Why the KeePass format should be based on SQLite
Hacker News
February 24, 2026
AI-Generated Deep Dive Summary
KeePass, a widely respected password manager known for its security and stability, is facing challenges due to its reliance on the XML-based KDBX file format. While KeePass has long been lauded for its commitment to data sovereignty and robust encryption, the outdated XML structure has become a hindrance to incorporating modern features like TOTP (Time-Based One-Time Password) and Passkey support. The rigid schema of XML makes it difficult to add new features without causing compatibility issues for older or third-party clients, leading to fragmented implementations and user confusion.
The KDBX format's reliance on custom attributes has resulted in a cluttered and inconsistent approach to storing data like TOTP secrets and Passkey information. Different plugins and client versions have adopted varying formats, creating interoperability problems. For instance, KeePassXC uses the otpauth URI format for TOTP, while the official KeePass app opts for TimeOtp-Secret, leading to potential user lockouts or compatibility issues between devices. This ad hoc approach not only complicates the user experience but also increases code bloat and maintenance challenges for developers.
Switching to SQLite as the underlying database format could address these issues. SQLite is a relational database management system that offers scalability, efficiency, and robust support for modern security features like encryption and full-text search. By adopting SQLite, KeePass could streamline data storage, eliminate the need to reload the entire file during updates, and provide a more organized structure for custom attributes. This change would not only enhance performance but also make it easier to integrate future innovations without compromising compatibility or user experience.
For tech enthusiasts and professionals, this shift matters because it could set a new standard for secure and efficient data management in password managers and beyond. By embracing SQLite, KeePass can maintain its reputation as a leader in password security while addressing the limitations of its current format. This move would not only benefit users by simplifying their experience but also pave the way for more seamless
Verticals
techstartups
Originally published on Hacker News on 2/24/2026