KeePass Password Safe is a free open source password manager, which helps you to manage your passwords in a secure way. You can put all your passwords in one database, which is locked with one master key or a key file. So you only have to remember one single master password or select the key file to unlock the whole database. The databases are encrypted using the best and most secure encryption algorithms currently known (AES and Twofish). For more information, see the features page.

This is a stable release. It is recommended to upgrade from any previous 2.x version to 2.17.

KeePass 2.17 mainly features auto-type enhancements, field references improvements, and various other minor new features and improvements.

Hash sums and OpenPGP signatures for integrity checking are available. The .NET assemblies are signed, public keys for verifying are available.

Is it really free?
Yes, KeePass is really free, and more than that: it is open source (OSI certified). You can have a look at its full source and check whether the encryption algorithms are implemented correctly.

KeePass Features
* Strong Security
* Multiple User Keys
* Portable and No Installation Required
* Export To TXT, HTML, XML and CSV Files
* Import From Many File Formats
* Easy Database Transfer
* Support of Password Groups
* Time Fields and Entry Attachments
* Auto-Type, Global Auto-Type Hot Key and Drag&Drop
* Intuitive and Secure Clipboard Handling
* Searching and Sorting
* Multi-Language Support
* Strong Random Password Generator
* Plugin Architecture
* Open Source!

Strong Security
* KeePass supports the Advanced Encryption Standard (AES, Rijndael) and the Twofish algorithms to encrypt its password databases.
* Both of these ciphers are regarded as very secure by the cryptography community. Banks are using these algorithms for example, too.
* Even if you would use all computers in the world to attack one database, decrypting it would take longer than the age of the universe.
* Even quantum computers won't help that much. The algorithms are symmetric so its complexity would be reduced a bit, anyway, the sun will go nova before you have decrypted the database.
* The complete database is encrypted, not only the password fields. So your usernames, notes, etc. are protected, too.
* SHA-256 is used as password hash. SHA-256 is a 256-bit cryptographically secure one-way hash function. Your master password is hashed using this algorithm and its output is used as key for the encryption algorithms.
* In contrast to many other hashing algorithms, no attacks are known yet against SHA-256.
* Protection against dictionary and guessing attacks: by transforming the final master key very often, dictionary and guessing attacks can be made harder.
* In-Memory Passwords Protection: Your passwords are encrypted while KeePass is running, so even when the operating system caches the KeePass process to disk, this wouldn't reveal your passwords anyway.
* [2.x] Protected In-Memory Streams: When loading the inner XML format, passwords are encrypted using a session key.
* Security-Enhanced Password Edit Controls: KeePass is the first password manager that features security-enhanced password edit controls. None of the available password edit control spies work against these controls. The passwords entered in those controls aren't even visible in the process memory of KeePass.
* Also see the security information page.

Installation
Download this package and unpack it to your favorite location (USB stick, ...). KeePass runs without any additional installation and won't store any settings outside the application directory.

Supported operating systems:
Windows 98 / 98SE / ME / 2000 / XP / 2003 / Vista / 7, each 32-bit and 64-bit, Mono (Linux, Mac OS X, BSD, ...).

Prerequisites:
Microsoft .NET Framework > 2.0 (preinstalled on Windows Vista) or Mono 2.6.

Changes from 2.19 to 2.20
This is a stable release. It is recommended to upgrade from any previous 2.x version to 2.20.
KeePass 2.20 mainly features a KDBX file security enhancement, usability and integration improvements, and various other minor new features and improvements.
Changes:
- New Features:
Header data in KDBX files is now authenticated (to prevent silent data corruption attacks; thanks to P. Gasti and K. B. Rasmussen).
Added management of working directories (a separate working directory is remembered for each file dialog context; working directories are remembered relatively to KeePass.exe; the management can be deactivated by turning off the new option 'Remember working directories').
Added option to cancel auto-type when the target window title changes.
Added quick search box in the toolbar of the internal text editor.
Files can now be attached to entries by using drag&drop from Windows Explorer to the attachments list in the entry editing dialog.
Added '-pw-stdin' command line option to make KeePass read the master password from the StdIn stream.
Added placeholders to get parts of the entry URL: {URL:SCM}, {URL:HOST}, {URL:PORT}, {URL:PATH} and {URL:QUERY}.
Added a 'Details' button in the plugin load failure message box (when clicked, detailed error information for developers is shown).
Added warning icon left of the Windows user account option description in the master key creation dialog.
Added support for more image file formats (e.g. when importing custom client icons).
Added support for importing DesktopKnox 3.2 XML files.
The generic CSV importer now guesses whether the option to ignore the first row should be enabled or not (the user of course can still specify it manually, too).
Added support for exporting to KeePass 1.x CSV files.
Added support for moving the PLGX cache to a different remote drive.
The Spr engine is now extensible, i.e. plugins can provide additional transformations/placeholders.
On Unix-like systems, KeePass now uses the 'xsel' utility for clipboard operations, if 'xsel' is installed (in order to work around Mono clipboard bugs).
Added Mono workaround to set the WM_CLASS property.
Added workaround for Mono splitter bug.
The 'PrepMonoDev.sh' script now removes the serialization assembly generating post build event.
TrlUtil: added support for importing PO files.
- Improvements / Changes:
Improved FTP file existence checking.
High DPI UI improvements.
The database is not marked as modified anymore when using in-place label editing to fake-edit a group's name (i.e. when the final new name is the same as the previous one).
Password is not auto-repeated anymore when trying to unhide it fails due to the policy 'Unhide Passwords' being disabled.
Improved menu accelerator and shortcut keys.
Changed IO connection name display format.
Improved browser detection on Mac OS X.
Task dialog thread safety improvements.
Added UI check during import for KPScript.
Upgraded and improved installer (now uses Unicode, LZMA2 compression, ...).
Various UI improvements.
Various code optimizations.
Minor other improvements.
- Bugfixes:
On Windows systems, new line sequences in text to be shown in a standard multiline text box are now converted to Windows format.