# Open KeePass .kdbx in your browser — vault manager, no upload

> Open, edit, and create KeePass (.kdbx) vaults in your browser: browse groups and entries, reveal and copy passwords, show TOTP codes, and save back to disk. No upload.

Open, edit, and create KeePass (.kdbx) password databases directly in your browser — browse groups and entries, reveal and copy passwords, view 2FA/TOTP codes, and save the encrypted file back to your device. Your master password and secrets are only ever held in this tab.

A .kdbx file is a portable, offline password vault — but reading one usually means installing KeePass or a plugin. Opening it in the browser removes that friction while keeping the security model intact: the file stays encrypted until you supply the master password, and decryption happens locally with Argon2 key derivation.

You get the full workflow — search, reveal, copy, edit, and generate — plus TOTP codes for entries that store a 2FA secret, so a single vault covers both passwords and second factors.

Generate new credentials as you go with the Password Generator, check the whole file with the Vault Health Check, or move credentials in and out with Import & Export.

## How to

1. **Open the vault.** Drop your .kdbx file and enter its master password (and key file, if any).
2. **Browse entries.** Navigate groups, search, and open entries to reveal or copy fields.
3. **Edit.** Add, rename, or update entries and generate new passwords inline.
4. **Save back.** Re-encrypt and download the updated .kdbx to replace your file.

## FAQ

### How do I open a .kdbx file without installing KeePass?

Drop the .kdbx here and enter its master password. It decrypts with kdbxweb and WASM Argon2 in the browser, so you can read and edit the vault without any desktop app.

### Does it support key files and KeePass 2 (KDBX 4)?

Yes. You can unlock with a master password, a key file, or both, and it reads and writes modern KDBX 4 databases including entries, groups, and TOTP fields.

### Is it safe to open my real vault here?

The database is decrypted in memory in this tab and there is no server involved — you can open the network panel and confirm nothing leaves while you work.

### Where is my vault stored after editing?

Nowhere but where you save it. You download the re-encrypted .kdbx back to your own device; the tool keeps no copy.


## Related tools

- [Password Generator](https://www.safepaper.app/passwords/password-generator)
- [Vault Health Check](https://www.safepaper.app/passwords/password-audit)
- [Import & Export](https://www.safepaper.app/passwords/import-export)
- [TOTP generator](https://www.safepaper.app/security/totp)

---

Canonical HTML: https://www.safepaper.app/passwords/password-manager
Markdown: https://www.safepaper.app/passwords/password-manager.md

There is no upload endpoint — your files are processed in this browser tab. Open your network tab and check.