What is KeeWeb used for?

KeeWeb is listed as a Security tool on TiloBox. Review the overview, features, and official documentation on this page to decide whether it solves your specific workflow.

How do I get started with KeeWeb?

Start with the project's GitHub repository and official website for supported installation and deployment instructions. Test the setup with representative data or a small project before rolling it out more widely.

What license does KeeWeb use?

KeeWeb is listed under the MIT license. Read the complete license text and the project's notices before using, modifying, or distributing the software.

Is KeeWeb ready for production use?

Production readiness depends on your requirements. Review maintenance activity, security practices, documentation, backup and upgrade procedures, and compatibility with your stack; then validate it in a non-production environment.

Is KeeWeb an alternative to KeePassXC?

KeeWeb is listed as an alternative to KeePassXC. Compare the core workflow, deployment model, integrations, and licensing against your must-have requirements before switching.

Security Alternative to KeePassXC Alternative to 1Password

KeeWeb

Free cross-platform password manager compatible with KeePass databases and cloud sync.

View on GitHub Visit website

LicenseMIT

GitHub stars13.0k

Last commit3 months ago

Tags6 topics

KeepassWebdavPassword ManagerEncryptionKdbxSelf Hosted

Overview

Why consider KeeWeb?

KeeWeb is an open-source password manager compatible with KeePass (.kdbx) format. It runs on web, desktop, and mobile with WebDAV, Google Drive, and Nextcloud sync.

Guided learning

Learn KeeWeb by building

Practical setup notes, real use cases, and copy-ready examples in one focused guide.

3 min read 10 sections

In this guide10 sections

What is KeeWeb?

KeeWeb is a free, open-source, cross-platform password manager client and web application compatible with the industry-standard KeePass (.kdbx) database file format. Developed in JavaScript and React, KeeWeb operates as a modern, beautifully designed alternative to traditional KeePass clients and proprietary commercial vaults like 1Password and Bitwarden.

KeeWeb runs as a standalone desktop application (Linux, macOS, Windows) or as a self-hosted web app hosted on your own server. It connects directly to personal cloud storage (Nextcloud, WebDAV, Dropbox, Google Drive, OneDrive) to sync encrypted password databases without relying on centralized third-party servers.

Who Is It For?

KeePass Users: Wanting a sleek, modern, cross-platform interface for existing .kdbx database files.
Privacy-Conscious Individuals: Storing encrypted password vaults strictly in personal cloud storage (Nextcloud/WebDAV) with zero vendor lock-in.
Self-Hosters: Deploying a private, client-side web-based password manager accessible from any modern web browser.

Key Features

Full compatibility with KeePass v2 format (.kdbx files) with support for key files and master passwords.
Multiple cloud sync providers: Nextcloud, generic WebDAV, Dropbox, Google Drive, and OneDrive.
Integrated TOTP software authenticator: Generate two-factor OTP codes directly inside password entries.
Offline-first architecture: Full password access and search capabilities when disconnected from the internet.
Auto-type keyboard emulation and rich entry customization with custom fields, color tags, and icon galleries.

Deploying Self-Hosted KeeWeb Web App with Docker

yaml

1version: '3'

3services:

4 keeweb:

5 image: antelle/keeweb:latest

6 container_name: keeweb

7 restart: unless-stopped

8 ports:

9 - "8080:80"

10 - "8443:443"

11 volumes:

12 - ./ssl:/etc/nginx/ssl

13 - ./keeweb-config.json:/keeweb/keeweb-config.json:ro

Create keeweb-config.json to configure your default storage provider (e.g. Nextcloud WebDAV):

json

1{

2 "settings": {

3 "theme": "dark",

4 "canOpen": true,

5 "canOpenDemo": false,

6 "canSave": true,

7 "canImport": true,

8 "canExport": true

9 }

10}

Start the container:

bash

1docker compose up -d

Open http://localhost:8080 in your browser to create a new .kdbx database or open an existing vault from WebDAV.

Practical Use Cases

1. Nextcloud-Synced Password Vault

A user stores an encrypted passwords.kdbx vault on a personal Nextcloud instance; KeeWeb connects via WebDAV to open, edit, and automatically synchronize changes across desktop and browser.

2. Zero-Installation Browser Vault Access

A developer opens the self-hosted KeeWeb web app on a temporary workstation, unlocks the vault using a master password, retrieves an API credential, and closes the tab with zero traces left on disk.

3. Integrated Two-Factor Code Generation

A user configures TOTP secret seeds inside KeeWeb entries; KeeWeb generates 6-digit one-time codes with live countdown timers alongside saved passwords.

Troubleshooting and Limitations

CORS Configuration for WebDAV: When hosting KeeWeb on a separate domain from your WebDAV storage (e.g. Nextcloud), configure Cross-Origin Resource Sharing (CORS) headers on the WebDAV server to allow GET, PUT, and PROPFIND requests.
Client-Side Cryptography: In the web version, all cryptographic unlocking happens in browser memory; always use HTTPS in production to prevent man-in-the-middle script injection.

Official Resources

Official Website: https://keeweb.info
GitHub Repository: https://github.com/keeweb/keeweb
Documentation & Wiki: https://github.com/keeweb/keeweb/wiki

Related tools

More options with a similar category or technology profile.

boringproxy

Simple, self-hosted reverse proxy and tunnel manager for exposing private web services securely.

OWASP ModSecurity

Open-source Web Application Firewall (WAF) engine providing cross-platform HTTP security inspection.

OpenCTI

Open-source platform for managing cyber threat intelligence knowledge and STIX2 relationships.

Maltrail

Malicious traffic detection system utilizing public blacklists and heuristic traffic behavior analysis.