KeePassXC vs OnlyKey (2026): which should you pick?
As of Nov 13, 2026, we pick KeePassXC: it is third in our ranking of password managers, and it grades higher too, 2.8 against 2.0.
Checked Oct 5, 2026 and Nov 13, 2026 · graded Oct 10, 2026 and Nov 13, 2026 by ToolGPA
KeePassXC grades higher on value for money and the free plan. OnlyKey grades higher on ease of use. They get the same grade on features and platforms.
Price, platforms and features side by side. The table says where each price was read and when.
OnlyKey
USB hardware password manager and two-factor security key
From $65.99 one-time
Which one is for you
Pick KeePassXC if
- Fits if you want your passwords in a local file, with nothing kept on anyone's servers
- Works for moving between Windows, macOS and Linux with SSH keys and one-time codes next to your logins
Look elsewhere if
- Skip it if you want one app on your phone too, as there's no mobile version
- Not for you if you expect sync out of the box, because you place the file in a cloud folder yourself
- Tight if you rely on KeePass 2 plugins, which aren't supported and probably never will be
- Watch out: current downloads need macOS 12 or 64-bit Windows 10 or 11; older systems need legacy builds
Pick OnlyKey if
- Fits if you want a hardware key and password storage in one device
- Works for people who want no software and a one-time purchase
Look elsewhere if
- Skip it if you lose things: without a backup key your passwords are gone, hence the two-pack
- Not for you if you want sync or a phone app, as none is listed
- Watch out: shipping is extra, and prices show in local currency
- Tight if you want browser autofill, as no extension is listed
How we grade them
| 2.8GPAKeePassXCGood | 2.0GPAOnlyKeyFair | |
|---|---|---|
| Value for money | AFree and open source under the GPLv3, with no ads, no subscriptions and no paid tier, where the middle paid password manager here wants $2.99 a month. The team takes donations to cover its costs. | B$65.99 one-time equals the category's middle one-time price, under two years of a $2.99 subscription. |
| Free plan and trial | AThe full desktop app and the KeePassXC-Browser extension both cost nothing. No paid tier, no account and nothing held back. | FA physical device with no free plan and no trial. |
| Features | CThe vault covers encryption with a key file or YubiKey on top of the master password, passkeys, one-time codes, SSH keys, Auto-Type, a health report, an independent audit and an ANSSI certification. But the project names two holes in the basics: no mobile app, and no sync of any kind. | CPassword storage, 2FA, SSH and encryption. No sync, no phone app and no browser extension. |
| Ease of use | CNo rating on record, and there are a few steps before it does anything: install it, create the database, pair the browser extension, then put the file in Dropbox, Google Drive or Nextcloud yourself if you want it on a second machine. | BIt works without installing software, which keeps setup short. No store rating on record. |
| Platforms and integrations | CComputers only: Windows, macOS and Linux, with an extension for Chrome, Firefox, Edge, Vivaldi, Brave and Tor Browser. No mobile app at all, with the team pointing you at KeePassDX on Android and Strongbox on iOS. | CWindows, Mac, Linux and Chromebook, computers only. No phone app or extension on the pages read. |
| Best for | offline passwords on Windows, Mac and Linux | a USB key that holds passwords and works as 2FA |
The GPA is the average of the five grades: an A is 4 points, an F is none. The full reasons are on each tool's page: KeePassXC and OnlyKey. How we grade
Where they differ
- OnlyKey can be bought with a one-time purchase.
- KeePassXC also covers passkeys.
In commonmacOSWindowsLinuxOpen sourcePassword manager
At a glance
| KeePassXC | OnlyKey | |
|---|---|---|
| Pricing | Free | Paid |
| Starts at | Free | $65.99 one-time (single device) |
| Free plan | Free and open source under the GPLv3 license, with no ads, no subscriptions and no paid tier. The team accepts donations to cover its expenses. | None |
| Free trial | None listed | None listed |
| macOS | ||
| Windows | ||
| Linux | ||
| Browser extension | ||
| Made by | KeePassXC Team | OnlyKey |
| Price read from | keepassxc.org | onlykey.io |
| Checked | Oct 5, 2026 | Nov 13, 2026 |
Worth knowing
KeePassXC
- There is no mobile app. The team points to third-party KeePass-compatible apps such as KeePassDX on Android and Strongbox on iOS.
- Cloud sync is not built in: you place the database file in a service such as Dropbox, Google Drive or Nextcloud yourself.
- KeePass 2 plugins are not supported, and the team says they probably never will be.
- The current downloads target macOS 12 or later and 64-bit Windows 10 or 11; older systems need legacy builds.
OnlyKey
- It is a physical device: losing it without a backup means relying on a second key, which is why a two-pack is sold.
- Store prices are shown in the visitor's local currency; the dollar figures were read from the US version of the pages.
- No sync service, mobile app or browser extension is listed on the product pages.
- Shipping is extra and calculated at checkout; the vendor also points US buyers to Amazon.
Key features
KeePassXC
- Offline encrypted database
- Passwords live in a local KDBX file encrypted with AES-256 or Twofish. A key file or a YubiKey can be added to the master password to strengthen the key.
- Browser extension
- KeePassXC-Browser links the desktop app to Chrome, Firefox, Edge, Chromium, Vivaldi, Brave and Tor Browser and fills usernames, passwords and TOTP codes.
- Passkeys
- Supports passkeys through the browser integration; the user guide covers creating a new passkey and logging in with one.
- Auto-Type
- Types passwords into other applications. The user guide covers global and entry-level Auto-Type and configurable typing sequences.
- One-time codes and password generator
- Stores TOTP secrets and generates the codes, creates random passwords and word-based passphrases, and reports on password health.
- Audit and certification
- An independent security audit was completed in January 2023, and version 2.7.9 received a first-level security certification (CSPN) from France's ANSSI.
OnlyKey
- Hardware password manager
- Plugged into a computer, it types the username and password at the press of a button, so credentials need no browser extension or app.
- PIN entered on the device
- The unlock PIN is typed on the key itself, and the vendor says all data is securely erased after 10 failed attempts.
- Two-factor authentication
- Supports FIDO2 and U2F, Yubico OTP, TOTP and challenge-response methods.
- Encryption and SSH
- Acts as a file and message encryption token; the DUO model is listed for SSH and OpenPGP use as well.
- Rugged build
- The vendor lists a waterproof, tamper-resistant case rated IP68 and MIL-STD-810G.
- Works on several operating systems
- The vendor lists Windows, macOS, Linux and Chromebook support.
Plans
KeePassXC
Free$0
The full desktop app for Windows, macOS and Linux, plus the KeePassXC-Browser extension.
OnlyKey
OnlyKey$65.99
one-time
One device. Shown on the product page at $65.99 against a crossed-out $69.99, with no end date given.
OnlyKey DUO$65.99
one-time
One device with both USB-A and USB-C connectors; also supports SSH and OpenPGP.
Two OnlyKey bundle$99.99
one-time
Two devices, sold so that you have a backup.
Common questions
Which is cheaper, KeePassXC or OnlyKey?
As of Nov 13, 2026, KeePassXC is free, and OnlyKey starts at $65.99 one-time (single device).
Which has a free plan, KeePassXC or OnlyKey?
As of Nov 13, 2026, only KeePassXC has a free plan. OnlyKey does not.
Which platforms do KeePassXC and OnlyKey run on?
As of Nov 13, 2026, only KeePassXC lists a browser extension. Both list macOS, Windows and Linux apps. A platform missing from a listing is one its maker's pages did not mention.
More comparisons
How this page was made
- The verdict at the top follows a fixed rule. When both tools are in the same category and either is in our top three for it, the verdict follows that ranking: the higher-placed tool is our pick. The top three weigh who each tool suits as well as its grades, so a pick can go against the GPA. Otherwise the page does not pick one and says which grades higher: the higher GPA first; on a tie, the one with a free plan, then the one that starts cheaper in dollars a month, counted the same way for both; if they are still level, what the choice depends on.
- The grades are our own, from each tool’s review or report card. The GPA is their average.
- Prices, plans and platforms come from each tool’s listing. The table above says where each price was read and when.
- The differences and the answers to the questions are worked out from those listings.