AS$ASSAYnew$18.1K+56.9%CU$CUBSnew$137K+3006.0%BO$BOLTnew$13.5K+50.9%$KIMIBLTnew$70.7K+31.1%$XTOnew$24.8M+59028.0%BT$BTCnew$128K+36.3%XO$XOTnew$187K+8.6%SO$Sojonew$36.5K+204.0%$SOJOnew$154K+737.0%SO$Sojonew$49.7K+590.0%TU$TURTLEnew$10.7K+131.0%SO$SOJOnew$24.4K+239.0%DO$DOUPInew$41.3K+1248.0%$.AiTownnew$20.5K+15.1%SO$SOJOnew$15.1K+72.3%$MoonCoinnew$18.5K+17.2%TH$THUNDRnew$23.1K$ASTEROIDnew$50.3K+35.6%SO$Sojonew$22.4K+86.3%$KOBEnew$111K+163.0%SO$SOLVETnew$12.9K+46.1%$‮I4SSnew$503K+17.2%CL$CLOUTnew$73.6K+847.0%XP$XPLACEnew$49.2K+460.0%$SOLVETnew$58.8K+48.1%SO$Sojonew$21.1K+135.0%$Xnew$127K+204.0%$Sojonew$37.4K+307.0%$SOJOnew$175K+323.0%XP$XPLACEnew$30.1K+317.0%CL$CLOUTnew$29.2K+143.0%$Sojonew$53.2K+21.8%$VEIL$1.1M-20.5%$PAID$2.6M-2.6%$BATON$5.6M-10.1%$DARK$985K+42.8%$XTO$14.2M+38.9%$MISTAKE$774K-24.6%$HOOKED$981K-26.5%$E/ACC$403K-8.1%
App blueprint · 14 Oct 2026

keepassxreboot/keepassxc

KeePassXC is a cross-platform community-driven port of the Windows application “KeePass Password Safe”.

Template-written 77 evidence items GPL-3.0REA + LIEF read 3 executables732 source files scanned
What this means for you

keepassxc has no known tracking or crash-reporting libraries, and its code names 25 outside services.E1E6E24E42

  • It's open source under the GNU General Public License (from its LICENSE file) licence, so anyone can read and check its code.E2
  • No tracking SDKs found: None of its dependencies is a known analytics, telemetry or crash-reporting library.E1
  • We opened the official download (keepassxc-cli.exe) without running it: 44 web addresses built in, a code signature.E66E68E69

What it is

  • The project describes itself as: “KeePassXC is a cross-platform community-driven port of the Windows application “KeePass Password Safe”.”E1
  • It's written mainly in C++ (files: h, cpp, ts, xml).E1
  • The latest release (2.7.12) has downloads for Linux, Windows and macOS.E4
  • 29219 people starred it on GitHub; the code was last updated 2026-10-14.E3

Where your data goes

Not identifiedServices we don't have in our list yet. 25
github.comnot identified 312×E6E24E42
haveibeenpwned.comnot identified 183×E8E22E49
www.yubico.comnot identified 88×E9E25E47
onlykey.ionot identified 81×E10E26E48
www.serif.comnot identified 38×E32E46
crl.sectigo.comnot identified 12×E35E54E60
crt.sectigo.comnot identified 12×E36E55E61
ocsp.sectigo.comnot identified 12×E37E56E62
sodipodi.sourceforge.netnot identified 8×E30E44
www.inkscape.orgnot identified 8×E31E45
sectigo.comnot identified 6×E38E57E63
doc.qt.ionot identified 5×E11
api.github.comnot identified 3×E21E29E43
api.pwnedpasswords.comnot identified 3×E20E27E50
chromewebstore.google.comnot identified 3×E17E34E53
crl.usertrust.comnot identified 3×E39E58E64
icons.duckduckgo.comnot identified 3×E19E28E51
microsoftedge.microsoft.comnot identified 3×E18E33E52
ocsp.usertrust.comnot identified 3×E40E59E65
exemple.comnot identified 2×E13
ejemplo.comnot identified 1×E12
esempio.comnot identified 1×E14
ornek.comnot identified 1×E16
pavyzdys.ltnot identified 1×E15
timestamp.sectigo.comnot identified 1×E5

What it can do on your computer

No tracking SDKs found

None of its dependencies is a known analytics, telemetry or crash-reporting library. Signals: dependency scan.E1

dependency scan

Loads extra code

It can load code libraries while running (often graphics drivers, plugins or scripts). Signals: LoadLibraryW.E67E71E75

LoadLibraryW

The app you download

We downloaded KeePassXC-2.7.12-Win64-LegacyWindows.zip (67.9 MB) from the project's latest release and read it without running it.

keepassxc-cli.exe

Format
PE · 9.4 MB
Signature
code-signed
Libraries
23: ADVAPI32.dll, HID.DLL, KERNEL32.dll, Qt5Concurrent.dll, Qt5Core.dll, Qt5Gui.dll
Loads code
LoadLibraryW
Web addresses
19: haveibeenpwned.com, keepassxc.org, github.com, www.yubico.com, onlykey.io, api.pwnedpasswords.com, icons.duckduckgo.com, api.github.com, sodipodi.sourceforge.net, www.inkscape.org, www.serif.com, microsoftedge.microsoft.com, chromewebstore.google.com, crl.sectigo.com, crt.sectigo.com, ocsp.sectigo.com, sectigo.com, crl.usertrust.com, ocsp.usertrust.com

E66E67E68E69

KeePassXC.exe

Format
PE · 9.3 MB
Signature
code-signed
Libraries
22: ADVAPI32.dll, HID.DLL, KERNEL32.dll, Qt5Concurrent.dll, Qt5Core.dll, Qt5Gui.dll
Loads code
LoadLibraryW
Web addresses
19: keepassxc.org, github.com, api.github.com, sodipodi.sourceforge.net, www.inkscape.org, www.serif.com, www.yubico.com, onlykey.io, haveibeenpwned.com, api.pwnedpasswords.com, icons.duckduckgo.com, microsoftedge.microsoft.com, chromewebstore.google.com, crl.sectigo.com, crt.sectigo.com, ocsp.sectigo.com, sectigo.com, crl.usertrust.com, ocsp.usertrust.com

E70E71E72E73

keepassxc-proxy.exe

Format
PE · 0.2 MB
Signature
code-signed
Libraries
8: KERNEL32.dll, Qt5Core.dll, Qt5Network.dll, WS2_32.dll, libbotan-3.dll, libgcc_s_seh-1.dll
Loads code
LoadLibraryW
Web addresses
6: crl.sectigo.com, crt.sectigo.com, ocsp.sectigo.com, sectigo.com, crl.usertrust.com, ocsp.usertrust.com

E74E75E76E77

The latest release (2.7.12) has downloads for Linux, Windows, macOS.

Evidence

Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.

E1
Repository: keepassxreboot/keepassxc
KeePassXC is a cross-platform community-driven port of the Windows application “KeePass Password Safe”.
GitHub description · https://github.com/keepassxreboot/keepassxc
E2
Licence: GNU General Public License (from its LICENSE file)
GitHub license · https://github.com/keepassxreboot/keepassxc
E3
29219 stars, last push 2026-10-14
GitHub activity · https://github.com/keepassxreboot/keepassxc
E4
Latest release 2.7.12 (2026-03-10) with 27 files
GitHub release · https://github.com/keepassxreboot/keepassxc/releases/tag/2.7.12
E5
Web address in source: timestamp.sectigo.com
release-tool.py @ 675:42 · “timestamp.sectigo.com” · source scan
E6
Web address in source: github.com/linuxdeploy/linuxdeploy/releases/download/continuous/
release-tool.py @ 915:14 · “github.com/linuxdeploy/linuxdeploy/releases/download/continuous/” · source scan
E7
Web address in source: keepassxc.org/
release-tool.py @ 1326:81 · “keepassxc.org/” · source scan
E8
Web address in source: haveibeenpwned.com/Passwords.
share/translations/keepassxc_ar.ts @ 7728:178 · “haveibeenpwned.com/Passwords.” · source scan
E9
Web address in source: www.yubico.com/
share/translations/keepassxc_ar.ts @ 10693:56 · “www.yubico.com/” · source scan
E10
Web address in source: onlykey.io
share/translations/keepassxc_ar.ts @ 10693:127 · “onlykey.io” · source scan
E11
Web address in source: doc.qt.io/qt-5/qdatetime.html
share/translations/keepassxc_ca.ts @ 319:235 · “doc.qt.io/qt-5/qdatetime.html” · source scan
E12
Web address in source: ejemplo.com
share/translations/keepassxc_es.ts @ 1280:60 · “ejemplo.com” · source scan
E13
Web address in source: exemple.com
share/translations/keepassxc_fr.ts @ 1278:65 · “exemple.com” · source scan
E14
Web address in source: esempio.com
share/translations/keepassxc_it.ts @ 1270:63 · “esempio.com” · source scan
E15
Web address in source: pavyzdys.lt/
share/translations/keepassxc_lt.ts @ 1265:49 · “pavyzdys.lt/” · source scan
E16
Web address in source: ornek.com
share/translations/keepassxc_tr.ts @ 1278:50 · “ornek.com” · source scan
E17
Web address in source: chromewebstore.google.com/detail/keepassxc-browser/oboonakemofpalcgghocfoadofidj
src/browser/BrowserSettingsWidget.cpp @ 38:29 · “chromewebstore.google.com/detail/keepassxc-browser/oboonakemofpalcgghocfoadofidj” · source scan
E18
Web address in source: microsoftedge.microsoft.com/addons/detail/pdffhmdngciaglkoonimfcmckehcpafo
src/browser/BrowserSettingsWidget.cpp @ 40:29 · “microsoftedge.microsoft.com/addons/detail/pdffhmdngciaglkoonimfcmckehcpafo” · source scan
E19
Web address in source: icons.duckduckgo.com
src/gui/IconDownloader.cpp @ 92:34 · “icons.duckduckgo.com” · source scan
E20
Web address in source: api.pwnedpasswords.com/range/
src/networking/HibpDownloader.cpp @ 100:35 · “api.pwnedpasswords.com/range/” · source scan
E21
Web address in source: api.github.com/repos/keepassxreboot/keepassxc/releases
src/networking/UpdateChecker.cpp @ 58:38 · “api.github.com/repos/keepassxreboot/keepassxc/releases” · source scan
E22
Web address inside the released app: haveibeenpwned.com/Passwords.
keepassxc-cli.exe @ byte 0x3e95d1 · “haveibeenpwned.com/Passwords.” · string scan
E23
Web address inside the released app: keepassxc.org/
keepassxc-cli.exe @ byte 0x40f902 · “keepassxc.org/” · string scan
E24
Web address inside the released app: github.com/keepassxreboot/keepassxc/issues
keepassxc-cli.exe @ byte 0x40fa61 · “github.com/keepassxreboot/keepassxc/issues” · string scan
E25
Web address inside the released app: www.yubico.com/
keepassxc-cli.exe @ byte 0x424439 · “www.yubico.com/” · string scan
E26
Web address inside the released app: onlykey.io
keepassxc-cli.exe @ byte 0x42446a · “onlykey.io” · string scan
E27
Web address inside the released app: api.pwnedpasswords.com/range/
keepassxc-cli.exe @ byte 0x42d0c0 · “api.pwnedpasswords.com/range/” · string scan
E28
Web address inside the released app: icons.duckduckgo.com
keepassxc-cli.exe @ byte 0x42d44b · “icons.duckduckgo.com” · string scan
E29
Web address inside the released app: api.github.com/repos/keepassxreboot/keepassxc/releases
keepassxc-cli.exe @ byte 0x42d7c0 · “api.github.com/repos/keepassxreboot/keepassxc/releases” · string scan
E30
Web address inside the released app: sodipodi.sourceforge.net/DTD/sodipodi-0.dtd
keepassxc-cli.exe @ byte 0x432597 · “sodipodi.sourceforge.net/DTD/sodipodi-0.dtd” · string scan
E31
Web address inside the released app: www.inkscape.org/namespaces/inkscape
keepassxc-cli.exe @ byte 0x4325db · “www.inkscape.org/namespaces/inkscape” · string scan
E32
Web address inside the released app: www.serif.com/
keepassxc-cli.exe @ byte 0x43317f · “www.serif.com/” · string scan
E33
Web address inside the released app: microsoftedge.microsoft.com/addons/detail/pdffhmdngciaglkoonimfcmckehcpafo
keepassxc-cli.exe @ byte 0x60bb79 · “microsoftedge.microsoft.com/addons/detail/pdffhmdngciaglkoonimfcmckehcpafo” · string scan
E34
Web address inside the released app: chromewebstore.google.com/detail/keepassxc-browser/oboonakemofpalcgghocfoadofidj
keepassxc-cli.exe @ byte 0x60bbe9 · “chromewebstore.google.com/detail/keepassxc-browser/oboonakemofpalcgghocfoadofidj” · string scan
E35
Web address inside the released app: crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl0
keepassxc-cli.exe @ byte 0x8ef448 · “crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl0” · string scan
E36
Web address inside the released app: crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0
keepassxc-cli.exe @ byte 0x8ef4a0 · “crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0” · string scan
E37
Web address inside the released app: ocsp.sectigo.com
keepassxc-cli.exe @ byte 0x8ef4e8 · “ocsp.sectigo.com” · string scan
E38
Web address inside the released app: sectigo.com/CPS0
keepassxc-cli.exe @ byte 0x8efae5 · “sectigo.com/CPS0” · string scan
E39
Web address inside the released app: crl.usertrust.com/USERTrustRSACertificationAuthority.crl05
keepassxc-cli.exe @ byte 0x8f1261 · “crl.usertrust.com/USERTrustRSACertificationAuthority.crl05” · string scan
E40
Web address inside the released app: ocsp.usertrust.com
keepassxc-cli.exe @ byte 0x8f12be · “ocsp.usertrust.com” · string scan
E41
Web address inside the released app: keepassxc.org/donate
KeePassXC.exe @ byte 0x3c0c97 · “keepassxc.org/donate” · string scan
E42
Web address inside the released app: github.com/keepassxreboot/keepassxc/issues
KeePassXC.exe @ byte 0x3c0cb8 · “github.com/keepassxreboot/keepassxc/issues” · string scan
E43
Web address inside the released app: api.github.com/repos/keepassxreboot/keepassxc/releases
KeePassXC.exe @ byte 0x3c73e0 · “api.github.com/repos/keepassxreboot/keepassxc/releases” · string scan
E44
Web address inside the released app: sodipodi.sourceforge.net/DTD/sodipodi-0.dtd
KeePassXC.exe @ byte 0x3cb297 · “sodipodi.sourceforge.net/DTD/sodipodi-0.dtd” · string scan
E45
Web address inside the released app: www.inkscape.org/namespaces/inkscape
KeePassXC.exe @ byte 0x3cb2db · “www.inkscape.org/namespaces/inkscape” · string scan
E46
Web address inside the released app: www.serif.com/
KeePassXC.exe @ byte 0x3cbe7f · “www.serif.com/” · string scan
E47
Web address inside the released app: www.yubico.com/
KeePassXC.exe @ byte 0x427279 · “www.yubico.com/” · string scan
E48
Web address inside the released app: onlykey.io
KeePassXC.exe @ byte 0x4272aa · “onlykey.io” · string scan
E49
Web address inside the released app: haveibeenpwned.com
KeePassXC.exe @ byte 0x42a753 · “haveibeenpwned.com” · string scan
E50
Web address inside the released app: api.pwnedpasswords.com/range/
KeePassXC.exe @ byte 0x42ec80 · “api.pwnedpasswords.com/range/” · string scan
E51
Web address inside the released app: icons.duckduckgo.com
KeePassXC.exe @ byte 0x42ed0b · “icons.duckduckgo.com” · string scan
E52
Web address inside the released app: microsoftedge.microsoft.com/addons/detail/pdffhmdngciaglkoonimfcmckehcpafo
KeePassXC.exe @ byte 0x4407b9 · “microsoftedge.microsoft.com/addons/detail/pdffhmdngciaglkoonimfcmckehcpafo” · string scan
E53
Web address inside the released app: chromewebstore.google.com/detail/keepassxc-browser/oboonakemofpalcgghocfoadofidj
KeePassXC.exe @ byte 0x440829 · “chromewebstore.google.com/detail/keepassxc-browser/oboonakemofpalcgghocfoadofidj” · string scan
E54
Web address inside the released app: crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl0
KeePassXC.exe @ byte 0x8dcbb8 · “crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl0” · string scan
E55
Web address inside the released app: crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0
KeePassXC.exe @ byte 0x8dcc10 · “crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0” · string scan
E56
Web address inside the released app: ocsp.sectigo.com
KeePassXC.exe @ byte 0x8dcc58 · “ocsp.sectigo.com” · string scan
E57
Web address inside the released app: sectigo.com/CPS0
KeePassXC.exe @ byte 0x8dd255 · “sectigo.com/CPS0” · string scan
E58
Web address inside the released app: crl.usertrust.com/USERTrustRSACertificationAuthority.crl05
KeePassXC.exe @ byte 0x8de9d2 · “crl.usertrust.com/USERTrustRSACertificationAuthority.crl05” · string scan
E59
Web address inside the released app: ocsp.usertrust.com
KeePassXC.exe @ byte 0x8dea2f · “ocsp.usertrust.com” · string scan
E60
Web address inside the released app: crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl0
keepassxc-proxy.exe @ byte 0x2c498 · “crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl0” · string scan
E61
Web address inside the released app: crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0
keepassxc-proxy.exe @ byte 0x2c4f0 · “crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0” · string scan
E62
Web address inside the released app: ocsp.sectigo.com
keepassxc-proxy.exe @ byte 0x2c538 · “ocsp.sectigo.com” · string scan
E63
Web address inside the released app: sectigo.com/CPS0
keepassxc-proxy.exe @ byte 0x2cb35 · “sectigo.com/CPS0” · string scan
E64
Web address inside the released app: crl.usertrust.com/USERTrustRSACertificationAuthority.crl05
keepassxc-proxy.exe @ byte 0x2e2b1 · “crl.usertrust.com/USERTrustRSACertificationAuthority.crl05” · string scan
E65
Web address inside the released app: ocsp.usertrust.com
keepassxc-proxy.exe @ byte 0x2e30e · “ocsp.usertrust.com” · string scan
E66
REA identified keepassxc-cli.exe as pe (sha256 3b59ef25a3af…)
keepassxc-cli.exe · “3b59ef25a3afa9c2” · REA inspect-artifact
E67
keepassxc-cli.exe can load code libraries at runtime (LoadLibraryW)
keepassxc-cli.exe · “LoadLibraryW” · LIEF import table
E68
keepassxc-cli.exe links 23 system libraries, including WS2_32.dll
keepassxc-cli.exe · “ADVAPI32.dll, HID.DLL, KERNEL32.dll, Qt5Concurrent.dll” · LIEF
E69
keepassxc-cli.exe is code-signed
keepassxc-cli.exe · “signature” · LIEF
E70
REA identified KeePassXC.exe as pe (sha256 4a10976ca28b…)
KeePassXC.exe · “4a10976ca28b07d3” · REA inspect-artifact
E71
KeePassXC.exe can load code libraries at runtime (LoadLibraryW)
KeePassXC.exe · “LoadLibraryW” · LIEF import table
E72
KeePassXC.exe links 22 system libraries, including WS2_32.dll
KeePassXC.exe · “ADVAPI32.dll, HID.DLL, KERNEL32.dll, Qt5Concurrent.dll” · LIEF
E73
KeePassXC.exe is code-signed
KeePassXC.exe · “signature” · LIEF
E74
REA identified keepassxc-proxy.exe as pe (sha256 dd66c94befad…)
keepassxc-proxy.exe · “dd66c94befad35a4” · REA inspect-artifact
E75
keepassxc-proxy.exe can load code libraries at runtime (LoadLibraryW)
keepassxc-proxy.exe · “LoadLibraryW” · LIEF import table
E76
keepassxc-proxy.exe links 8 system libraries, including WS2_32.dll
keepassxc-proxy.exe · “KERNEL32.dll, Qt5Core.dll, Qt5Network.dll, WS2_32.dll” · LIEF
E77
keepassxc-proxy.exe is code-signed
keepassxc-proxy.exe · “signature” · LIEF

Limits

  • We read the app's code and its official download without running it. Code that exists may never run for you, and behaviour decided by servers is invisible.
  • Web addresses and libraries show what the app can talk to or do, not that it does so every time you use it.
  • Only open-source apps with a public GitHub repository are analysed. The release we inspected may differ from builds in app stores.
  • This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.

Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id qCjOxhwG.