How to Set Up KeePassDX on Android for Secure Password Management

February 3, 2025 by
How to Set Up KeePassDX on Android for Secure Password Management
Andrew Valenzuela
| No comments yet


You need to use a password manager!

This guide will walk you through installing and setting up KeePassDX on your Android device.

At this point, I've been doing IT for about 25 years (15 professional).  

The biggest (and easily preventable) problem I run into is people forgetting their passwords.

PAPER, is not a password manager.  Neither is your constantly distracted brain.  

Use a password manager!

The best FOSS (free and open-source) Password Manager on Android is KeepassDX.

It's OFFLINE | SECURE | FREE | SIMPLE | UNIVERSAL


Weak or reused passwords create vulnerabilities that hackers can exploit. 

A password manager allows you to store and generate strong passwords securely.

KeePassDX is an open-source, free password manager for Android that ensures complete control over your credentials without relying on cloud-based services. 

Video Tutorial:


What is KeePass?

KeePass is a "Database".  Moreso, it's a secure database.  There are about 100 apps that can open and manage KeePass databases. 

The KeePass database is universal.  So you can store the KeePass Database in your Google Drive, Synology Drive, or One Drive (any cloud service) and you'll now have the same database on Desktop and Mobile.  Even if you are opening the database with different apps. 

My Favorite KeePass Apps:

  • KeePassXC:  Windows/Linux/Mac.... universal and powerful.
  • KeePassDX:  Android....  It's just so feature rich and handy.  I especially love the MagiKeyboard.
  • Keepasium: Mac/iOS...  This is the only one I've used on iOS.  So if you have a different opinion; let me know in the comments. 

What is KeePassDX?

KeePassDX is an Android password manager that uses the KeePass database format, allowing seamless password access across multiple devices. 

It is highly regarded for its security, transparency, and offline functionality.

Key Features of KeePassDX:

  • Open-source and free to use
  • No cloud storage dependency... your data remains private
  • Supports multi-factor authentication (TOTP)
  • Works entirely offline for enhanced security

For those who prefer complete privacy, KeePassDX can also be downloaded from F-Droid instead of the Google Play Store.


How to Install and Set Up KeePassDX on Android

Step 1: Install KeePassDX

  1. Open the Google Play Store
  2. Search for KeePassDX
  3. Select the correct app (ensure it is the open-source version)
  4. Tap Install

Tip: If you prefer to avoid Google services, KeePassDX is available on F-Droid, a repository for open-source Android apps.

F-Droid (FOSS Android App Store)



Step 2: Create a New Password Database

  1. Open KeePassDX after installation
  2. Tap Create New Database
  3. Enter a name for your database
  4. Choose a storage location such as Google Drive or a local directory
  5. Tap Save

Tip: Storing your database in a cloud service like Google Drive or Nextcloud (FOSS alternative to Big Tech Cloud) allows easy access across devices while keeping passwords encrypted.



Step 3: Set a Strong Master Password

  1. Enter a secure password for your database
  2. Confirm the password
  3. Review the password strength indicator
  4. Tap OK to finalize

Make your Password Long and Easy to Remember:

Tip: A long passphrase with a mix of letters, numbers, and symbols is more secure than a short, complex password



Step 4: Add Additional Security (Optional)

KeePassDX supports additional security measures, including key files and hardware keys.

  • Key File: You can use a key file (such as an image or generated file) for additional protection. Without this file, the database cannot be opened.
  • Hardware Key: If you use a YubiKey or similar device, KeePassDX can integrate with it for added security.

KeyFile Generator:


On Android, a file can be changed by the operating system so... You need to use a .bin​ file to prevent Android from changing stuff.

The button above will create a .bin​ file with a random string of 5K - 10K characters.  

DO NOT RENAME THE FILE AFTER YOU HAVE USED IT TO ENCRYPT YOUR DATABASE

KEEP A COPY OF IT OFFLINE ON A THUMBDRIVE, PC, CD, FLOPPY DISK... somewhere you'll remember.

Example of trying to use a regular file as the keyfile in KeepassDX.

Warning from KeepassDX:

Use the Generate KeyFile for KeepassDX (.bin filetype)  button above.  


Or create your own .bin​ file:

On your PC create a new file with your text editor.  And input a bunch of text (do way more than what I have put here).  

And save the file as a .bin instead of a .txt.

Then upload it to your Google Drive.

Now you can use this .bin file, that is made up of random text, as your KeyFile.  

For added security keep the KeyFile off of "Cloud Storage".  

This ensures that even if your cloud gets hacked.  The hacker cannot get into your password manager.  

Tip: A key file adds an extra layer of security, but ensure it is stored safely. If lost, you will not be able to access your password database.


Step 5: Create "Groups" (folders) and add "Entries"

  1. Open your new database
  2. Tap New Entry
  3. Enter a name for the entry (such as a website or service name)
  4. Enter your username and password
  5. Tap Save

Groups are folders that help you organize passwords.  

Fields:

  • Group Name: folder name
  • Notes:  keep notes, trust me on this.  You will forget what that password was for in 3 years.
  • Expires:  The app will notify you when your expire date is coming up (Helps you remember to reset stuff, but it is just a warning, it won't delete the folder or anything).
  • Searchable:  You can control what folders search works in.  And can even prevent sub-folder searching (helpful when you have 10,000 passwords)
  • Tags:  Its an EZ way to do a quick search.


Entries have a bunch of optional data you can use to store into and organize.

Fields:

  • Title:  The name you will see in the database
  • Username: No clue what this is...
  • Password:  Click the Dice to make a random one.  More on that later.
  • URL:  This is how the app will auto-sense what website to auto-fill your password in.
  • Attachments (Blue Square):  Lets you attach docs, like a .pdf​ to the entry.
  • TOTP (Red Square):  This is how you enable multi-factor authentication.

Tip: Use the built-in password generator to create strong, unique passwords for each account.


Step 6: Set Up TOTP (Two-Factor Authentication Support)

  1. Open an existing entry
  2. Tap Edit (pencil icon at the top)
  3. Click the TOTP button (bottom right corner)​
  4. Enter the TOTP secret key from the website or service you are securing
  5. Tap Save

Tip: If a service provides a QR code for TOTP, you can manually enter the secret key instead of scanning the code.  Look for the link that says "can't scan" or something along those lines. 




Step 7: Enable Autofill for Easier Login

  1. Open KeePassDX and go to Settings
  2. Tap Form Filling & Autofill
  3. Enable Default Autofill Service
  4. Select KeePassDX from the system settings


Tip: KeePassDX also includes a Magic Keyboard feature that allows you to enter credentials into apps that do not support standard autofill.

How to Use KeepassDX MagiKeyboard



Conclusion

KeePassDX is a powerful and secure password manager that puts control of your credentials in your hands. Unlike cloud-based solutions, it ensures that your passwords remain private while still allowing for secure synchronization if needed.

By following this guide, you can set up KeePassDX on your Android device, store your passwords securely, and enable features like TOTP and autofill for a seamless experience.

For a detailed walkthrough, watch the full tutorial video above. If you found this guide helpful, consider exploring more security tips and tools to enhance your digital privacy.


How to Set Up KeePassDX on Android for Secure Password Management
Andrew Valenzuela February 3, 2025
Share this post
Archive
Sign in to leave a comment