Table of Contents
If you use KeePassXC on your Mac, Windows PC, or Linux machine and want the same experience on your iPhone, you will quickly discover that KeePassXC does not have an iOS app. There is no KeePassXC for iPhone. There is no KeePassXC for iPad. The project is desktop-only by design, and there are no official plans to change that.
The good news is that KeePassXC uses the open KDBX format – the same format at the heart of the entire KeePass & Open Standards ecosystem. Because KDBX is an open standard, several iOS apps can open, edit, and sync the exact same database file you use in KeePassXC on your desktop. You do not need to convert anything, export anything, or abandon your existing setup. You just need the right iOS app.
Using the original KeePass 2.x on Windows rather than KeePassXC? See our guide to KeePass for iPhone.
This guide covers the best KeePass-compatible apps for iPhone and iPad, explains how they compare, and walks you through syncing your KeePassXC database to your mobile device.
Why KeePassXC Has No Mobile App
KeePassXC is a community-driven, open-source project built with the Qt framework. Its developers have focused exclusively on creating the best desktop KeePass client for Windows, macOS, and Linux. Building and maintaining native mobile applications would require a different technology stack, different expertise, and significantly more resources than the project currently has.
This is not a limitation of the KeePass ecosystem – it is a deliberate focus. KeePassXC does one thing and does it extremely well: desktop password management with browser integration, SSH agent support, Auto-Type, and hardware key compatibility. Mobile access is left to dedicated iOS and Android apps that specialize in their respective platforms.
The KDBX format makes this separation seamless. Your database file works identically in KeePassXC and in any compatible iOS app. There is no sync service to configure between them – just a shared file.
What to Look for in a KeePass iOS App
Before evaluating individual apps, here are the features that matter most when choosing a KeePass client for iPhone or iPad:
KDBX 4.0 support – The current version of the KeePass database format. If your KeePassXC database uses Argon2 key derivation or ChaCha20 encryption (both are modern defaults), you need an app that supports KDBX 4.0. All three apps reviewed below do.
iOS AutoFill – Apple provides a system-wide credential provider framework that allows password managers to fill usernames and passwords in Safari, apps, and any other context that requests credentials. This is the single most important usability feature on iOS. Without it, you are copying and pasting from the password manager manually.
Face ID and Touch ID – Biometric unlock means you do not have to type your master password every time you need a credential. The app encrypts a key using the Secure Enclave and unlocks your database with a biometric check.
Cloud sync – Your KDBX file needs to be accessible on both your desktop and your iPhone. iCloud Drive is the simplest option for Apple users. Google Drive is a strong cross-platform alternative. Some apps also support Dropbox, OneDrive, WebDAV, and SFTP.
TOTP support – Many KeePassXC users store time-based one-time passwords (TOTP codes) alongside their credentials. A good iOS app should generate these codes directly, eliminating the need for a separate authenticator app.
Reliability – The app must handle database locking, conflict resolution, and background behavior gracefully. A password manager that corrupts your database or loses edits is worse than no password manager at all.
The Best KeePass Apps for iPhone and iPad
PanicVault
Price: $4.99 one-time purchase Platforms: iOS, iPadOS, macOS KDBX support: 4.0 only
PanicVault is a native Apple password manager built from the ground up with SwiftUI. It is designed specifically for users who live in the Apple ecosystem and want a KeePass-compatible app that feels like a first-party Apple product.
PanicVault supports full KDBX 4.0 read and write, including Argon2 key derivation, AES-256 and ChaCha20 encryption, groups, custom fields, entry history, and file attachments. Your KeePassXC database opens without modification.
On iOS, PanicVault integrates with Apple’s credential provider framework for system-wide AutoFill. This means it fills credentials in Safari, in native apps, and in any browser or app that uses the standard iOS password autofill prompt. Face ID and Touch ID unlock is built in, and TOTP code generation is supported directly within each entry.
Sync works through iCloud Drive or Google Drive. Place your KDBX file in either service, and PanicVault keeps it synchronized across your iPhone, iPad, and Mac. There is no proprietary sync layer – it is your file on your cloud storage, accessible from any KeePass app on any platform.
The pricing model is a one-time purchase with no subscription. You pay once and own the app permanently, including future updates.
Strengths:
- Native Apple design that follows Human Interface Guidelines
- System-wide AutoFill in Safari and all apps
- Face ID and Touch ID biometric unlock
- TOTP code generation
- iCloud Drive and Google Drive sync
- One-time purchase – no subscription
- Full KDBX 4.0 compatibility with KeePassXC databases
- YubiKey challenge-response over NFC on iPhone, and over USB on Mac – the same format KeePassXC uses, included at no extra cost
Limitations:
- No YubiKey on iPad, over USB-C, or over Lightning (5Ci) – NFC on iPhone and USB on Mac only
- KDBX 4 only; older KDBX 3.1 databases must be converted first
- Not open source
- Apple platforms only (no Windows, Linux, or Android)
Best for: KeePassXC users on Apple devices who want a polished, native iOS experience with zero configuration complexity. PanicVault bridges the gap between KeePassXC’s data format and a modern mobile password manager.
Strongbox
Price: Freemium (free version for non-commercial use; Pro at $2.99/month, $24.99/year, or $124.99 lifetime on Strongbox’s website) Platforms: iOS, iPadOS, macOS KDBX support: KDB, KDBX 3.1, KDBX 4.0
Strongbox is a mature, feature-dense KeePass client that has been on the App Store for years. It offers the broadest feature set of any KeePass app on iOS.
Strongbox supports KDBX 4.0 along with older KDB (KeePass 1.x) and KDBX 3.1 formats. It reads and writes KeePassXC databases without issue. The app integrates with iOS AutoFill, supports Face ID and Touch ID, generates TOTP codes, and even offers an Apple Watch companion app for quick credential lookups.
Where Strongbox distinguishes itself is in sync options and power-user features. It supports iCloud Drive, Dropbox, Google Drive, OneDrive, WebDAV, and SFTP as built-in sync providers – more than PanicVault or KeePassium. It also includes a password audit (with Have I Been Pwned breach checks in Pro), YubiKey hardware key support (Pro), and automatic local backups. Its source code is published on GitHub under the AGPL-3.0 licence.
The trade-off is complexity and pricing. On iPhone and iPad, Strongbox’s free version includes AutoFill and TOTP codes, but Face ID and Touch ID unlock, YubiKey support, the Apple Watch app, and offline editing all require Pro, and the free version is for non-commercial use only. The interface is more complex than PanicVault’s, reflecting its larger feature surface.
Strengths:
- Most features of any iOS KeePass app
- Multiple sync providers (iCloud, Dropbox, Google Drive, OneDrive, WebDAV, SFTP)
- YubiKey hardware key support (Pro)
- Password audit, with breach checking in Pro
- Apple Watch companion app (Pro)
- Legacy KDB format support
- TOTP code generation, including in the free version
- Source code published under the AGPL-3.0
Limitations:
- Face ID and Touch ID unlock require Pro
- More complex interface with steeper learning curve
- Highest lifetime price of the three ($124.99 on Strongbox’s website)
- Free version is for non-commercial use only
Best for: Power users who need multiple sync providers, hardware key support, or password auditing. Ideal if you sync your KeePassXC database through a provider other than iCloud or Google Drive.
KeePassium
Price: Freemium (free for one database; Premium at €19.99/year, or $79.99 for the lifetime Pro app on the US App Store) Platforms: iOS, iPadOS (macOS via Catalyst) KDBX support: KDB, KDBX 3.1, KDBX 4.0
KeePassium is a KeePass client for iOS with a simpler interface and fewer options than Strongbox.
KeePassium supports KDBX 4.0 and reads KeePassXC databases without trouble. It integrates with iOS AutoFill, supports Face ID and Touch ID, and works with any cloud storage provider through the iOS Files framework (iCloud Drive, Dropbox, Google Drive, OneDrive, and others).
It has configurable timeouts for the app, the database, and the clipboard. KeePassium publishes its source code under the GPLv3, as Strongbox does under the AGPL-3.0, but there is no way to verify that either app’s App Store build was compiled from that code. KeePassium’s App Store listing says it has been independently audited by Cure53.
The free version handles one database and has basic AutoFill, Face ID and Touch ID, TOTP codes, and file attachments, but you pick each login from a list every time. Logins suggested above the keyboard (Quick AutoFill), saving new logins from AutoFill, YubiKey support, the password leak audit, and multiple databases need Premium (€19.99/year) or the lifetime Pro licence.
Strengths:
- Source code published under the GPLv3
- Simpler interface than Strongbox
- Configurable app, database, and clipboard timeouts
- Face ID and Touch ID support
- AutoFill integration
- Works with any iOS file provider for sync
Limitations:
- Free version is limited to one database and basic AutoFill: logins are not suggested above the keyboard, and saving new logins from AutoFill requires Premium
- macOS app is Catalyst-based (not fully native macOS experience)
- YubiKey support and the password audit require Premium
- Smaller development team than Strongbox
Best for: KeePassXC users with a single database who can live with basic AutoFill, or who are willing to pay for Premium.
Other Options Worth Mentioning
AuthPass is a cross-platform, open-source KeePass client built with Flutter. It runs on iOS, Android, Windows, macOS, and Linux. AuthPass supports KDBX 4.0, AutoFill, and biometric unlock. Its cross-platform nature means you get a consistent interface on every device, but the Flutter-based design does not feel native on iOS. Development activity has been slower than the three apps above.
KeePass Touch is an older iOS KeePass client that is still on the App Store and still receives updates. It reads and writes KeePass 1.x and 2.x files, unlocks with Face ID or Touch ID, and syncs with Dropbox and OneDrive, but its App Store listing does not mention iOS AutoFill or TOTP codes, and its feature set lags behind the three apps above. It is a harder recommendation for new users.
Comparison Table
| Feature | PanicVault | Strongbox | KeePassium | AuthPass | KeePass Touch |
|---|---|---|---|---|---|
| Price | $4.99 one-time | Freemium | Freemium | Free | Freemium |
| KDBX 4.0 | Yes | Yes | Yes | Yes | Partial |
| AutoFill | Yes, logins above the keyboard | Yes | Yes (logins above the keyboard: Premium) | Yes | Limited |
| Face ID / Touch ID | Yes | Pro | Yes | Yes | Yes |
| TOTP | Yes | Yes | Yes | Yes | No |
| iCloud Sync | Yes | Yes | Via Files | Via Files | Via Files |
| Google Drive Sync | Yes | Yes | Via Files | Via Files | No |
| YubiKey | Yes – NFC on iPhone, USB on Mac | Pro | Premium | No | No |
| Open Source | No | Source published* | Source published* | Source published* | No |
| Apple Watch | No | Pro | No | No | No |
| macOS App | Native | Native | Catalyst | Yes | No |
*Source code is public, but App Store builds can’t be verified against it.
How to Sync Your KeePassXC Database to iPhone
Moving your existing KeePassXC database to your iPhone takes only a few minutes. The process depends on which cloud storage service you use.
Option 1: iCloud Drive (Recommended for Apple Users)
iCloud Drive is the simplest sync method if you use a Mac as your desktop machine. Here is how to set it up:
Locate your KDBX file. Open KeePassXC on your Mac and check where your database file is stored. You can see the full path in the title bar or in KeePassXC’s recent databases list.
Move the file to iCloud Drive. Open Finder and navigate to iCloud Drive. Create a folder (for example, “KeePass” or “Vault”) and move your .kdbx file into it. If you also use a key file, move that as well.
Update KeePassXC. Open KeePassXC and use File > Open Database to open the file from its new iCloud Drive location. KeePassXC will now read and write to the synced copy.
Open the file on iPhone. Install your chosen iOS KeePass app (PanicVault, Strongbox, or KeePassium). When adding a database, browse to iCloud Drive and select your .kdbx file. Enter your master password (and select your key file if applicable).
Enable AutoFill. On iOS 18 and later, go to iPhone Settings > General > AutoFill & Passwords, turn on AutoFill Passwords and Passkeys, and turn on your KeePass app in the list of apps. (On iOS 17 and earlier, the setting was under Settings > Passwords > Password Options.)
Your database now syncs automatically between your Mac and iPhone through iCloud Drive. Changes made on either device propagate through iCloud.
Option 2: Google Drive (Best for Cross-Platform)
Google Drive is the better choice if you use KeePassXC on Windows or Linux, or if you share devices across the Apple and non-Apple ecosystems.
Install Google Drive on your desktop. Download the Google Drive desktop client for Windows, macOS, or Linux. This creates a synced folder on your computer.
Move your KDBX file to Google Drive. Place your .kdbx file (and key file, if used) in your Google Drive folder.
Update KeePassXC. Open the database from its new Google Drive location in KeePassXC.
Open the file on iPhone. In your chosen iOS KeePass app, browse to Google Drive when adding a database. PanicVault and Strongbox have built-in Google Drive support. KeePassium accesses Google Drive through the iOS Files app (install the Google Drive app first to register it as a file provider).
Enable AutoFill. Same as above: Settings > General > AutoFill & Passwords.
Option 3: Other Sync Methods
Dropbox and OneDrive work similarly to Google Drive. Install the desktop client, move your KDBX file into the synced folder, and open it from the same location on both desktop and mobile. Strongbox has built-in support for both. PanicVault and KeePassium access them through the iOS Files framework.
WebDAV and SFTP are options for users who run their own server or NAS. Strongbox supports these protocols natively. KeePassium supports them through third-party file providers.
Manual transfer via AirDrop or USB is possible but impractical for ongoing use. It works for one-time setup but does not keep your database synchronized as you make changes.
Important Sync Considerations
Avoid editing on two devices simultaneously. KDBX files are single encrypted files, not databases with row-level sync. If you edit the file on your Mac and your iPhone at the same time before either change has synced, you may create a conflict. Most cloud services handle this by saving both versions, but merging them requires manual effort (KeePassXC has a database merge feature that helps).
Back up your database. Before changing your sync setup, make a backup copy of your .kdbx file. Store it somewhere separate from your sync folder – an external drive, a different cloud service, or an encrypted USB stick. See our KeePass database backup guide for best practices.
Key files need to be on both devices. If you use a key file alongside your master password, it must be present on your iPhone as well. Transfer it once via AirDrop and store it locally on your iPhone rather than in the same cloud folder as your database – keeping both in one place defeats the purpose of the second factor (see our key files guide).
KeePassXC on Desktop + iOS App: The Best of Both Worlds
The most practical setup for most users is to run KeePassXC on your desktop and a dedicated iOS app on your iPhone. This gives you the full power of KeePassXC – browser extensions, Auto-Type, SSH agent, database merge, YubiKey support – on your computer, and a native, optimized mobile experience on your phone.
Here is what each combination looks like:
KeePassXC + PanicVault – The best balance of desktop power and mobile polish. KeePassXC handles your desktop workflow with browser extensions and advanced features. PanicVault provides native iOS AutoFill, Face ID, TOTP codes, and a clean Apple-native interface on your phone. If your KeePassXC database is protected by a YubiKey, PanicVault opens it too – challenge-response over NFC on iPhone, and over USB on Mac. Sync through iCloud Drive or Google Drive. One-time purchase, no subscription.
KeePassXC + Strongbox – The maximum-features combination. You get KeePassXC’s desktop capabilities plus Strongbox’s extensive iOS feature set, including YubiKey support on mobile, password auditing, multiple sync providers, and an Apple Watch app. Higher cost but the broadest feature coverage.
KeePassXC + KeePassium – Free to start, with limits. KeePassium’s free version opens one database with basic AutoFill, Face ID, and TOTP codes, but you pick each login from a list, and logins above the keyboard, YubiKey support, and more databases need Premium.
Making the Decision
If you are a KeePassXC user looking for the best iOS experience and you primarily use Apple devices, PanicVault is the strongest recommendation. Its native design, one-time pricing, iCloud and Google Drive sync, and full KDBX 4.0 compatibility make it the most seamless companion for KeePassXC on desktop.
If you need multiple sync providers, password auditing, KDBX 3.1 support, or Lightning (5Ci) hardware keys, Strongbox is the better fit despite its higher cost and complexity.
KeePassium has a free version, but it is limited to one database and basic AutoFill; logins above the keyboard, YubiKey support, and the password audit need Premium.
All three apps read and write the same KDBX format. You can try all of them with your existing database and switch at any time without losing data. That is the fundamental advantage of the KeePass ecosystem: your passwords belong to you, in a format that no single app controls.
