KeePass .kdbx Viewer & Converter

A KeePass database viewer that runs entirely in your browser. Drop a .kdbx file (KDBX3 or KDBX4), enter the master password, and the database is decrypted locally on your device. Browse and search entries, reveal individual passwords, and export the vault to CSV or Bitwarden JSON when migrating to another manager. Works offline once loaded — useful when you have your vault on a phone but no KeePass app installed.

How to use

1
Drop your .kdbx

Drag your KeePass database file onto the drop zone or click to browse.

2
Enter the master password

Type the master password you use in KeePass. If your vault also uses a key file, attach it.

3
Browse and search

The decrypted entries appear in a table. Use the search box to find specific entries; click rows to reveal passwords.

4
Export if needed

Choose KeePass CSV or Bitwarden JSON to migrate to another manager.

Open your KeePass vault in any browser — no installation, no signup, no waiting for a desktop client

Drop a .kdbx file or click to browse
KDBX3, KDBX4 (KeePass 2.x) ·
If your database was secured with a key file in addition to the password, attach it here.
Loading KeePass engine…
Title Username Password URL Group TOTP
Export decrypted entries:

🔒 How decryption works

  • Your .kdbx file is decrypted inside your browser tab: the file bytes and the master password are handled by the page itself, and closing the tab discards them.
  • Argon2 / AES-KDF (the same key-derivation functions KeePass desktop uses) runs on your CPU to turn the password into the encryption key.
  • Decrypted entries live only in tab memory. Close the tab and they are gone — no cache, no history, no localStorage copy.
  • For an air-gap, load this page once with the network on, then disconnect before opening your vault — the viewer keeps working offline from the service-worker cache.
Don't know what to try?
750+ tools — open a surprise
🎲 Surprise me

Features

KDBX3 and KDBX4 support
Reads the full KeePass 2.x format family — both AES-KDF and modern Argon2 key derivation, with AES or ChaCha20 inner cipher.
Master password + key file
Both authentication factors are accepted. Drop a key file alongside the database if your vault uses one.
Search across all fields
Live search filters entries by title, username, URL, group, or notes — even after the database is decrypted.
Per-entry reveal
Passwords are blurred by default. Click an entry to reveal — copy with one click.
Export to CSV / JSON
Generate KeePass CSV or Bitwarden JSON for one-click migration. Useful when moving to a different manager.
Client-side decryption
Decryption runs in your browser tab. The master password and decrypted entries live only in the page — close the tab and they are gone.

FAQ

Does my .kdbx file or master password leave my device?

No. The file is read locally, decryption runs on your CPU, and the master password stays in tab memory only. Once you close the tab, both are gone — no copy on our servers, no cache, no localStorage.

Does this support KDBX4?

Yes. Both KDBX3 (KeePass 2.0+) and KDBX4 (KeePass 2.35+, with Argon2 KDF and ChaCha20 stream) are supported.

My password is correct but it fails. Why?

Most commonly: a key file is required and not attached. Check whether your KeePass setup uses a key file alongside the master password. Less commonly, a corrupted file.

Can I edit or save changes?

Not in this version — it is a read-only viewer for migration and inspection. Edit your vault in the KeePass app and re-import to migrate.

Can I open KeePass 1.x databases?

No. The legacy KDB format (KeePass 1.x) is not supported. KeePass 1.x can export to KeePass 2.x format from the desktop app.

What happens to the master password I type in?

It is held in the memory of the tab while the database is open and discarded when the tab closes; it is not written to storage, and reloading the page asks for it again. If you would rather not depend on any of that, there is a stronger option available to you: load the page once with the network on, then disconnect the machine — the viewer keeps working from the service-worker cache, and you decide the conditions rather than trusting a description. Two habits are worth more here than any reassurance: close the tab when you are done rather than leaving it open, and never open a database on a machine you do not control.

💡 Want us to improve this tool just for you?

We can! Just send us a quick message with your idea. If you'd like to discuss it in detail, leave your email and we'll get back to you. You can stay anonymous.

How do you rate this tool?

Thank you for your rating!
Want to share more? Leave a comment!
Thank you! Your comment will appear after moderation.
Published Author: