KeeForge

A free, open-source KeePass manager for iPhone and iPad.
Native SwiftUI, local-first storage, AutoFill, passkeys, TOTP, cloud sync, KDBX editing, and attachment viewing.

Why KeeForge?

KeeForge is a native iOS KeePass client for people who want their vault to stay theirs. Open .kdbx databases from Files, iCloud Drive, local folders, Dropbox, OneDrive, or WebDAV servers such as Nextcloud and Synology; unlock with a master password, key file, or biometrics; then browse, search, edit, save, and AutoFill without handing your vault to a hosted password service.

Highlights

Area	What KeeForge Does
KeePass compatibility	Reads and writes KDBX 4.x databases with AES-256 or ChaCha20 encryption and AES-KDF, Argon2d, or Argon2id. Also opens password-only KDBX 3.1 databases in read-only mode.
Local-first editing	Create, edit, and delete entries; create and delete groups; and save with conflict checks, timestamped backups, entry history, and unknown XML preservation.
New databases	Create new KDBX 4.x databases locally or directly inside Dropbox, OneDrive, and WebDAV folders.
Composite keys	Unlock with password, key file, or both, including binary, hex, XML v1/v2 (.key/.keyx), and arbitrary key files.
AutoFill	Safari and app AutoFill, QuickType suggestions, credential creation from the extension, and Face ID gated unlock.
Passkeys	Detect and authenticate FIDO2/WebAuthn passkeys stored in KeePassXC-compatible custom fields.
TOTP	Live one-time password display, copy support, countdowns, and iOS 18+ verification-code AutoFill.
Cloud sync	Native Dropbox, OneDrive, and WebDAV browsing and read/write sync, cached shared copies for AutoFill, queued extension uploads, and conflict checks.
Attachments	View KeePass entry attachments, preview supported files with QuickLook, and share them from short-lived protected temporary files. Attachment editing is not yet supported.
iPad ready	Adaptive navigation uses a split-view vault workspace on wider layouts while keeping the compact iPhone flow focused and native.
Security-minded	AES-GCM in-memory secret encryption, failed-unlock backoff, screen-capture protection, local-only clipboard, decompression bomb limits, and constant-time HMAC comparison.

Privacy

KeeForge has no analytics, no background telemetry, and no crash-reporting SDKs. Vault data stays on device and in the storage locations you choose. Network access is limited to connected cloud providers, opt-in favicon fetching through DuckDuckGo, optional App Store purchases for the tip jar, and the in-app feedback form when you explicitly submit a message.

Read the privacy policy.

Requirements

• iOS 17+
• Xcode 16+
• XcodeGen
• Swift 6 with strict concurrency
• Swift Package dependencies: Argon2Swift, SwiftyDropbox, and Microsoft Authentication Library

Build From Source

cp BuildConfig.local.example.xcconfig BuildConfig.local.xcconfig
# Fill in DROPBOX_APP_KEY and ONEDRIVE_CLIENT_ID for provider-enabled builds.
xcodegen generate
open KeeForge.xcodeproj

Select an iOS 17+ simulator or device, then build and run the KeeForge scheme.

For command-line verification, prefer the smallest relevant test slice:

xcodebuild test -project KeeForge.xcodeproj -scheme KeeForge \
  -destination 'platform=iOS Simulator,name=iPhone 17 Pro' \
  -only-testing:KeeForgeTests/DatabaseViewModelTests -quiet

Project Map

KeeForge/
├── App/              # App entry point, adaptive root shell, scene lifecycle
├── Models/           # KDBX parser/writer, crypto, edit draft, TOTP, passkeys
├── Services/         # Persistence, cloud sync, Keychain, bookmarks, attachments, AutoFill helpers
├── ViewModels/       # Database list, unlock, save, search, sort, TOTP state
├── Views/            # SwiftUI screens, editor, settings, tip jar, reusable controls
AutoFillExtension/    # AutoFill credential provider, passkey auth, credential creation
KeeForgeTests/        # Unit tests
KeeForgeUITests/      # XCUITest coverage
TestFixtures/         # Sample .kdbx databases and key files

Docs

• CHANGELOG.md - version history
• ROADMAP.md - planned product work and open priorities
• AGENTS.md - context for coding agents
• KeeForge/README.md - app-target architecture map
• AutoFillExtension/README.md - extension constraints and shared-source notes
• docs/ - implementation specs, audits, privacy notes, and longer-form design docs

Support

• App Store: KeeForge on the App Store
• Email: support@keeforge.com
• Issues: GitHub Issues

Contributing

See CONTRIBUTING.md for the pull request workflow, Developer Certificate of Origin sign-off requirement, and licensing terms. Start with AGENTS.md, then open the folder-local README.md closest to the code you are changing.

License

KeeForge is GPLv3 licensed. See LICENSE for details.