.KDB

KDB File

KeePass 1 Password Database
Ask a question
QUICK ANSWER

A KDB file is an encrypted password database created by KeePass 1.x (KeePass Classic). It stores logins, passwords, and notes locked behind a master password. Open it with KeePass or KeePassXC, then enter your master password to unlock. Without that password, the contents are permanently inaccessible - there is no recovery option.

Developer: Dominik Reichl (KeePass Password Safe) Category: Encrypted Files Open standard MIME: application/x-keepass
OPENS ON Windows macOS Linux Android iOS
Related: .ASC · .SIG · .DEC · .GPG

On this page

19k+ extensions indexed
Last reviewed Sep 8, 2026

Not sure what your file is?

Drop any file into our identifier - we read just the first bytes to name the format.

Identify a file

What is the KDB file format?

A .kdb file is an encrypted password database created by KeePass 1.x (KeePass Classic). It stores login credentials - usernames, passwords, URLs and notes - in an AES-256-CBC or Twofish-256-CBC encrypted binary container, protected by a master password, an optional key file, or both.

The format was introduced with KeePass 1.0 in November 2003. It is identified by an 8-byte signature at offset 0: Signature1 0x9AA2D903 (shared with all KeePass formats) and Signature2 0xB54BFB65 (unique to KDB 1.x). A fixed 124-byte header records the cipher, key-derivation seeds, iteration count and a SHA-256 hash of the decrypted payload. Decryption fails immediately if this hash does not match, indicating either a wrong master key or a corrupted file.

KeePass 1.x is in maintenance-only status; the current actively developed branch is KeePass 2.x, which uses the .KDBX format (2007). KDBX supersedes KDB with Argon2 key derivation, ChaCha20 encryption and HMAC-authenticated blocks - upgrading to KDBX is recommended for new vaults.

KeePassXC and KeePass 2.x can read and convert existing .kdb databases. Mobile apps KeePassDX and KeePassium also support the legacy format.

Security & safety

RISK: LOW

A KDB file is encrypted data, not executable code - safe to handle as a file. The main risks are operational: (1) the contents are permanently unrecoverable without the master password and any key file - keep a secure backup of both; (2) AES-256 with iterated key transformation is secure for most uses, but KDBX 4 with Argon2 is stronger - consider upgrading; (3) beware fake "KDB password recovery" tools that are scams or malware; (4) CSV/XML exports are plaintext - delete securely after use.

Format details

in a nutshell
FULL NAMEKeePass 1 Password Databaseaka KeePass database v1, KeePass Classic database
DEVELOPERDominik Reichl (KeePass Password Safe)since 2003 (KeePass 1.0)
MIME TYPEapplication/x-keepass
TYPEEncrypted binary password database (KeePass 1.x format)
STANDARDOpen · royalty-free
This extension is also used by…
  • Keynote for BlackBerry (encrypted notes) - Some BlackBerry note apps used .kdb for encrypted local databases; unrelated to KeePass.
MAGIC BYTES · FILE SIGNATURE
OFFSET
0001020304050607
HEX
03D9A29A65FB4BB5
ASCII
····e·K·
Two little-endian UInt32 values at offset 0: Signature1 = 0x9AA2D903 (bytes 03 D9 A2 9A) is shared with all KeePass files; Signature2 = 0xB54BFB65 (bytes 65 FB 4B B5) uniquely marks the KeePass 1.x / KDB format. (KDBX 2.x uses Signature2 = 0xB54BFB67.) All stored little-endian.

Programs that open KDB files

Windows3 apps
KeePass Password Safe (1.x) Open-source File > Open, select the .kdb, enter master password (and key file if used). KeePass 1.x opens KDB natively.
KeePassXC Open-source Open Database, select the .kdb and enter master credentials. KeePassXC reads both KDB and KDBX and can upgrade the vault to KDBX.
KeePass Password Safe 2.x Open-source KeePass 2.x can open KDB files and also upgrade them to KDBX: File > Import > KeePass KDB.
macOS1 app
KeePassXC Open-source Open Database, select the .kdb and enter credentials. The best cross-platform option for KDB on Mac.
Linux1 app
KeePassXC Open-source Install from repo or keepassxc.org; open the .kdb and enter master credentials.
Android1 app
KeePassDX Open-source Supports KDB (KeePass 1.x) format alongside KDBX. Open the .kdb and unlock with the master password.
iOS1 app
KeePassium Freemium Open the .kdb and unlock with master password / Face ID. Supports KDB (v1) and KDBX (v2+).

Technical details

deep spec
Format typeEncrypted binary password database (KeePass 1.x / KeePass Classic)
Byte orderLittle-endian
File signature03 D9 A2 9A 65 FB 4B B5 at offset 0 (Signature1 + Signature2, little-endian UInt32 pair)
EncryptionAES-256-CBC (cipher flag 0x02) or Twofish-256-CBC (cipher flag 0x08)
Key derivationSHA-256 master key hash + iterated AES-ECB transformation (configurable rounds)
Header sizeFixed 124 bytes (signatures, cipher flags, seeds, IV, group/entry counts, content hash)
Integrity checkSHA-256 hash of decrypted payload stored in header; mismatch aborts decryption
Typical file sizeA few KB to a few hundred KB (grows with number of entries and attachments)
Associated OSWindows, Linux, macOS, Android, iOS
StatusMaintenance-only; superseded by KDBX (KeePass 2.x) with Argon2 KDF and HMAC authentication
Optional auth factorKey file (.key) may supplement master password as a second authentication factor
Released2003 (KeePass 1.0)
Latest versionKeePass 1.x KDB (unchanged since KeePass 1.x; superseded by KDBX in 2007)
Open standardYes · royalty-free
Specificationgist.github.com

KDB conversions

Community Q&A

asked by users
Ask a quick question
Get help from people who work with KDB files. Be specific - include your system and software version.
No account needed · answers usually within a day

No questions yet - be the first to ask about KDB files.

Frequently asked questions

How do I open a KDB file?
Open it in KeePass (keepass.info) or KeePassXC (keepassxc.org) and enter your master password. Both are free. If a key file was used alongside the password, you'll need that too.
What is the difference between KDB and KDBX?
KDB is the older KeePass 1.x format. KDBX is the modern KeePass 2.x format with stronger encryption (Argon2 KDF, HMAC authentication). New vaults should use KDBX; you can upgrade an existing KDB to KDBX in KeePassXC or KeePass 2.
Can I open KDB on Mac or Linux?
Yes - KeePassXC (cross-platform, keepassxc.org) opens both KDB and KDBX on Windows, macOS and Linux.
I forgot the KDB master password - can I recover it?
No. KDB uses strong encryption with no backdoor or reset mechanism. Without the master password (and key file, if used) the contents are permanently inaccessible. Sites claiming to recover it are scams.
Should I upgrade my KDB to KDBX?
Yes, especially if you want to use modern clients on mobile. KDBX 4 with Argon2 is significantly stronger against brute-force attacks. Open the .kdb in KeePassXC and change the database format - it's a one-time operation.

References

1KeePass - official sitekeepass.info
2KeePassXC - cross-platform client (opens KDB + KDBX)keepassxc.org

Keep exploring

across the database

Top extensions this week

1.AQQAQQ Instant Messenger File
2.CRDOWNLOADChrome Partial Download File
3.PARTPartial Download File
4.DATProgram Data File (generic)
5.EXEWindows Executable (Portable Executable)
6.NOMEDIAAndroid No-Media Marker File
7.BINCD/DVD Disc Image (BIN/CUE)
8.RPMSGRestricted Permission Message
9.MDMarkdown Document
10.TMPTemporary File

Related extensions

.ASCOpenPGP ASCII-Armored File
.SIGOpenPGP Detached Signature
.DECEncrypted / Encoded data file (generic)
.GPGGnuPG Encrypted File
.ENCEncrypted / Encoded file (generic)
.KDBXKeePass 2 Password Database

Free file tools

An in-browser file identifier and image converter - everything runs on your device.

Open the toolbox

Browse file extensions A-Z