PassBrew is a clean, native password manager for the KeePass databases you already own - open or create a .kdbx file, get a 1Password-quality experience.
Your .kdbx file is the database. PassBrew adds no cloud and no lock-in: keep syncing the file however you like (iCloud, Dropbox, a USB stick), and it stays fully compatible with KeePassXC, KeePass2Android and Strongbox.
Highlights
- Opens and creates KeePass files - reads KDBX 3.1 and 4.x (AES-KDF or Argon2, master password and/or key file) and creates brand-new vaults. Decryption is handled by a battle-tested library; zero custom crypto.
- Full, safe editing - create, edit, move and delete entries. Every save is atomic with a
.bakbackup, so a crash can never corrupt your file. Older databases upgrade to KDBX 4 in one click. - Built-in 2FA codes - live TOTP one-time codes with a countdown ring, read straight from your entries - no separate authenticator app.
- Password health - Watchtower flags weak, reused and expired passwords, plus a strength meter on every password you type. All checked locally.
- Import and export - bring in a 1Password, LastPass, Chrome or Bitwarden CSV export (columns matched automatically), and export your vault back out whenever you want.
- Built-in generator - strong random passwords or memorable diceware passphrases (EFF wordlist) with a live strength meter, all generated locally.
- Touch ID unlock - reopen your vault with a fingerprint; the master password is guarded by the macOS Keychain's biometric protection, with the manual password path always available.
- Your secrets stay local - passwords are copied by the native backend, never held in the UI, and the clipboard auto-clears. Auto-lock and lock-on-hide keep the vault sealed when you step away.
How it works
Point PassBrew at your .kdbx file (or create a new one), enter your master password and key file if you use one, and browse. Groups, tags, favorites and Trash keep everything organized; click an entry to view, edit or copy a field - the list itself never carries your secrets. Attach files, read live 2FA codes, review password history, and import from another manager in seconds. PassBrew is fully compatible with your existing KeePass apps, so it is always safe to use alongside them.
Perfect for
- KeePass users on a Mac - who want a polished, native front end instead of a heavier cross-platform app.
- Subscription avoiders - who want 1Password-style ergonomics while keeping full ownership of a single encrypted file.
- People switching from another manager - who want to import a 1Password, LastPass, Chrome or Bitwarden export and own their data from then on.
- Privacy-first, multi-device households - already syncing a
.kdbxacross phones and laptops and wanting a first-class desktop app that sends nothing to a vendor's servers.