Short answer
If you like the KeePass idea (your data, no vendor servers) but don't want to assemble sync yourself, Secure It Password Manager is built for that. It keeps one encrypted vault file and syncs it through your own Google Drive across Android, Windows and the browser extension, for a one-time purchase of US$4.99 (local prices vary by country). Sync is optional: a vault works fully offline on one device with no Google sign-in.
Secure It is a zero-knowledge password manager that stores your encrypted vault in your own Google Drive: no company servers, not even ours. ("Zero-knowledge" means the vault is encrypted on your device before it leaves, so the vendor never holds a key that can read it.)
I'm the developer of Secure It, so read this page with that in mind. Facts about KeePassXC come from its own documentation.
Timing note: the Android app is in closed testing on Google Play and can't be bought yet. The Windows app and Chrome extension are live, but they are unlocked by the Android purchase.
At a glance (as of 18 Oct 2026)
| Secure It Password Manager | KeePassXC | |
|---|---|---|
| Where the vault lives | One encrypted file (vault.enc), on the device and, if you choose, in your own Google Drive | A local database file (.kdbx) you store anywhere |
| Sync | Built in and optional, through your Google Drive (narrow drive.file scope) |
None built in. You put the file in a synced folder such as Dropbox or Nextcloud |
| Setup for several devices | Sign in to Google in the app | Choose a sync service, a mobile app and a way to handle conflicts |
| Platforms | Android (closed testing), Windows (live), Chrome extension (live), Edge listing pending. iOS coming soon, no date | Windows, macOS, Linux. No official mobile app; its docs point to KeePassDX or KeePass2Android (Android) and Strongbox or KeePassium (iOS) |
| Price | One-time purchase of US$4.99 covering Android, Windows and the extension | Free |
| Encryption and KDF | AES-256-GCM; Argon2id (via libsodium) from the master password | AES-256, ChaCha20 or Twofish; Argon2d or Argon2id, set per database |
| Recovery | 12-word BIP-39 recovery phrase and an Emergency Kit PDF with an offline recovery script | Master password, key file or hardware key |
| Languages | 12 | Not checked for this page |
| Open source | We don't present it as open source | Yes, GPLv3 |
| Independent audit | None yet | Review of KeePassXC 2.7.4, completed Jan 2023 |
KeePassXC cells come from the KeePassXC documentation and user guide (version 2.7.11). Secure It cells come from our facts page.
A note on names: KeePass is the original Windows program (free, open source, latest version listed on its site is 2.61.1, May 2026). KeePassXC is a separate, community-maintained project that reads the same database format and runs natively on Windows, macOS and Linux. Both use KDBX files.
Why Secure It: sync that is already built in
KeePassXC has no built-in cloud sync, so using a database on a phone means choosing a sync service, a mobile app and a way to deal with conflicts. We wrote about that in KeePass and Google Drive: how to sync, and what goes wrong.
Secure It removes those steps:
- Drive sync built in, and optional. Sign in to Google only if you want the same vault on more than one device. The vault is a single encrypted file, and the app uses the narrow
drive.filescope, so it can only see files it created. See Is it safe to store passwords in Google Drive? for how that works. - No plugin or folder setup. Nothing to install beyond the app.
- One purchase covers Android, Windows and the Chrome extension. The Windows app is free on the Microsoft Store and the Chrome extension is free on the Chrome Web Store; both are unlocked by the one Google Play purchase. No subscription.
- Named, modern crypto. AES-256-GCM, done on the device, with a key derived from your master password using Argon2id. Argon2 is specified in RFC 9106, and OWASP's password storage guidance lists Argon2id as the preferred algorithm. KeePassXC also supports Argon2, so on key derivation the two are comparable.
- A recovery path. A 12-word BIP-39 recovery phrase and an Emergency Kit PDF with an offline recovery script.
- 12 languages.
- Everyday features. Fingerprint or master password unlock, a password generator, categories and search, and import of saved passwords from Chrome, Edge, Opera, Brave and Firefox.
- Share one entry. Send a single entry through an encrypted copy in your Google Drive and a link that expires (15 minutes to 7 days), with an optional passphrase.
Same own-your-data idea, less to maintain
Both tools keep your passwords out of a vendor's database. With KeePassXC you decide where the file goes and maintain the sync and mobile pieces yourself. With Secure It, the vault sits in your own Google Drive and the app handles the sync. Either way, you hold the data. The difference is how much setup you want to do.
Secure It also works fully offline on a single device with no account, if that is all you need.
Moving from KeePass
We haven't yet confirmed and documented a direct import from KeePass databases, so we won't describe import steps here. If you are thinking of switching, KeePass and Google Drive covers how people run KeePass today and what to check first. Whatever you do, keep your existing database until you have checked that everything has arrived.
Choose Secure It if…
- You want a file-based, own-your-data model with sync through your own Google Drive and no plugin setup, and you are happy to use a Google account for that.
- You use Android and Windows, plus Chrome or another Chromium browser, and want one purchase to cover them.
- You would rather pay once than subscribe.
- You want the interface in one of 12 languages.
- You want a recovery phrase and an Emergency Kit built in.
If you are weighing a hosted option instead, see our Secure It vs Bitwarden comparison.
Current limits of Secure It
- Not independently audited yet.
- Several devices need a Google account. Sync goes through your own Google Drive. Without it, the vault stays on one device.
- No iOS app yet. It is coming soon to the App Store, with no date.
- Android is in closed testing, and the Edge listing is pending review. Until it is live, Edge users can install the extension from the Chrome Web Store.
- A small, independent developer, not a large security company.
You can see every status we keep current on the facts page, and the platforms on the download page.