built-in key transformation code; by increasing the amount of rounds by 50%, you'll get the same waiting time as in 2.07, but the protection against dictionary and guessing attacks is raised by a factor of 1.5; only Windows Vista and higher).
- Added support for sending keystrokes (auto-type) to windows that are using different keyboard layouts.
- Added option to remember key file paths (enabled by default).
- Added internal editor for text files (text only and RTF formatted text; editor can edit entry attachments).
- Internal data viewer: added support for showing rich text (text with formatting).
- Added inheritable group settings for disabling auto-type and searching for all entries in this group (see tab 'Behavior'); for new recycle bins, both properties are set to disabled.
- Added new placeholders: {DB_PATH}, {DB_DIR}, {DB_NAME}, {DB_BASENAME}, {DB_EXT}, {ENV_DIRSEP}, {DT_SIMPLE}, {DT_YEAR}, {DT_MONTH}, {DT_DAY}, {DT_HOUR}, {DT_MINUTE}, {DT_SECOND}, {DT_UTC_SIMPLE}, {DT_UTC_YEAR}, {DT_UTC_MONTH}, {DT_UTC_DAY}, {DT_UTC_HOUR}, {DT_UTC_MINUTE}, {DT_UTC_SECOND}.
- The password character picking dialog now supports pre-defining the number of characters to pick; append :k in the placeholder to specify a length of k (for example, {PICKPASSWORDCHARS3:5} would be a placeholder with ID 3 and would pick 5 characters from the password); advantage: when having picked k characters, the dialog closes automatically, i.e. saves you to click [OK].
- IDs in {PICKPASSWORDCHARSn} do not need to be consecutive anymore.
- The password character picking dialog now first dereferences passwords (i.e. placeholders can be used here, too).
- Added '-minimize' command line option.
- Added '-iousername', '-iopassword' and '-iocredfromrecent' command line options.
- Added '--auto-type' command line option.
- Added support for importing FlexWallet 1.7 XML files.
- Added option to disable protecting the clipboard using the CF_CLIPBOARD_VIEWER_IGNORE clipboard format.
- Added support for WebDAV URLs (thanks to Ryan Press).
- Added shortcut keys in master key prompt dialog.
- Added entry templates functionality (first specify an entry templates group in the database settings dialog, then use the 'Add Entry' toolbar drop-down button).
- Added AceCustomConfig class (accessible through host interface), that allows plugins to store their configuration data in the KeePass configuration file.
- Added ability for plugins to store custom data in KDBX database files (PwDatabase.CustomData).
- Added interface for custom password generation algorithm plugins.
- URLs in the entry preview window are now always clickable (especially including cmd:// URLs).
- Added option to copy URLs to the clipboard instead of opening them (Options -> Interface, turned off by default).
- Added option to automatically resize entry list columns when resizing the main window (turned off by default).
- Added 'Sync' command in KPScript scripting tool.
- Added FIPS compliance problems self-test (see FAQ for details about FIPS compliance).
- Added Rijndael/AES block size validation and configuration.
- Added NotifyIcon workaround for Mono under Mac OS X.
- Added confirmation box for empty master passwords.
- Added radio buttons in auto-type sequence editing dialog to choose between the default entry sequence and a custom one.
- Added hint that group notes are shown in group tooltips.
- Added test for KeePass 1.x plugins and an appropriate error message.
- Added interface for writing master password requirements validation plugins.
- Key provider plugin API: enhanced key query method by a context information object.
- Key provider plugin API: added 'DirectKey' property to key provider base class that allows returning keys that are directly written to the user key data stream.
- Key provider plugin API: added support for exclusive plugins.
- The '-keyfile' command line option now supports selecting key providers (plugins).
- Auto-Type: added option to send an Alt keypress when only the Alt modifier is active (option enabled by default).
- Added warning when trying to use only Alt or Alt-Shift as global hot key modifier.
- TrlUtil: added search functionality and toolbar.
- TrlUtil: version is now shown in the window title.
Improvements / Changes:
- Improved database file versioning and changed KDBX file signature in order to prevent older versions from corrupting newer files.
- ShInstUtil now first tries to uninstall a previous native image before creating a new one.
- Improved file corruption error messages (instead of index out of array bounds exception text, ...).
- The 'Open in Browser' command now opens all selected entries instead of just the focused one.
- Data-editing commands in the 'Tools' menu in the entry dialog are now disabled when being in history viewing mode.
- Right arrow key now works correctly in group tree view.
- Entry list is now updated when selecting a group by pressing a A-Z, 0-9 or numpad key.
- Improved entry list performance and sorting behavior.
- Improved splitter distance remembering.
- Improved self-tests (KeePass now correctly terminates when a self-test fails).
- The attachment column in the main window now shows the names of the attached files instead of the attachments count.
- Double-clicking an attachment field in the main window now edits (if possible) or shows the first attachment of the entry.
- Group modification times are now updated after editing groups.
- Improved scrolling of the entry list in item grouping mode.
- Changed history view to show last modification times, titles and user names of history entries.
- KeePass now also automatically prompts to unlock when restoring to a maximized window.
- Improved file system root directory support.
- Improved generic CSV importer preview performance.
- When saving a file, its path is not remembered anymore, if the option for opening the recently used file at startup is disabled.
- Improved auto-type input blocking.
- Instead of a blank text, the entry dialog now shows "(Default)" if the default auto-type sequence is used in a window-sequence association.
- Most broadcasted Windows messages do not wait for hanging applications anymore.
- Improved main window hiding at startup when the options to minimize after opening a database and to tray are enabled.
- Default tray action is now dependent on mouse button.
- New entries can now inherit custom icons from their parent groups.
- Improved maximized state handling when exiting while the main window is minimized.
- Improved state updating in key creation form.
- Improved MRU list updating performance.
- Improved plugin incompatibility error message.
- Deprecated {DOCDIR}, use {DB_DIR} instead ({DOCDIR} is still supported for backward compatibility though).
- Last modification times of TAN entries are now updated.
- F12 cannot be registered as global hot key anymore, because it is reserved for kernel-mode / JIT debuggers.
- Improved auto-type statement conversion routine in KeePass 1.x KDB file importer.
- Improved column width calculation in file/data format dialog.
- Improved synchronization status bar messages.
- TrlUtil: base hash for forms is now computed using the form's client rectangle instead of its window size.
- Various code optimizations.
- Minor other improvements.
Bugfixes:
- Recycle bin is now cleared correctly when clearing the database.