Strongbox logo

Strongbox

Native iOS & macOS password manager with strong encryption

Strongbox stores Password Safe and KeePass databases on iPhone, iPad, and Mac, offering modern ciphers, YubiKey support, file attachments, and seamless cloud sync.

Strongbox banner

Overview

Overview

Strongbox is a native password manager for iPhone, iPad, and Mac that reads the widely used Password Safe (v3) and KeePass (KDB, KDBX 3.1 & 4) formats. It stores groups and entries with a full suite of modern ciphers—including AES, ChaCha20, TwoFish, Argon2d, and Salsa20—plus SHA-256, HMAC and a CSPRNG for key derivation.

Capabilities

The app supports YubiKey hardware authentication, encrypted file attachments, and integrates with cloud services such as iCloud, Dropbox, Google Drive, and WebDAV for seamless sync. A built-in “Have I Been Pwned?” check alerts users to compromised passwords, while the bundled zxcvbn estimator rates password strength. Browser autofill extensions are available for Chrome, Firefox and Safari, enabling one-click credential entry on the web.

Deployment

Strongbox can be downloaded from the Apple App Store; the free tier provides full core functionality, and a subscription or lifetime license unlocks premium features. The repository contains the full application code for transparency, but building the app requires additional non-code assets and is intentionally non-trivial, making the project source-available rather than OSI-certified.

Highlights

Supports Password Safe v3 and KeePass 1/2 formats (KDB, KDBX).
Implements modern ciphers: AES, ChaCha20, TwoFish, Argon2d, Salsa20.
YubiKey two-factor authentication and encrypted file attachments.
Browser autofill extensions for Chrome, Firefox, and Safari.

Pros

  • Native UI optimized for iOS and macOS.
  • Broad format compatibility eliminates migration pain.
  • Strong cryptographic suite with Argon2d key derivation.
  • Free version provides full core functionality.

Considerations

  • Source code is view-only; building from the repo is non-trivial.
  • Not OSI-approved open-source license.
  • Advanced features require a paid subscription or license.
  • Main app limited to Apple ecosystem.

Managed products teams compare with

When teams consider Strongbox, these hosted platforms usually appear on the same shortlist.

1Password logo

1Password

Password manager to secure and autofill logins and sensitive info

Looking for a hosted option? These are the services engineering teams benchmark against before choosing open source.

Fit guide

Great for

  • Individuals needing a secure, offline-first vault on Apple devices.
  • Teams that rely on KeePass or Password Safe databases and want native integration.
  • Users who value hardware-based 2FA with YubiKey.
  • People who prefer a free core app with optional premium upgrades.

Not ideal when

  • Linux or Windows-only users seeking a native desktop client.
  • Developers looking to compile and customize the app from source.
  • Organizations requiring OSI-certified open-source licensing.
  • Users needing extensive on-device password generation beyond built-in tools.

How teams use it

Migrate existing KeePass database to iPhone

Seamlessly open and edit KeePass files on iOS with full encryption and autofill.

Securely store shared credentials with YubiKey 2FA

Protect team passwords using hardware token authentication and encrypted file attachments.

Check password exposure via Have I Been Pwned

Identify compromised passwords directly within the app using the Pwned Passwords API.

Sync vault across devices via iCloud

Maintain up-to-date password database on iPhone, iPad, and Mac without manual transfers.

Tech snapshot

Objective-C70%
Swift26%
C3%
CSS1%
Rich Text Format1%
HTML1%

Tags

cocoapassword-vaultiospasswordosxcryptographyobjective-cpassword-storesafepassword-managerpassword-generator

Frequently asked questions

Does Strongbox work with existing KeePass databases?

Yes, it opens and saves KeePass 1 (KDB) and KeePass 2 (KDBX 3.1 and 4) files.

Is the app free?

A free version is available on the App Store with core features; a subscription or lifetime license unlocks premium capabilities.

Can I use a YubiKey for two-factor authentication?

Strongbox supports YubiKey for unlocking the vault.

Is the source code open source?

The code is publicly viewable under a source-available model but not OSI-compliant and does not include build assets.

Which browsers are supported for autofill?

Extensions are provided for Chrome, Chromium, Firefox, and Safari.

Project at a glance

Active
Stars
1,418
Watchers
1,418
Forks
128
LicenseAGPL-3.0
Repo age9 years old
Last commit3 months ago
Primary languageObjective-C

Last synced 2 days ago