Analysis date: May 20, 2026
- Free and preferably open-source
- Supports Windows
- Integrates with Google Chrome (browser extension rated >= 3.8 in Chrome Web Store)
- Has an Android app
- Does NOT require self-hosting / server setup
- iOS availability noted
| Metric | Value |
|---|---|
| GitHub | keepassxreboot/keepassxc |
| Stars | 27,250 |
| Forks | 1,800 |
| Age | ~10 years (Feb 2016) |
| Last Push | May 20, 2026 |
| Latest Release | 2.7.12 (March 10, 2026) |
| Contributors | 390 |
| Open Issues | ~864 |
| Releases | 48 |
| Language | C++ (95%), CMake, Python |
| License | GPL-2.0/3.0 |
| Chrome Extension | KeePassXC-Browser -- 3.8 (480 ratings) |
| Hosting | None (fully offline) |
| Encryption | AES-256, ChaCha20, Twofish |
| Android | YES -- via KeePassDX (community client, reads same .kdbx files) |
| iOS | YES -- via KeePassium or Strongbox (community clients) |
| Free Tier | Completely free |
ANSSI (French National Cybersecurity Agency) security-certified. Highest GitHub stars of any open-source password manager. No official mobile apps, but the .kdbx ecosystem has excellent, mature community mobile apps.
| Metric | Value |
|---|---|
| GitHub | bitwarden/clients |
| Stars | 12,859 |
| Forks | 1,824 |
| Age | ~10 years (March 2016) |
| Last Push | May 20, 2026 |
| Latest Release | browser-v2026.4.1 (May 14, 2026) |
| Contributors | 420+ |
| Open Issues | ~1,082 |
| Releases | 490 |
| Language | TypeScript (88%), HTML, Rust |
| License | GPL / Bitwarden License |
| Chrome Extension | Bitwarden Password Manager -- 4.4 (7,600+ ratings) |
| Hosting | Free cloud (no self-hosting needed); self-hosted option available |
| Encryption | AES-CBC 256-bit, PBKDF2 SHA-256, Argon2 |
| Android | YES -- native app on Google Play |
| iOS | YES -- native app on App Store |
| Free Tier | Full-featured free tier (unlimited logins, unlimited devices) |
The gold standard for cloud-synced open-source password management. Most polished cross-platform experience. Also offers self-hosting for those who want it.
| Metric | Value |
|---|---|
| Repository | SourceForge |
| Stars | N/A (hosted on SourceForge) |
| Age | ~22 years (November 16, 2003) |
| Latest Version | 2.61 |
| Language | C# (2.x version), C++ (1.x version) |
| License | GPL-2.0-or-later |
| Chrome Extension | Community plugins: Kee (4.5, 91 ratings) / KeePassHttp-Connector (4.3, 64 ratings) / ChromeKeePass (4.0, 27 ratings) |
| Hosting | None (fully offline) |
| Encryption | AES-256, ChaCha20, Twofish |
| Android | YES -- via KeePass2Android (4.4 stars, 36K+ reviews on Play Store) |
| iOS | YES -- via KeePassium or Strongbox |
| Free Tier | Completely free, no paid tiers |
The original. 22 years of history. Originally designed by Dominik Reichl. Requires community plugins for Chrome integration, which can be clunky compared to native solutions. Source is published on SourceForge as ZIP archives (no version control).
| Metric | Value |
|---|---|
| GitHub | Part of ProtonMail/WebClients monorepo |
| Stars | N/A (monorepo) |
| Age | ~3 years (2023) |
| Language | TypeScript |
| License | GPL-3.0 (core crypto open source; some components proprietary) |
| Chrome Extension | Proton Pass: Free Password Manager -- 4.8 (6,200+ ratings) |
| Hosting | Free cloud (Swiss-hosted, no self-hosting needed) |
| Encryption | AES-256-GCM, Argon2, OpenPGP, ECC Curve25519 |
| Android | YES -- Google Play |
| iOS | YES -- App Store |
| Free Tier | Free (unlimited logins, unlimited devices, 10 hide-my-email aliases, 2FA authenticator) |
Highest Chrome extension rating in this list. Built by the Proton Mail team (CERN scientists). Swiss privacy laws, independently audited. Not fully open-source (some components proprietary). Free tier is generous.
| Metric | Value |
|---|---|
| GitHub | lesspass/lesspass |
| Stars | 6,018 |
| Forks | 356 |
| Age | ~10 years (Dec 2015) |
| Last Push | May 12, 2026 |
| Contributors | 70 |
| Open Issues | 23 |
| Language | TypeScript (50%), Python (23%), JavaScript (22%) |
| License | GPL-3.0 |
| Chrome Extension | LessPass -- 4.8 (49 ratings) |
| Hosting | None (stateless -- no database, no server, no sync) |
| Encryption | Deterministic password derivation (PBKDF2) |
| Android | YES -- Google Play + F-Droid |
| iOS | YES -- App Store (React Native) |
| Free Tier | Completely free |
Unique stateless approach: passwords are deterministically derived from site + login + master password. No vault, no database, no sync needed. Works identically on every device. The connected server (for storing preferences) is now self-host only (new registrations closed).
| Metric | Value |
|---|---|
| GitHub | padloc/padloc |
| Stars | 2,922 |
| Forks | 264 |
| Age | ~12 years (Nov 2013) |
| Last Push | March 29, 2025 (over 1 year inactive) |
| Latest Release | v4.3.0 (March 2023) |
| Contributors | 30 |
| Open Issues | 103 |
| Language | JavaScript (53%), TypeScript (44%) |
| License | AGPL-3.0 |
| Chrome Extension | Padloc -- 4.6 (5 ratings) |
| Hosting | Free cloud (no self-hosting needed); self-hosted option available |
| Encryption | AES cipher in GCM mode |
| Android | YES -- Google Play + APK on GitHub |
| iOS | YES -- App Store |
| Free Tier | Free for personal use |
Modern, clean UI. Tauri-based desktop app.
Warning: Last release was March 2023, last commit March 2025. Project appears to be stalling or potentially abandoned. Only 5 Chrome extension ratings. Use with caution.
| # | Project | Stars | Age | Offline? | Chrome Ext Rating | Android | iOS | Completely Free? |
|---|---|---|---|---|---|---|---|---|
| 1 | KeePassXC | 27,250 | 10y | Yes | 3.8 (480) | Via KeePassDX | Via KeePassium | Yes |
| 2 | Bitwarden | 12,859 | 10y | No (cloud) | 4.4 (7.6K) | YES | YES | Yes |
| 3 | KeePass | N/A | 22y | Yes | 4.5 (Kee, 91) | Via KP2Android | Via KeePassium | Yes |
| 4 | LessPass | 6,018 | 10y | Yes | 4.8 (49) | YES | YES | Yes |
| 5 | Proton Pass | N/A | 3y | No (cloud) | 4.8 (6.2K) | YES | YES | Freemium |
| 6 | Padloc | 2,922 | 12y | No (cloud) | 4.6 (5) | YES | YES | Yes |
| Project | Stars | Details |
|---|---|---|
| Passbolt | 5,921 | PHP-based team password manager. Requires server setup (self-hosted or paid cloud). Free version is self-host only. |
| TeamPass | 1,781 | PHP web app. Requires server. Also had no native Android app. |
| Project | Stars | Details |
|---|---|---|
| AuthPass | 2,632 | Flutter-based KeePass client. No Chrome extension at all (uses OS-level autofill only). |
| OneKeePass | 445 | Clojure/Rust KeePass client. Chrome extension is alpha, not rated in Chrome Web Store. |
| PearPass | 51 | P2P password manager. Chrome extension has 0 ratings (too new, unproven). |
| Project | Stars | Details |
|---|---|---|
| KeeWeb | 12,924 | Web/desktop only. No Android app. |
| Password Safe | 838 | Desktop only. No Android app. |
| Buttercup | 4,408 | Had Android app. Project archived June 2025. |
| Kee / Tusk / ChromeKeePass | 471 / 519 / N/A | These are Chrome extensions for KeePass, not standalone password managers. |
| CoraleVault | N/A | Desktop only. No Android app. |
| GetPassX | N/A | Windows desktop only. No Android app. |
| VaultBox | N/A | Desktop only (local Bitwarden fork). No Android app. |
| KeyFlow | N/A | Browser extension only. No Android app. |
| OPM | N/A | No Android app. |
-
KeePassXC -- Best fully offline option. ANSSI-certified. Highest community engagement. The
.kdbxecosystem provides mature Android (KeePassDX) and iOS (KeePassium) apps. -
Bitwarden -- Best cloud-synced option. Most polished cross-platform experience. Seamless Chrome integration with the highest number of ratings.
-
Proton Pass -- Best Chrome extension rating (4.8). Strongest privacy credentials (Swiss-hosted, E2E encryption, by Proton Mail team).
-
LessPass -- Best if you want zero storage concerns. Stateless, no database, no sync, works everywhere identically.
-
KeePass (Classic) -- Best if you value maximum maturity (22 years) and Windows-native design. Requires community plugins for Chrome integration.