Kipass
Password Manager · iPhone · iPad · Mac · Android · Windows · Linux
A native, offline password manager that speaks the open KeePass format. No account, no cloud, no telemetry — nothing reaches the network until you switch it on.
The real difference
Breach checks, password health, 2FA codes, attachments, hardware keys, templates, sync — the things other managers reserve for a paid plan are all here, unlocked, at no cost. No premium tier, no locked features, no upsell. That’s the promise: the full app, free, for good.
Private by design
Every online feature ships off behind two separate switches you control: one for enrichment (breach checks, website icons), and one for reading and writing vaults over the network (cloud, WebDAV, SFTP, remote backup). Turn on only what you need — your vault is a standard encrypted file that only you can open.
Privacy
Kipass has no account and no server of its own. It never phones home, ships no analytics and no ads, and bundles no third‑party SDKs. Your vault is a standard encrypted file that only you can open — the only network traffic is the optional online features you switch on yourself, going straight to the service you chose.
How we protect you
We treat the device around your vault as if it can’t be trusted, and we lean only on cryptography the world has already vetted — never anything we invented ourselves.
Quick unlock with Face ID or Touch ID — or your device code on hardware without a strong sensor — or a per‑database PIN; each just re‑opens the vault with the password you already entered. For encryption factors, add a FIDO2 security key (hmac‑secret) or a YubiKey (HMAC‑SHA1) over NFC or USB-C, a key file, or any combination — the key becomes part of what encrypts the vault.
Guard against a forgotten master password without weakening it: a virtual key (a secret stored on the device that answers the same challenge as a hardware key), a printable recovery key, and — on Apple devices — an iCloud recovery factor. Any of them can re‑open the vault, so losing one route never locks you out. All off until you set them up.
A built‑in workshop (open even with no vault) splits any secret — a password, a phrase, a key — into N shares, of which any K reconstruct it; K−1 reveal nothing. Three interoperable formats — ssss, gfshare and SLIP‑39 mnemonics — so shares open in any standard Shamir tool, not just Kipass. Name each recipient, show each share as a QR, and print them (two per page, with instructions and a cut line).
Regain access if you lose your master password by splitting a recovery key across people you trust (any K of N). Mode A hands out shares that re‑open your live vault; Mode B exports an encrypted .kdbx copy keyed by the split key, so your contacts open only the copy and never learn your master password. The key stays encrypted inside the vault, so you can re‑export a fresh copy anytime without redistributing shares. Revoke or regenerate the whole set at will. Off until you set it up.
A separate duress PIN or password opens a believable fake base — the real one stays invisible.
A second code that, typed instead of your password, wipes this vault from the device — file, versioned backups and offline cache — then shows the same generic error as a genuine wrong password, never a giveaway. A remote copy is never touched.
Optionally erase a vault after too many wrong passwords. The counter is per‑vault, survives a restart, and resets on a real unlock. Off by default.
A per‑vault switch keeps a base’s location off the open screen — changeable only while the vault is unlocked.
Blur the whole screen with one tap, or automatically a few seconds before the vault locks — a soft warning before it does. Tap to reveal; no unlock needed.
Hide the app behind a fully‑working calculator — or a genuine QR‑code generator, your choice: turn it on and Kipass vanishes instantly, its icon changing to match too (on Android the name changes as well). Type your secret number then “=” (or tap PNG/SVG for the QR facade) to come back. Off by default.
Screenshots and recordings of the vault come out blank; the app‑switcher preview is masked.
A tampered device is flagged, and a debugger or instrumentation attempt is recorded.
A local, on‑device log of what happened to your vault — openings, reveals, copies, moves, deletions, duplicate merges, and every import and export with its source or destination and the entries involved. Titles only, never a secret. Kept three months, exportable, yours to clear.
Re‑encrypts in memory on focus loss and after idle; clears copied passwords from the clipboard.
When an app matches an entry only by package name, Kipass asks the site whether it really owns that app before offering the login — a sideloaded lookalike gets nothing.
A single “Allow Internet” toggle gates everything online. Leave it off and Kipass is fully air‑gapped.
The first time Kipass connects to your SFTP or WebDAV server, it remembers who it’s talking to — for SFTP you confirm the key’s fingerprint yourself, for WebDAV the certificate is pinned automatically. If that identity ever changes without warning, the connection is refused rather than silently trusted, so a compromised Wi‑Fi network, a rogue router or a fraudulent certificate authority can’t quietly intercept your sync.
On a Mac, unlock your vaults with your paired, unlocked Apple Watch nearby — alongside Touch ID, or instead of it on a Mac without one. No session‑password fallback. Off by default; turn it on in Preferences › Apple Watch.
A vault made elsewhere with an extreme Argon2 memory cost can be painfully slow to open — or crash a low‑RAM device. Kipass reads the cost before deriving the key and asks you to confirm; anything above 1 GB is refused outright.
No YubiKey to hand? Kipass can generate a software equivalent — the same HMAC‑SHA1 challenge‑response — and add it as an unlock factor. Export it as hex to replicate the very same key onto your other devices.
On Android phones with a dedicated security chip — physically separate from the main processor, built to hold up even if the OS itself is compromised — the key protecting your quick‑unlock PIN is generated and kept inside it. Phones without one fall back automatically to the platform’s standard hardware‑backed Keystore.
Create a fresh, random .keyx key file in‑app — a real second factor to keep separate from the vault, so a stolen copy is useless without it. Save it anywhere, print its hex as a paper backup, and regenerate the very same file from that hex if you lose it. Interoperable with any KeePass app.
What we did & keep doing
A one‑time third‑party audit or an open‑source badge is worth having — but each only describes the code on the day it was done, and software never stops moving. So we don’t treat security as a box ticked once. Here’s what we’ve done, and what we keep doing: every change goes through continuous, automated, AI‑assisted security review and fuzz‑testing — the file parser hammered with malformed and malicious vaults, the cryptography and sync protocols re‑examined — refreshed as the app evolves, not once a year. It has already caught and closed real issues before release. When it surfaces a weakness, we fix it before it reaches you. That’s the commitment we intend to keep, version after version.
Found a vulnerability, or a way to make Kipass better? We want to hear it. Responsible disclosure and improvement ideas are always welcome — reporting something helps protect everyone. Write to frank@kinevia.com.
A look inside
Every day
Fill logins system‑wide, sign in with passkeys, read your 2FA codes, and — on iPad — sort your vault into tidy columns.
Suggests logins in apps and Safari, right from the keyboard. The requesting site is matched by exact domain (never a look‑alike); when you search the picker by hand, exact matches come first, then typo‑tolerant near‑misses you choose yourself — never used for automatic fill or in Agentic Mode.
Opt‑in: AutoFill offers only the exact site/app match — never the whole vault — so an AI agent driving the fill can’t browse your other secrets.
Create and use passkeys (WebAuthn) as your system credential provider.
Time‑based codes with a live ring — RFC 6238 with SHA‑1/256/512, 6–8 digits and custom periods, plus Steam Guard and counter‑based HOTP. Show any code as a QR to move it to another authenticator.
Import a 2FA code from a picture of its QR — a screenshot or photo — when the code is on the same device and a live camera scan can’t reach it.
On iPhone/iPad, spot a one‑time‑code QR anywhere — a screenshot, a document, someone else’s screen — and use Live Text’s own Share action to hand it straight to Kipass. It’s offered as a new account to add, never saved without your say‑so.
Turn any text or URL into a QR code — no vault required. Start from a ready‑made template (vCard, Wi‑Fi, event, SMS, email…) or type your own. Pick a colour, then share it as PNG or a scalable SVG. Read an existing QR back in too, with the camera (iPhone, Android) — or import a QR from a photo, or scan a photo's text instead (iPhone, Android). The text itself can be copied or shared directly too, no need to go through the image.
On wide screens, see Title · Username · URL and tap a header to sort.
Multiple terms (all must match), quoted phrases, a -/! prefix to exclude one, per‑field operators (user:, url:, tag:, group:, attachment:, uuid:…), is: filters (expired, weak, passkey, large…), */? wildcards or a full /regex/ — the exact same engine that powers Smart Groups, across titles, notes, tags, every URL and custom field, never the password.
Filter a group by tag, and give each base a colour that tints the app so you always know which vault is open — plus a default username pre‑filled into new entries.
Give Kipass’s icon a new look from a pop‑up grid — dark tints, a Japanese set (キパス in katakana, and the kanji 鍵 錧 秘 守 密 金庫), or a calculator. On Mac and desktop you can even load your own image. Purely cosmetic; the app stays “Kipass”, and it’s separate from the calculator camouflage.
Give an entry its own colour (KeePass’s per‑entry colour) — a slim coloured bar marks it in the list, so the ones that matter stand out.
Point a group as your templates group; every entry in it becomes a one‑tap template for new entries — the KeePass EntryTemplatesGroup, shared with KeePass/KeePassXC.
No setup needed: the + button also offers ready‑made structured types — bank card, identity, SSH key, bank account, Wi‑Fi, software license, ID document, database, server, health insurance, membership — each with its own fields and icon.
Drag down the alphabet on the right edge of a long list to land on a letter instantly, with haptic feedback.
The editor offers the addresses already in your base, most‑used first — no retyping the same e‑mail.
Quick presets — 1 week to 2 years — set an entry’s expiry date without fiddling with a picker.
Changes are written back to the original file a few seconds after you make them — or only on demand, if you prefer the button.
Watchtower
An offline health report inspects your whole vault and tells you exactly what’s weak — no data ever leaves the device to do it.
Optional breach check opt‑in compares your passwords against Have I Been Pwned using k‑anonymity — the password itself is never sent.
Organize
More than logins: cards, identities, SSH keys, Wi‑Fi and licenses — each with the right fields, references and files.
Keep more than one .kdbx open at the same time — personal and work, yours and a shared one — and switch between them instantly.
Multi‑select entries and groups, then move or copy them into another group — or straight into another open base. Moving across bases brings each entry’s icon and attachments with it.
The health report groups identical or near‑identical entries; differing values are highlighted in red. Rename one to split it out, or merge a group into a single entry — losing nothing: the absorbed entries are kept in history, then binned. Choose which field to keep one by one (each value stays editable), and tick several URLs to keep, since one entry can hold many. Every merge is logged in the access journal.
An entry’s detail shows the breadcrumb of groups it lives in, and its unique ID (UUID) — copyable, and the same across other KeePass clients and the access journal, so you can pin down the exact entry among look‑alikes.
Ready‑made layouts for cards, bank accounts, identities, SSH, Wi‑Fi and more — fully localized.
Reuse a value across entries with {REF} placeholders — change it once, everywhere. Copy reference on any username, password or URL puts the {REF:…} link on the clipboard, ready to paste into another entry.
Show a password or code full‑screen in big, colour‑coded characters (digits, letters and symbols stand apart) — easy to read across the room or copy onto another device, with nothing sent over the wire.
Keep documents and keys inside the encrypted vault, add or export them per entry.
Mark any attachment — a passport photo, diploma, medical record or insurance paper — with a category, right from the entry or the Médias tab. Filter the whole vault’s attachments by tag to find every ID scan at a glance. Tracked by the file’s content, not its name, so two files that happen to share a name are never confused.
Use Share in any other app and pick Kipass — the file lands as an attachment on an auto‑created “Shared” entry, no copy‑pasting required. Capped at 25 MB per file.
Fetch a site’s real favicon — from the site itself, never a third‑party icon service, and only when you tap the button opt‑in. Updating every icon at once shuffles the requests and spaces them with a random delay, so a network observer can’t infer your site list. Or pick from the built‑in KeePass set and the icons already in your base.
Headings, lists and emphasis render right in the entry — the file stays plain text.
Your most‑used entries surface at the top, plus tags and full‑text search.
Two tabs at the top of the list — what you opened last and what you changed last — swipe either to delete.
Give a group a search query — same syntax as the search bar, e.g. is:passkey, url:http://*, group:Banking/Cards — and its matches gather there live, from across the whole base. The definition travels inside the file, fully compatible with KeePassium and KeePassXC.
Open a PDF, image or text file kept inside an entry right in the app — rendered inline, KeePassium‑style, without exporting it first.
Crop, mirror, straighten (with a rule‑of‑thirds grid), apply a filter or one‑tap auto‑enhance, and black out a sensitive area before it stays in the vault. Any edit strips the photo’s EXIF/GPS data — a banner says so up front when there’s any to strip.
One tap auto‑levels a photographed document — a percentile‑based brightness/contrast stretch per colour channel, the same trick behind most scanner apps’ “document mode.” On iPhone, iPad and Mac it first finds the document’s edges and crops & straightens to them, so a desk or tablecloth around the page is gone, not just rescaled.
Re‑encode an image attachment before it leaves the vault — PNG at 8 or 16 bits per channel with or without transparency (16‑bit on iPhone, iPad, Mac and desktop; Android always writes 8‑bit), JPEG with a quality slider, or JPEG 2000 on iPhone, iPad and Mac. A live, exact file‑size estimate updates as you choose.
Sharing an image or PDF offers a diagonal watermark first — “CONFIDENTIAL” by default, or your own text — previewed live, with a banner warning if the file still carries EXIF/GPS data that would go out as‑is. For a PDF specifically: restrict copying/printing/editing (opens normally, no password needed), and/or require a password just to open it.
The ⓘ button on any attachment shows its full details — camera make/model, lens, exposure, capture date, GPS coordinates with a one‑tap “Open in Maps”, and for PDFs/Office documents: title, author, subject, creator. Sharing a pooled file across entries asks for confirmation before removing its GPS/EXIF data, since it affects every entry that uses it.
The Info page warns when the file still holds attachment data no entry references, with its size — one tap to clean up and compact it, a KeePassium‑style integrity check. Either way, every save compacts the file automatically, so orphaned bytes never linger.
One screen for every file in the vault — its size, which entries use it, and when it was last previewed, shared or exported (straight from the access journal). Search, sort, rename, preview, share or delete. Filter to just the orphaned files or the content duplicates, and every file names the entries that use it — and, for a duplicate, which entries share the same content.
Import a whole set of entry icons at once — pick several images or a .zip pack, and each becomes a standard KeePass custom icon stored in the vault, ready to assign to any entry or group. Identical images are de‑duplicated automatically, and it stays interoperable with every KeePass app.
Copy or cut a file from one entry and paste it into another — inside the same base, it's shared instantly at zero extra storage cost, not duplicated. Paste anywhere else (another app, another base) and it lands as a normal new attachment instead. Prefer browsing? “From Kipass” lists every file already in the vault and shares it with one tap, no clipboard needed.
Point the camera at a paper document and get a cropped, perspective‑corrected, multi‑page scan attached to the entry — on iPhone/iPad and Android, powered by the OS's own scanner.
Your file, your rules
It’s your data in an open format — so Kipass gives you the tools to shape it, move it, audit it and undo mistakes.
Build strong random passwords or readable Diceware passphrases in 15 languages — English, French, German, Spanish, Italian, Catalan, Portuguese (Brazil), Chinese, Ukrainian, Latin, Finnish, Polish, Turkish, Dutch and Japanese, each wordlist individually licence‑checked and credited. The generator doesn’t need a vault open — there’s a button for it right on the “open a database” screen.
A 0–100 dashboard flags weak, reused, duplicate, expired and old passwords, unsecured http:// sites, and accounts that could turn on 2FA. The list of sites that support 2FA ships offline and can be refreshed on demand from 2fa.directory when you allow Internet. Opt in and a Have I Been Pwned check marks breached passwords — without ever sending your password (only the first 5 characters of its SHA‑1 hash leave the device).
Write out a CSV or KeePass 2 XML — or copy just a selection of groups and entries into a brand‑new encrypted base.
Kipass attaches the encrypted .kdbx to a pre‑filled e‑mail you review and send — off‑device redundancy in one tap. With a key file kept separate the message is useless to anyone who intercepts it; without one Kipass warns you the copy rides on your master password alone. Offered at your backup reminder, for small vaults only.
Pick where a copy of the encrypted vault goes and send it in one tap: e‑mail, your own SFTP or WebDAV server, a Dropbox, Box, OneDrive or SharePoint account, or any folder your device can reach — iCloud Drive, Google Drive, a local folder. You connect the cloud account right there through the provider’s own sign‑in — Kipass never sees your cloud password — and can switch accounts or disconnect any time. Each backup lands as its own time‑stamped file, so you keep a history instead of overwriting one. Without a key file, Kipass warns you the copy rides on your master password alone. Nothing leaves the device on its own: your backup reminder simply offers to do it.
See exactly what differs between two vaults — entries added, removed and changed — before you act.
Reconcile two copies of a base entry by entry; nothing is overwritten blindly. The same engine powers every sync.
Each entry keeps its past versions — review them and roll back to any earlier state.
Deleted entries move to a recycle bin you can restore from, or empty when you’re sure.
Choose the cipher (AES‑256, ChaCha20 or Twofish), the key‑derivation function and its Argon2 cost — per base.
Set a renewal interval and Kipass flags a stale master password — a firm red prompt once a forced interval passes — and caps how many versions each entry keeps.
Give each base a description, a default username pre‑filled into new entries, and a colour that tints the whole app so you always know which vault is open.
One Info page sums up the open base — file location, size on disk, last‑modified, entry count, attachment storage broken down by type (images, PDF, other), encryption (KDBX version · cipher · KDF) and its parameters, description, default username and colour — with an encryption verdict, a master‑key renewal reminder and a security score. The same view on iPhone, iPad, Mac, Android and desktop.
Generate an ed25519 key pair inside the vault and serve it to ssh and git through a built‑in SSH agent — compatible with KeeAgent, the key living only in the encrypted base.
Unlock one base and it can open the others it links to — the KeePass AutoOpen convention, so it interoperates with KeePassXC, KeePassium and KP2A. Each child opens with the password kept on the parent entry; on a phone you locate the file once and it’s remembered.
Spin up a disposable email address for a new account without leaving the entry — only when you ask, and only once you connect your own SimpleLogin.
Switching over
Import straight from the managers you’re leaving — including encrypted exports and, on recent systems, passkeys — into one open .kdbx file you control.
Plain and password‑encrypted JSON exports (PBKDF2 and Argon2id) — passwords, TOTP, passkeys and password history, folders kept as a real hierarchy.
Both the legacy .1pif and the newer .1pux archive.
The Proton Pass JSON export — logins, notes and cards, each vault becoming its own group.
Either Keeper JSON export — the consumer Vault Export or the Commander/Record‑V3 shape — with typed records (cards, identities, SSH keys, bank accounts…) landing as matching Kipass templates, not just flat text.
The legacy KeePass 1 binary format, decrypted on‑device and folded into your KDBX 4 base.
CSV from Apple Passwords, Google Password Manager, Chrome, LastPass, Dashlane, NordPass — plus Enpass JSON and KeePass 2 XML.
On recent systems, pull passwords and passkeys straight from Apple Passwords or Google Password Manager over the FIDO Credential Exchange — no file, encrypted end‑to‑end by the OS. The transfer carries no site icons; one tap fetches them all afterwards.
Read a Password Safe .psafe3 database, decrypted on‑device, entries and folders intact.
SafeInCloud/Secrets XML and mSecure CSV — both recognised straight from the file’s own bytes, no format to pick.
The Import menu on the open screen offers every format you get inside a base — CSV, Bitwarden, .1pux, Enpass, Proton Pass, Keeper, KeePass 2 XML, .kdb, .psafe3, SafeInCloud, mSecure, plus auto‑detect and TOTP. Build a fresh base straight from an encrypted export by typing its password in the create screen’s Import password field.
Sync
Your vault is a plain .kdbx file, so it lives wherever you want — on the device, in your cloud, or on your own server. Every online path is off until you turn it on, and each save merges instead of overwriting.
Two devices on the same network sync directly, end‑to‑end encrypted, verified by a 6‑digit code. Nothing leaves the LAN, no account involved.
Sign in once and open a base straight from Dropbox, Box, OneDrive or SharePoint, with a conflict‑safe merge on every save. Access tokens are kept on‑device only — no server of ours in the middle.
On iPhone, iPad and Mac, open a vault from iCloud Drive natively, or from Google Drive, OneDrive and any other provider through the system Files app — no extra account, nothing routed through us. On desktop, point at the provider’s synced folder.
Point Kipass at your own Nextcloud or ownCloud over HTTPS. Every save reads the server copy back and merges it in — and if the server can’t be reached, your changes stay on the device rather than overwrite a version Kipass never saw.
Open and sync a base over your own SSH server — the same conflict‑safe merge as WebDAV, nothing stored anywhere you don’t control.
Beyond the phone
The same vault, in the same open format, runs on Android — and two phones sync directly over Wi‑Fi, iPhone to Android included.
The very same app runs on Apple silicon Macs — your vault on the desktop, nothing extra to install.
On the Mac, load an SSH key stored in your vault into the running ssh‑agent for ssh and git — the key never touches disk and is pulled back out when the vault locks.
Fill your logins right in Safari. The extension shows the accounts matching the current site and fills the page on your pick — gated by Touch ID and Agentic Mode, sharing nothing beyond that one login.
Your 2FA codes with a live countdown, your entries with search, and a detail view — on your wrist. It reads from the paired iPhone; passwords stay on the phone unless you allow them, and the watch’s copy clears the moment the vault locks.
The same on an Android watch: your 2FA codes with a live countdown, your entries with search, and a detail view — on your wrist. Passwords and TOTP secrets leave the phone only if you turn each on; the recycle bin never syncs, and the watch’s copy clears on a timer and the moment the vault locks.
Jump to a chosen entry or 2FA code straight from a widget.
The whole app — including entry templates — localized end to end.
Opt‑in enhanced VoiceOver labels announce each entry as one item and name every action, for blind and low‑vision users.
The very same vault runs as a native desktop app on Windows (.msi) and Linux (.deb) — the open .kdbx format, no account, no cloud.
On Mac and the desktop, Kipass can type your username and password straight into the active window, KeePassXC‑style. A mobile OS won’t allow this, so it stays desktop only.
On Windows and Linux — X11 and Wayland alike (via the desktop portal) — one hotkey pops up a search over your unlocked vaults from any app: find an entry, copy its username, password or TOTP. Pick your own key combination in Preferences (the default is Ctrl+Shift+Space). With no vault open, the palette shows your recent bases and every way to open one; Escape or the × closes it. Kipass registers a single specific shortcut, never a key logger. Off by default.
A search field pinned at the top of Preferences filters every option as you type — on iPhone, iPad, Mac, Windows, Linux and Android. Look up “camouflage”, “backup” or “shortcut” instead of scrolling.
With a physical keyboard — iPad, Mac, an Android tablet or Chromebook, Windows and Linux — drive Kipass without the mouse: search (⌘/Ctrl+F), new entry (⌘/Ctrl+N), copy the password, username or TOTP (⌘/Ctrl+C · ⇧C · T), cut, paste to move, or duplicate an entry (⌘/Ctrl+X · V · D), and open Preferences (⌘/Ctrl+,). Escape closes. Cut, copy and paste inside a text field stay normal editing.
A browser extension opens one or more local or WebDAV .kdbx vaults at once — switch between them with tabs — and fills your logins on the page. It also notices a new or changed password on submit and offers to save it, asking which open vault if you have more than one. Everything stays inside the browser, nothing is sent out. Same extension, unmodified, on any Chromium‑based browser — Brave, Vivaldi, Chromium itself.
Compare
The same open vault, wherever you are. Here is exactly what runs where.
| Feature | iPhone · iPad | Mac | Windows | Linux | Android | Apple Watch | Wear OS |
|---|---|---|---|---|---|---|---|
| Vault & format | |||||||
Open & edit KeePass .kdbx | ● | ● | ● | ● | ● | ○ | ○ |
| Argon2id · AES‑256 · ChaCha20 · Twofish | ● | ● | ● | ● | ● | – | – |
| TOTP / 2FA codes | ● | ● | ● | ● | ● | ● | ● |
| Password generator | ● | ● | ● | ● | ● | – | – |
| Security dashboard (Watchtower) | ● | ● | ● | ● | ● | – | – |
| Import — 13 formats | ● | ● | ● | ● | ● | – | – |
Export — CSV · encrypted .kdbx | ● | ● | ● | ● | ● | – | – |
| 3‑way field‑level merge | ● | ● | ● | ● | ● | – | – |
| Smart Groups | ● | ● | ● | ● | ● | – | – |
| Attachment preview & share | ● | ● | ● | ● | ● | – | – |
| Media manager | ● | ● | ● | ● | ● | – | – |
| Import a custom icon set | ● | ● | ● | ● | ● | – | – |
| Copy/cut/paste an attachment between entries | ● | ● | ● | ● | ● | – | – |
| Share Sheet receiver — any file type 25 MB max | ● | ● | – | – | ● | – | – |
| Document scanner 7 | ● | – | – | – | ● | – | – |
| Clean up a scan — auto‑levels 9 | ● | ● | ○ | ○ | ○ | – | – |
| Convert image — PNG 16‑bit · JPEG 2000 9 | ● | ● | ○ | ○ | ○ | – | – |
| Versioned backups | ● | ● | ● | ● | ● | – | – |
| E‑mail a backup key file | ● | ● | ○ | ● | ● | – | – |
| Access journal (audit) | ● | ● | ● | ● | ● | – | – |
| Unlock | |||||||
| Biometric unlock 1 | ● | ● | ● | – | ● | – | – |
| Remember password — OS‑sealed 2 | ● | ● | ● | ● | ● | – | – |
| PIN quick‑unlock | ● | ● | ● | – | ● | – | – |
| Virtual key — device‑stored factor | ● | ● | ● | ● | ● | – | – |
| Recovery factors — recovery key iCloud recovery on Apple | ● | ● | ● | ● | ● | – | – |
| Key file | ● | ● | ● | ● | ● | – | – |
| Generate a key file | ● | ● | ● | ● | ● | – | – |
| Hardware key — YubiKey · FIDO2 over USB / Lightning 3 | ○ | ● | ● | ● | ● | – | – |
| Hardware key — YubiKey · FIDO2 over NFC | ● | – | – | – | ● | – | – |
| Duress & privacy | |||||||
| Duress — decoy · erase code · self‑destruct | ● | ● | ● | ● | ● | – | – |
| Privacy blur (hide now / before lock) | ● | ● | ● | ● | ● | – | – |
| Calculator or QR‑code camouflage icon + name on Android | ● | ● | ● | ● | ● | – | – |
| Hide the file path | ● | ● | ● | ● | ● | – | – |
| Screen‑capture protection | ● | ● | ● | ● | ● | – | – |
| Filling & automation | |||||||
| App / site autofill (OS) | ● | ○ | – | – | ● | – | – |
| Save new logins on submit 6 | ● | – | ● | ● | ● | – | – |
| Auto‑Type into the active window | – | ● | ● | ● | – | – | – |
| Quick Access — global shortcut | – | – | ● | ● | – | – | – |
| Browser extension — Chrome · Firefox · Edge · Brave · Vivaldi 5 | – | ○ | ● | ● | – | – | – |
| Sync, keys & sharing 4 | |||||||
| Wi‑Fi / LAN direct sync | ● | ● | ● | ● | ● | – | – |
| SFTP sync | ● | ● | ● | ● | ● | – | – |
| WebDAV sync | ● | ● | ● | ● | ● | – | – |
| Pinned server identity (SFTP & WebDAV) | ● | ● | ● | ● | ● | – | – |
| Linked databases AutoOpen | ● | ● | ● | ● | ● | – | – |
| Cloud connectors — Dropbox · Box · OneDrive · SharePoint | ● | ● | ● | ● | ● | – | – |
| Open from a cloud drive — iCloud · Google Drive · OneDrive 8 | ● | ● | ● | ● | ● | – | – |
| SSH agent (KeeAgent) | – | ● | ● | ● | – | – | – |
| SSH key generation | ● | ● | ● | ● | ● | – | – |
| Email alias (SimpleLogin) | ● | ● | ● | ● | ● | – | – |
| Reach | |||||||
| Widgets (home screen · Notification Center) | ● | ● | – | – | ● | – | – |
| Apple Watch companion | – | – | – | – | – | ● | – |
| Wear OS companion Android watch | – | – | – | – | – | – | ● |
| 39 languages | ● | ● | ● | ● | ● | ● | ● |
| Offline · no account · no telemetry | ● | ● | ● | ● | ● | ● | ● |
1 Face ID / Touch ID on Apple, Windows Hello on Windows, biometrics on Android. On Linux the login keyring is the gate (no separate biometric prompt).
2 Sealed by DPAPI on Windows, the Keychain on Apple, and the freedesktop Secret Service (GNOME Keyring / KWallet) on Linux.
3 Wired over USB‑A / USB‑C on desktops and Android, or USB‑C / Lightning on iPhone and iPad. Over NFC you just tap the key — phones do this; most PCs and Macs have no NFC reader.
4 Every network feature is strictly opt‑in and off by default — nothing reaches the network until you turn it on.
5 On phones and tablets, browsers don't take password‑manager extensions — the OS autofill fills logins in every browser (and app) instead; see "App / site autofill" above. This is how every mobile password manager works. The extension itself is unmodified across targets and loads the same way in any Chromium‑based browser (Brave, Vivaldi, Chromium itself); Windows and Linux walk you through installing it from Preferences, Mac doesn't yet — Mac ships its own native Safari extension instead (○ above).
6 Submitting a new or changed login offers to save it to Kipass — via the OS autofill save prompt on iPhone/iPad (iOS 26.2+) and Android, or the browser extension's own prompt on Windows and Linux (which also asks which open database, if more than one is unlocked at once). Always asks first; never saved silently. Mac has no equivalent path yet — Apple limits the OS prompt to iOS/visionOS, and the Safari extension doesn't detect submissions.
7 Edge detection, perspective correction and multi‑page capture, powered by the OS's own document‑scanning component (VisionKit on iOS, ML Kit on Android). The QR generator's photo import separately offers two explicit modes — decode a QR code, or run on‑device text recognition (Vision on iOS, ML Kit on Android) — fully on‑device, nothing leaves the phone.
8 iCloud Drive is native on iPhone, iPad and Mac. Google Drive and OneDrive open through the system Files app on those devices; on Windows and Linux, point Kipass at the provider's own synced folder.
9 Everywhere: the auto‑levels stretch, 8‑bit PNG/JPEG export, and a quality slider. iPhone, iPad and Mac add document edge‑detection & crop before cleanup, 16‑bit PNG, and JPEG 2000; Windows and Linux add 16‑bit PNG but not the other two; Android has the base set only.