About
A native macOS password manager for the KeePass database you already use. Keyhold opens and saves standard .kdbx files, so it works alongside KeePass, KeePassXC, and Strongbox — your passwords stay yours, in a file you control, on your Mac.
EVERYTHING RUNS ON YOUR DEVICE
There is no account, no cloud, no network. Nothing you store ever leaves your Mac.
GREAT FOR
• Opening the KeePass vault you already have — no migration, no export
• Unlocking instantly with Touch ID
• Generating strong, unique passwords on the spot
• Keeping logins organized in groups and finding them fast with search
SECURITY
• Argon2id key derivation + AES-256, the same proven KeePass cryptography
• Every file is authenticated (HMAC) — tampering is detected before anything is decrypted
• Touch ID stores a device-bound key, never your master password
• Optional key file, plus auto-lock on idle, sleep, and screen lock
• Copied passwords are concealed and auto-clear from the clipboard
FREE
Open, browse, search, add, edit, and delete entries and groups; strong password generator; Touch ID; key files; auto-lock. The full manager, free.
KEYHOLD PRO (one-time purchase)
Bulk data movement: import from CSV, export to CSV, and export an encrypted .kdbx copy.
Private by design — no telemetry, no ads, no data collection.
Getting started
- Click “Open a KeePass Vault” and choose your .kdbx file.
- Enter your master password — and optionally enable Touch ID.
- Browse, search, edit, and generate passwords, then Save. Everything stays on your Mac.
Free & Pro
Every app is free to use. Pro is a one-time purchase — no subscription.
- Open & edit your KeePass vault
- Search, groups, generator
- Touch ID, key files, auto-lock
- Import from CSV
- Export to CSV
- Export an encrypted .kdbx copy
Frequently asked questions
Which files does it open?
Standard KeePass .kdbx databases (KDBX 4) — the same files KeePass, KeePassXC, and Strongbox use. Open the vault you already have; there's no migration.
Where is my data stored?
Only on your Mac, in the .kdbx file you choose. There is no account and no cloud — nothing is ever uploaded.
How is it secured?
Argon2id key derivation and AES-256, with HMAC authentication that detects tampering before anything is decrypted. Touch ID stores a device-bound key, never your master password.
What's free and what's Pro?
The full manager is free — open, edit, search, generate, Touch ID, key files, auto-lock. Pro is a one-time purchase adding CSV import, CSV export, and encrypted .kdbx export.
Need a hand?
Email me directly and I'll help you out — usually within a day.