這是歷史版本頁面 — 看 KeePass Password Safe 最新版本
密碼多到記不住?KeePass 免費開源密碼管理器能做什麼
你手上至少有十幾個帳號:Windows 登入、Email、網站會員、FTP、論壇……每個都要密碼,而且最好都不一樣。以前偷懶用同一組,結果某個論壇被駭,連 Email 都被登入,才發現事情大條。現在想好好整理,卻不知道從哪裡開始——用瀏覽器記住密碼是方便,但換電腦、換瀏覽器就全部不見,而且瀏覽器本身也不夠安全。
一般人最常做的就是把密碼寫在記事本或 Excel 裡,但這等於把鑰匙放在門口地墊下。密碼管理器的切入點很簡單:你只需要記住一組主密碼,其他所有密碼都鎖在一個加密的資料庫裡,要用時再解鎖。KeePass 就是這個領域的老牌開源工具,從 2005 年開發到現在,靠的是社群信任和可審查的原始碼,而不是華麗的介面。
01KeePass 是什麼?跟一般記密碼的軟體有什麼不同?
KeePass 是一套開源密碼管理器,把所有的帳號密碼集中存放在一個加密資料庫裡,用一組主密碼或金鑰檔案解鎖。跟瀏覽器內建記密碼功能不同,它的資料庫是用 AES 和 Twofish 加密,而且原始碼公開,任何人都可以檢查加密有沒有實作正確。免費、無廣告,也不需要註冊帳號。
02密碼存在哪裡?會不會被偷?
所有密碼存在一個以主密碼或金鑰檔案鎖住的資料庫檔案裡,檔案本身用 AES 和 Twofish 加密。沒有主密碼或金鑰檔案,就無法開啟內容。你可以把這個檔案放在自己的隨身碟、NAS 或雲端硬碟,但 KeePass 本身沒有內建雲端同步,傳輸和備份的責任在自己身上。
03可以帶著走嗎?還是只能裝在電腦上?
有提供免安裝的便攜版,放在隨身碟裡直接執行,不需要安裝。資料庫檔案也可以跟著隨身碟走,換一台電腦就能用。不過要注意,便攜版需要目標電腦有安裝 .NET Framework 4.7 以上版本,而且介面是英文的。
04可以從別的密碼軟體匯入資料嗎?
可以。KeePass 支援從多種格式匯入,也支援匯出成 TXT、HTML、XML 和 CSV。如果你原本用 Excel 或 CSV 記密碼,可以先整理成 CSV 再匯入。匯出功能也可以用來備份或轉移到其他軟體,但匯出後的檔案是明文,要小心存放。
05自動輸入密碼是怎麼運作的?
內建 Auto-Type 功能,可以設定讓 KeePass 自動幫你輸入使用者名稱和密碼。它會模擬鍵盤輸入,所以不需要複製貼上,避免密碼留在剪貼簿裡。也可以設定全域快速鍵,在任何視窗按下快捷鍵就自動填入。但這功能在部分網站或應用程式上可能因為輸入框設計不同而失效,需要自己調整設定。
06適合什麼樣的人用?
適合願意花時間自己管理資料庫的人。KeePass 的運作方式是把所有責任交給你:主密碼自己記、資料庫自己備份、同步自己處理。如果你習慣把東西掌握在自己手裡,不喜歡雲端服務,也不介意英文介面,那它很夠用。它也適合需要管理大量帳號的 IT 人員,可以用群組分類和自訂欄位。
07跟瀏覽器內建的密碼管理比起來,有什麼差別?
瀏覽器內建功能方便,但綁定特定瀏覽器,換瀏覽器或重灌電腦就麻煩。KeePass 的資料庫是獨立檔案,不受瀏覽器限制,而且加密強度更高。但相對的,KeePass 沒有自動填表單的功能,需要靠 Auto-Type 或手動複製貼上,使用上沒有瀏覽器那麼順手。
08手機上能用嗎?
官方沒有提供手機版。資料庫檔案格式是公開的,市面上有第三方 App 可以開啟 KeePass 資料庫,但那些 App 不是官方出品,相容性和安全性需要自行確認。如果你主要用手機記密碼,KeePass 可能不是最方便的選擇。
09需要雲端同步嗎?KeePass 有內建嗎?
KeePass 沒有內建雲端備份或同步功能。如果你要把資料庫放在 Dropbox、Google Drive 之類的地方,需要自己設定,而且每次修改後要手動上傳。如果多台電腦要同步,也要自己處理檔案衝突的問題。不想自己管理同步的人,用起來會覺得很麻煩。
10介面只有英文,看不懂怎麼辦?
介面語系只有英文,沒有官方中文。不過 KeePass 支援多國語言套件,可以另外下載中文語言檔,但需要自己安裝設定。如果連安裝語言檔都覺得困難,或希望介面預設就是中文,那這套軟體對你來說門檻會比較高。
11跟其他密碼管理器比起來,為什麼評分人數不多?
在收錄的比較名單中,KeePass 有 98 人評分,RoboForm 有 117 人,Kaspersky Password Manager 有 77 人。評分人數少不代表不好,但表示使用者的基數相對小。KeePass 的介面停留在早期風格,沒有現代密碼管理器常見的自動填表、雲端同步、行動裝置 App,這些都是它評分人數不多的可能原因。
12什麼樣的人不建議用 KeePass?
如果你需要手機和電腦之間無縫同步、想要自動填寫網頁表單、或希望介面是中文且現代化,那 KeePass 會讓你花很多時間在設定和維護上。它沒有官方手機版、沒有內建雲端同步、介面老舊且只有英文。這些需求可以考慮其他有持續更新、介面較現代的密碼管理器,但那些通常是付費或訂閱制。
下載與官方連結
前往官方網站 下載 KeePass Password Safe
KeePass-2.35-Setup.exe · 2.96 MB · 連結指向軟體原廠
版本紀錄
- 2026-05-02 KeePass 2.61.1 4.38 MB
- 2026-03-05 KeePass 2.61 4.38 MB
- 2025-11-03 KeePass 2.60 4.23 MB
再看 5 筆
- 2025-07-10 KeePass 2.59 4.15 MB
- 2025-03-05 KeePass 2.58 4.34 MB
- 2024-10-08 KeePass 2.57.1 4.32 MB
- 2024-06-02 KeePass 2.57 4.2 MB
- 2024-02-05 KeePass 2.56 4.19 MB
這一版改了什麼
What's new in this version:
New Features:
- New KDBX 4 file format, which supports various new features (listed below; e.g. Argon2)
- Added Argon2 key derivation function (it can be activated in the database settings dialog)
- Improved header and data authentication in KDBX 4 files (using HMAC-SHA-256, Encrypt-then-MAC scheme)
- Added ChaCha20 (RFC 7539) encryption algorithm (it can be activated as KDBX file encryption algorithm in the database settings dialog; furthermore, it supersedes Salsa20 as default for generating the inner random stream of KDBX 4 files)
- Added support for opening entry URLs with Firefox or Opera in private mode via the context menu -> 'URL(s)' -> 'Open with ... (Private)'
- Added URL override suggestions for Firefox and Opera in private mode in the URL override suggestions drop-down list in the entry dialog
- Added optional built-in global URL overrides for opening HTTP/HTTPS URLs with Firefox or Opera in private mode
- Added {PICKFIELD} placeholder, which shows a dialog to pick a field whose value will be inserted
- Added option 'Hide "Close Database" toolbar button when at most one database is opened' (turned on by default)
- Added option 'Show additional auto-type menu commands', which can be turned on to show menu commands for performing entry auto-type with some specific sequences
- Added menu command 'Selected Entry's Group' (with keyboard shortcut Ctrl+G) in 'Edit' -> 'Show Entries' (and a context menu equivalent 'Show Parent Group' in 'Selected Entries'), which opens the parent group of the currently selected entry and selects the entry again
- Added menu commands in 'Edit' -> 'Show Entries' to show entries that expire in a specific number of days (1, 2, 3) or weeks (1, 2, 4, 8) or in the future
- Added configuration option that specifies the number of days within which entries are considered to expire 'soon' (the default is 7)
- Added option for changing the alternate item background color
- When the option 'Remember key sources' is enabled, KeePass now also remembers whether a master password has been used
- Added option 'Force changing the master key the next time (once)' (in 'File' -> 'Database Settings' -> tab 'Advanced')
- Added parameters 'Window style' and 'Verb' for the 'Execute command line / URL' trigger action
- Added support for importing mSecure 3.5.5 CSV files
- Added support for importing Password Saver 4.1.2 XML files
- Added support for importing Enpass 5.3.0.1 TXT files
- Enhanced SplashID CSV import (added support for the old version 3.4, added mappings for types of the latest version, groups are now created only for categories, and types are imported as tags)
- LastPass import: added support for CSV files exported by the LastPass Chrome extension, which encodes some special characters as XML entities
- Added 'KeePass KDBX (2.34, Old Format)' export module
- Export using XSL transformation: added support for the 'xsl:output' element in XSL files
- If the global auto-type hot key is Ctrl+Alt+A and the current input locale is Polish, KeePass now shows a warning dialog (telling the user that Ctrl+Alt+A is in conflict with a system key combination producing a character)
- Added Alt+X Unicode character conversion support in rich text boxes on Unix-like systems
- For development snapshots, the 'About' dialog now shows the snapshot version (in the form 'YYMMDD')
- Plugins can provide other key derivation functions now
- The header of KDBX 4 files is extensible by plugins
- Enhanced support for developing encryption algorithm plugins
- Plugins can now store custom data in groups and entries
- Plugin data stored in the database, a group or an entry can now be inspected (and deleted) in the database maintenance dialog, the group dialog and the entry dialog, respectively
- For plugins: file closing events now contain information about whether KeePass is exiting, locking or performing a trigger action
- Added workaround for .NET handle cast overflow bug in InputLanguage.Culture
- Added workaround for Mono ignoring the Ctrl+I shortcut
- Added workaround for Mono clipboard bug
- Added workaround for Mono not focusing the default control in the entry editing dialog
- Added workaround for a Mono timer bug that caused high CPU load while showing a file save confirmation dialog
- Added Mono workaround: when running on Mac OS X, KeePass now does not try to instantiate a tray icon anymore
- Added workaround for XDoTool sending diacritic characters in incorrect case
- TrlUtil now recommends to clear the 'Unused Text' tab
Improvements:
- Improved behavior when searching entries with exclusions (terms prefixed with '-')
- Improved support for auto-typing into target windows using different keyboard layouts
- Auto-Type: improved support for keyboard layouts with keys where Shift, Caps Lock and no modifier result in 3 different characters
- Auto-Type: improved support for spacing modifier letters (U+02B0 to U+02FF)
- Global auto-type now works with target windows having empty titles
- When copying entries to the clipboard, the data package now includes custom icons used by the entries
- Unified behavior when drag&dropping a field containing a placeholder
- Improved entry edit confirmation dialog
- If the screen height is insufficient to display a dialog, the dialog's banner (if the dialog has one) is now removed to save some space.
- Some tooltips are now displayed for a longer time
- A new entry created using a template now does not include the history of the template anymore
- For empty RTF attachments, the internal data editor now by default uses the font that is specified for TXT files
- Internal data editor: added support for changing the format of mixed-format selections
- Internal data viewer and editor: null characters ('', not '0') in texts are now automatically replaced by spaces (like Notepad on Windows 10)
- Improved encoding signature handling for conversions during text attachment imports (via the 'Text Encoding' dialog)
- File transactions are not used anymore for files that have a reparse point (e.g. symbolic links)
- Improved XSL stylesheets for KDBX XML files
- The internal window manager is now thread-safe
- Improved date/time handling
- Improved button image disposal
- When synchronizing two databases, custom data (by plugins) is now merged
- When opening a database file, corrupted icon indices are now automatically replaced by default values
- Added some more entropy sources for the seed of the cryptographically secure pseudo-random number generator (environment variables, command line, full operating system version, current culture)
- ChaCha20 is now used during password generation (instead of Salsa20)
- ChaCha20 is now used as fallback process memory encryption algorithm (instead of Salsa20)
- When the encryption algorithm for a database file is unknown, the error message now shows the UUID of the algorithm
- In KDBX 4, header field lengths are now 4 bytes wide
- In KDBX 4, entry attachments are now stored in an inner, binary header (encrypted, possibly compressed), before the XML part; this reduces the database file size and improves the loading/saving performance
- In KDBX 4, the inner random stream cipher ID and key (to support process memory protection) are now stored in the inner header instead of in the outer header
- KPScript: the 'ChangeMasterKey' command now also updates the master key change date
- TrlUtil: improved validation warning dialogs
- The MSI file now requires any .NET Framework version, not a specific one
- The MSI file is now built using Visual Studio 2015
- Various code optimizations
- Minor other improvements
Bugfixes:
- When executing a {HMACOTP} placeholder, the last modification time of the corresponding entry is now updated
- Key files containing exactly 64 alphanumeric characters are now loaded as intended