What it is
The project describes itself as: “KeePassXC is a cross-platform community-driven port of the Windows application “KeePass Password Safe”.”E1 It's written mainly in C++ (files: h, cpp, ts, xml).E1 The latest release (2.7.12) has downloads for Linux, Windows and macOS.E4 29219 people starred it on GitHub; the code was last updated 2026-10-14.E3
Where your data goes
Not identified Services we don't have in our list yet.
25
github.com not identified
312×E6 E24 E42
haveibeenpwned.com not identified
183×E8 E22 E49
www.yubico.com not identified
88×E9 E25 E47
onlykey.io not identified
81×E10 E26 E48
www.serif.com not identified
38×E32 E46
crl.sectigo.com not identified
12×E35 E54 E60
crt.sectigo.com not identified
12×E36 E55 E61
ocsp.sectigo.com not identified
12×E37 E56 E62
sodipodi.sourceforge.net not identified
8×E30 E44
www.inkscape.org not identified
8×E31 E45
sectigo.com not identified
6×E38 E57 E63
doc.qt.io not identified
5×E11
api.github.com not identified
3×E21 E29 E43
api.pwnedpasswords.com not identified
3×E20 E27 E50
chromewebstore.google.com not identified
3×E17 E34 E53
crl.usertrust.com not identified
3×E39 E58 E64
icons.duckduckgo.com not identified
3×E19 E28 E51
microsoftedge.microsoft.com not identified
3×E18 E33 E52
ocsp.usertrust.com not identified
3×E40 E59 E65
exemple.com not identified
2×E13
ejemplo.com not identified
1×E12
esempio.com not identified
1×E14
ornek.com not identified
1×E16
pavyzdys.lt not identified
1×E15
timestamp.sectigo.com not identified
1×E5
What it can do on your computer
No tracking SDKs found
None of its dependencies is a known analytics, telemetry or crash-reporting library. Signals: dependency scan.E1
dependency scan
Loads extra code
It can load code libraries while running (often graphics drivers, plugins or scripts). Signals: LoadLibraryW.E67 E71 E75
LoadLibraryW
The app you download
We downloaded KeePassXC-2.7.12-Win64-LegacyWindows.zip (67.9 MB) from the project's latest release and read it without running it.
keepassxc-cli.exe
Format PE · 9.4 MB
Signature code-signed
Libraries 23: ADVAPI32.dll, HID.DLL, KERNEL32.dll, Qt5Concurrent.dll, Qt5Core.dll, Qt5Gui.dll
Loads code LoadLibraryW
Web addresses 19: haveibeenpwned.com, keepassxc.org, github.com, www.yubico.com, onlykey.io, api.pwnedpasswords.com, icons.duckduckgo.com, api.github.com, sodipodi.sourceforge.net, www.inkscape.org, www.serif.com, microsoftedge.microsoft.com, chromewebstore.google.com, crl.sectigo.com, crt.sectigo.com, ocsp.sectigo.com, sectigo.com, crl.usertrust.com, ocsp.usertrust.com
E66 E67 E68 E69
KeePassXC.exe
Format PE · 9.3 MB
Signature code-signed
Libraries 22: ADVAPI32.dll, HID.DLL, KERNEL32.dll, Qt5Concurrent.dll, Qt5Core.dll, Qt5Gui.dll
Loads code LoadLibraryW
Web addresses 19: keepassxc.org, github.com, api.github.com, sodipodi.sourceforge.net, www.inkscape.org, www.serif.com, www.yubico.com, onlykey.io, haveibeenpwned.com, api.pwnedpasswords.com, icons.duckduckgo.com, microsoftedge.microsoft.com, chromewebstore.google.com, crl.sectigo.com, crt.sectigo.com, ocsp.sectigo.com, sectigo.com, crl.usertrust.com, ocsp.usertrust.com
E70 E71 E72 E73
keepassxc-proxy.exe
Format PE · 0.2 MB
Signature code-signed
Libraries 8: KERNEL32.dll, Qt5Core.dll, Qt5Network.dll, WS2_32.dll, libbotan-3.dll, libgcc_s_seh-1.dll
Loads code LoadLibraryW
Web addresses 6: crl.sectigo.com, crt.sectigo.com, ocsp.sectigo.com, sectigo.com, crl.usertrust.com, ocsp.usertrust.com
E74 E75 E76 E77
The latest release (2.7.12) has downloads for Linux, Windows, macOS.
Evidence
Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.
E1
Repository: keepassxreboot/keepassxc
KeePassXC is a cross-platform community-driven port of the Windows application “KeePass Password Safe”.
GitHub description · https://github.com/keepassxreboot/keepassxc
E2
Licence: GNU General Public License (from its LICENSE file)
GitHub license · https://github.com/keepassxreboot/keepassxc
E3
29219 stars, last push 2026-10-14
GitHub activity · https://github.com/keepassxreboot/keepassxc
E4
Latest release 2.7.12 (2026-03-10) with 27 files
GitHub release · https://github.com/keepassxreboot/keepassxc/releases/tag/2.7.12
E5
Web address in source: timestamp.sectigo.com
release-tool.py @ 675:42 · “timestamp.sectigo.com” · source scan
E6
Web address in source: github.com/linuxdeploy/linuxdeploy/releases/download/continuous/
release-tool.py @ 915:14 · “github.com/linuxdeploy/linuxdeploy/releases/download/continuous/” · source scan
E7
Web address in source: keepassxc.org/
release-tool.py @ 1326:81 · “keepassxc.org/” · source scan
E8
Web address in source: haveibeenpwned.com/Passwords.
share/translations/keepassxc_ar.ts @ 7728:178 · “haveibeenpwned.com/Passwords.” · source scan
E9
Web address in source: www.yubico.com/
share/translations/keepassxc_ar.ts @ 10693:56 · “www.yubico.com/” · source scan
E10
Web address in source: onlykey.io
share/translations/keepassxc_ar.ts @ 10693:127 · “onlykey.io” · source scan
E11
Web address in source: doc.qt.io/qt-5/qdatetime.html
share/translations/keepassxc_ca.ts @ 319:235 · “doc.qt.io/qt-5/qdatetime.html” · source scan
E12
Web address in source: ejemplo.com
share/translations/keepassxc_es.ts @ 1280:60 · “ejemplo.com” · source scan
E13
Web address in source: exemple.com
share/translations/keepassxc_fr.ts @ 1278:65 · “exemple.com” · source scan
E14
Web address in source: esempio.com
share/translations/keepassxc_it.ts @ 1270:63 · “esempio.com” · source scan
E15
Web address in source: pavyzdys.lt/
share/translations/keepassxc_lt.ts @ 1265:49 · “pavyzdys.lt/” · source scan
E16
Web address in source: ornek.com
share/translations/keepassxc_tr.ts @ 1278:50 · “ornek.com” · source scan
E17
Web address in source: chromewebstore.google.com/detail/keepassxc-browser/oboonakemofpalcgghocfoadofidj
src/browser/BrowserSettingsWidget.cpp @ 38:29 · “chromewebstore.google.com/detail/keepassxc-browser/oboonakemofpalcgghocfoadofidj” · source scan
E18
Web address in source: microsoftedge.microsoft.com/addons/detail/pdffhmdngciaglkoonimfcmckehcpafo
src/browser/BrowserSettingsWidget.cpp @ 40:29 · “microsoftedge.microsoft.com/addons/detail/pdffhmdngciaglkoonimfcmckehcpafo” · source scan
E19
Web address in source: icons.duckduckgo.com
src/gui/IconDownloader.cpp @ 92:34 · “icons.duckduckgo.com” · source scan
E20
Web address in source: api.pwnedpasswords.com/range/
src/networking/HibpDownloader.cpp @ 100:35 · “api.pwnedpasswords.com/range/” · source scan
E21
Web address in source: api.github.com/repos/keepassxreboot/keepassxc/releases
src/networking/UpdateChecker.cpp @ 58:38 · “api.github.com/repos/keepassxreboot/keepassxc/releases” · source scan
E22
Web address inside the released app: haveibeenpwned.com/Passwords.
keepassxc-cli.exe @ byte 0x3e95d1 · “haveibeenpwned.com/Passwords.” · string scan
E23
Web address inside the released app: keepassxc.org/
keepassxc-cli.exe @ byte 0x40f902 · “keepassxc.org/” · string scan
E24
Web address inside the released app: github.com/keepassxreboot/keepassxc/issues
keepassxc-cli.exe @ byte 0x40fa61 · “github.com/keepassxreboot/keepassxc/issues” · string scan
E25
Web address inside the released app: www.yubico.com/
keepassxc-cli.exe @ byte 0x424439 · “www.yubico.com/” · string scan
E26
Web address inside the released app: onlykey.io
keepassxc-cli.exe @ byte 0x42446a · “onlykey.io” · string scan
E27
Web address inside the released app: api.pwnedpasswords.com/range/
keepassxc-cli.exe @ byte 0x42d0c0 · “api.pwnedpasswords.com/range/” · string scan
E28
Web address inside the released app: icons.duckduckgo.com
keepassxc-cli.exe @ byte 0x42d44b · “icons.duckduckgo.com” · string scan
E29
Web address inside the released app: api.github.com/repos/keepassxreboot/keepassxc/releases
keepassxc-cli.exe @ byte 0x42d7c0 · “api.github.com/repos/keepassxreboot/keepassxc/releases” · string scan
E30
Web address inside the released app: sodipodi.sourceforge.net/DTD/sodipodi-0.dtd
keepassxc-cli.exe @ byte 0x432597 · “sodipodi.sourceforge.net/DTD/sodipodi-0.dtd” · string scan
E31
Web address inside the released app: www.inkscape.org/namespaces/inkscape
keepassxc-cli.exe @ byte 0x4325db · “www.inkscape.org/namespaces/inkscape” · string scan
E32
Web address inside the released app: www.serif.com/
keepassxc-cli.exe @ byte 0x43317f · “www.serif.com/” · string scan
E33
Web address inside the released app: microsoftedge.microsoft.com/addons/detail/pdffhmdngciaglkoonimfcmckehcpafo
keepassxc-cli.exe @ byte 0x60bb79 · “microsoftedge.microsoft.com/addons/detail/pdffhmdngciaglkoonimfcmckehcpafo” · string scan
E34
Web address inside the released app: chromewebstore.google.com/detail/keepassxc-browser/oboonakemofpalcgghocfoadofidj
keepassxc-cli.exe @ byte 0x60bbe9 · “chromewebstore.google.com/detail/keepassxc-browser/oboonakemofpalcgghocfoadofidj” · string scan
E35
Web address inside the released app: crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl0
keepassxc-cli.exe @ byte 0x8ef448 · “crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl0” · string scan
E36
Web address inside the released app: crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0
keepassxc-cli.exe @ byte 0x8ef4a0 · “crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0” · string scan
E37
Web address inside the released app: ocsp.sectigo.com
keepassxc-cli.exe @ byte 0x8ef4e8 · “ocsp.sectigo.com” · string scan
E38
Web address inside the released app: sectigo.com/CPS0
keepassxc-cli.exe @ byte 0x8efae5 · “sectigo.com/CPS0” · string scan
E39
Web address inside the released app: crl.usertrust.com/USERTrustRSACertificationAuthority.crl05
keepassxc-cli.exe @ byte 0x8f1261 · “crl.usertrust.com/USERTrustRSACertificationAuthority.crl05” · string scan
E40
Web address inside the released app: ocsp.usertrust.com
keepassxc-cli.exe @ byte 0x8f12be · “ocsp.usertrust.com” · string scan
E41
Web address inside the released app: keepassxc.org/donate
KeePassXC.exe @ byte 0x3c0c97 · “keepassxc.org/donate” · string scan
E42
Web address inside the released app: github.com/keepassxreboot/keepassxc/issues
KeePassXC.exe @ byte 0x3c0cb8 · “github.com/keepassxreboot/keepassxc/issues” · string scan
E43
Web address inside the released app: api.github.com/repos/keepassxreboot/keepassxc/releases
KeePassXC.exe @ byte 0x3c73e0 · “api.github.com/repos/keepassxreboot/keepassxc/releases” · string scan
E44
Web address inside the released app: sodipodi.sourceforge.net/DTD/sodipodi-0.dtd
KeePassXC.exe @ byte 0x3cb297 · “sodipodi.sourceforge.net/DTD/sodipodi-0.dtd” · string scan
E45
Web address inside the released app: www.inkscape.org/namespaces/inkscape
KeePassXC.exe @ byte 0x3cb2db · “www.inkscape.org/namespaces/inkscape” · string scan
E46
Web address inside the released app: www.serif.com/
KeePassXC.exe @ byte 0x3cbe7f · “www.serif.com/” · string scan
E47
Web address inside the released app: www.yubico.com/
KeePassXC.exe @ byte 0x427279 · “www.yubico.com/” · string scan
E48
Web address inside the released app: onlykey.io
KeePassXC.exe @ byte 0x4272aa · “onlykey.io” · string scan
E49
Web address inside the released app: haveibeenpwned.com
KeePassXC.exe @ byte 0x42a753 · “haveibeenpwned.com” · string scan
E50
Web address inside the released app: api.pwnedpasswords.com/range/
KeePassXC.exe @ byte 0x42ec80 · “api.pwnedpasswords.com/range/” · string scan
E51
Web address inside the released app: icons.duckduckgo.com
KeePassXC.exe @ byte 0x42ed0b · “icons.duckduckgo.com” · string scan
E52
Web address inside the released app: microsoftedge.microsoft.com/addons/detail/pdffhmdngciaglkoonimfcmckehcpafo
KeePassXC.exe @ byte 0x4407b9 · “microsoftedge.microsoft.com/addons/detail/pdffhmdngciaglkoonimfcmckehcpafo” · string scan
E53
Web address inside the released app: chromewebstore.google.com/detail/keepassxc-browser/oboonakemofpalcgghocfoadofidj
KeePassXC.exe @ byte 0x440829 · “chromewebstore.google.com/detail/keepassxc-browser/oboonakemofpalcgghocfoadofidj” · string scan
E54
Web address inside the released app: crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl0
KeePassXC.exe @ byte 0x8dcbb8 · “crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl0” · string scan
E55
Web address inside the released app: crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0
KeePassXC.exe @ byte 0x8dcc10 · “crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0” · string scan
E56
Web address inside the released app: ocsp.sectigo.com
KeePassXC.exe @ byte 0x8dcc58 · “ocsp.sectigo.com” · string scan
E57
Web address inside the released app: sectigo.com/CPS0
KeePassXC.exe @ byte 0x8dd255 · “sectigo.com/CPS0” · string scan
E58
Web address inside the released app: crl.usertrust.com/USERTrustRSACertificationAuthority.crl05
KeePassXC.exe @ byte 0x8de9d2 · “crl.usertrust.com/USERTrustRSACertificationAuthority.crl05” · string scan
E59
Web address inside the released app: ocsp.usertrust.com
KeePassXC.exe @ byte 0x8dea2f · “ocsp.usertrust.com” · string scan
E60
Web address inside the released app: crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl0
keepassxc-proxy.exe @ byte 0x2c498 · “crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl0” · string scan
E61
Web address inside the released app: crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0
keepassxc-proxy.exe @ byte 0x2c4f0 · “crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0” · string scan
E62
Web address inside the released app: ocsp.sectigo.com
keepassxc-proxy.exe @ byte 0x2c538 · “ocsp.sectigo.com” · string scan
E63
Web address inside the released app: sectigo.com/CPS0
keepassxc-proxy.exe @ byte 0x2cb35 · “sectigo.com/CPS0” · string scan
E64
Web address inside the released app: crl.usertrust.com/USERTrustRSACertificationAuthority.crl05
keepassxc-proxy.exe @ byte 0x2e2b1 · “crl.usertrust.com/USERTrustRSACertificationAuthority.crl05” · string scan
E65
Web address inside the released app: ocsp.usertrust.com
keepassxc-proxy.exe @ byte 0x2e30e · “ocsp.usertrust.com” · string scan
E66
REA identified keepassxc-cli.exe as pe (sha256 3b59ef25a3af…)
keepassxc-cli.exe · “3b59ef25a3afa9c2” · REA inspect-artifact
E67
keepassxc-cli.exe can load code libraries at runtime (LoadLibraryW)
keepassxc-cli.exe · “LoadLibraryW” · LIEF import table
E68
keepassxc-cli.exe links 23 system libraries, including WS2_32.dll
keepassxc-cli.exe · “ADVAPI32.dll, HID.DLL, KERNEL32.dll, Qt5Concurrent.dll” · LIEF
E69
keepassxc-cli.exe is code-signed
keepassxc-cli.exe · “signature” · LIEF
E70
REA identified KeePassXC.exe as pe (sha256 4a10976ca28b…)
KeePassXC.exe · “4a10976ca28b07d3” · REA inspect-artifact
E71
KeePassXC.exe can load code libraries at runtime (LoadLibraryW)
KeePassXC.exe · “LoadLibraryW” · LIEF import table
E72
KeePassXC.exe links 22 system libraries, including WS2_32.dll
KeePassXC.exe · “ADVAPI32.dll, HID.DLL, KERNEL32.dll, Qt5Concurrent.dll” · LIEF
E73
KeePassXC.exe is code-signed
KeePassXC.exe · “signature” · LIEF
E74
REA identified keepassxc-proxy.exe as pe (sha256 dd66c94befad…)
keepassxc-proxy.exe · “dd66c94befad35a4” · REA inspect-artifact
E75
keepassxc-proxy.exe can load code libraries at runtime (LoadLibraryW)
keepassxc-proxy.exe · “LoadLibraryW” · LIEF import table
E76
keepassxc-proxy.exe links 8 system libraries, including WS2_32.dll
keepassxc-proxy.exe · “KERNEL32.dll, Qt5Core.dll, Qt5Network.dll, WS2_32.dll” · LIEF
E77
keepassxc-proxy.exe is code-signed
keepassxc-proxy.exe · “signature” · LIEF
Limits
We read the app's code and its official download without running it. Code that exists may never run for you, and behaviour decided by servers is invisible. Web addresses and libraries show what the app can talk to or do, not that it does so every time you use it. Only open-source apps with a public GitHub repository are analysed. The release we inspected may differ from builds in app stores.
This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.
Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id qCjOxhwG.