I use KeePass2 on Windows and KeePassX on Linux. I understand the arguments between the two on database compatibility and cross-platform performance. What I'm curious about is whether either one is more or less secure.

In the following examples I'm running KeePass2 and KeePassX downloaded straight from the Ubuntu repositories.

I generated a password using KeePassX, and pasted it into a fake entry in both programs. Notice the different evaluations in password security.


KeePassX:112 Bit


KeePass2: 75 Bits

Next I made a password myself by quickly mashing some keyboard keys. As before, KeePassX returns a higher count than KeePass2 (like it almost always does).


KeePassX: 56 Bit


KeePass2: 30 Bits

Which is correct? Are the two programs using different algorithms to determine security? Which is more trustworthy?

Also, do the two programs use different encryption methods for their databases? Is either more secure?

closed as off-topic by A.B., karel, Eric Carvalho, Maythux, Registered User May 12 '15 at 10:12

  • This question does not appear to be about Ubuntu within the scope defined in the help center.
If this question can be reworded to fit the rules in the help center, please edit the question.