What is a .KDBX file?
KDBX is an encrypted password database. Opened by KeePass and compatible apps.
- Did you know
- KeePass is a long-running open-source password manager, and KDBX is its encrypted vault.
- Inside a KDBX file the entries are held as XML, optionally GZip-compressed, before the whole payload is encrypted.
- KDBX can encrypt that payload with AES-256, ChaCha20 or Twofish, the cipher being chosen when the database is created.
- What Analyser reads
- Inspect security and crypto files: PEM private/public keys (RSA/EC/Ed25519, PKCS#1 vs PKCS#8, encryption), OpenSSH .pub with SHA-256 fingerprint, PuTTY .ppk, PKCS#10 CSR, X.509 CRL, PKCS#7 bundles, OpenVPN/WireGuard configs, Java KeyStores, Apple .mobileconfig/.mobileprovision, Windows .reg (with autorun flagging), and pcap/pcapng captures - warning when a private key or secret is present.
- Depth of analysis
- .KDBX is an identification-grade format: Analyser recognises it from its bytes and decodes the header metadata it carries, rather than opening it in a full viewer. Formats that do get a full viewer are marked "Full" on the formats page.
- Open a .KDBX file
- Drag a .KDBX file onto the Analyser home page (or tap to pick one). It is identified entirely in your browser - nothing is uploaded, there is no account, and it works offline once installed.