How to Install KeePassXC on Ubuntu 26.04, 24.04 and 22.04

Password sprawl gets messy fast once logins, SSH keys, and recovery codes end up scattered across browsers, notes, and old text files. To install KeePassXC on Ubuntu, you can stay with Ubuntu’s own package, move to the official PPA on 24.04 or 22.04, use Flatpak when you want the same current build across every supported LTS release, or compile it from source when you want a manual build with custom options.

If you are looking for the official site or a direct Linux download, start with the official KeePassXC download page. On Ubuntu, though, the methods below are easier to keep updated than manually tracking AppImage releases, and they still give you the offline encrypted database, browser integration, and keepassxc-cli tooling that make KeePassXC useful on Linux.

Install KeePassXC on Ubuntu

The best method depends on whether you want Ubuntu’s simplest package, the newest APT-managed build, or the newest cross-release build with the fewest release-specific caveats.

Method	Ubuntu 26.04	Ubuntu 24.04	Ubuntu 22.04	Best For
Ubuntu repository	2.7.10	2.7.6	2.6.6	The lowest-maintenance APT path
Official KeePassXC PPA	Still uses 2.7.10 binaries	2.7.12	2.7.12	The newest APT-managed build on 24.04 and 22.04
Flatpak	2.7.12	2.7.12	2.7.12	The same current stable build across all supported LTS releases
Source build	2.7.12	2.7.12	2.7.12	Manual builds with custom options and a persistent local checkout

Pick one method unless you deliberately want both. The Ubuntu repository, the official PPA, and the source build all install keepassxc and keepassxc-cli. If you mix them, the source build under /usr/local/bin usually wins on PATH, so check the active binary with command -v keepassxc before you troubleshoot version mismatches.

• Choose the Ubuntu repository if you want the simplest install and are fine with Ubuntu’s packaged branch.
• Choose the PPA on Ubuntu 24.04 or 22.04 if you want KeePassXC 2.7.12 and still prefer APT updates.
• Choose Flatpak on Ubuntu 26.04 if you want the newest stable release right now without waiting on PPA packaging changes.
• Choose the source build if you want the stable tag in a local checkout you can update yourself.

The Snap package still exists, but it currently trails at 2.7.9 and its Snapcraft listing says the project gives this distribution method only minimal support, so it makes more sense as an FAQ trade-off than a primary install path.

Prepare Ubuntu to Install KeePassXC

Refresh APT before you choose a method so package lookups and dependency resolution use current repository metadata.

sudo apt update && sudo apt upgrade

If your account does not have sudo access yet, set that up first with add a new user to sudoers on Ubuntu.

KeePassXC lives in Ubuntu’s universe component on 26.04, 24.04, and 22.04. If apt says it cannot locate the package on a minimal or customized install, enable Universe first with enable Universe and Multiverse on Ubuntu. Only Universe is required for KeePassXC, but that guide shows the full component workflow.

Install KeePassXC from the Ubuntu Repository

Ubuntu’s own package is still the easiest way to install KeePassXC on Ubuntu when you want a clean APT-managed setup on every supported LTS release.

sudo apt install keepassxc

This method installs the desktop application and the keepassxc-cli companion tool, so you do not need a separate package for terminal-side tasks.

Verify the installed package state with:

apt-cache policy keepassxc

Relevant output on Ubuntu 26.04 includes:

keepassxc:
  Installed: 2.7.10+dfsg1-2ubuntu1
  Candidate: 2.7.10+dfsg1-2ubuntu1
  Version table:
 *** 2.7.10+dfsg1-2ubuntu1 500
        500 http://au.archive.ubuntu.com/ubuntu resolute/universe amd64 Packages

Ubuntu 24.04 currently ships 2.7.6+dfsg.1-1build3, and Ubuntu 22.04 ships 2.6.6+dfsg.1-1. Those branches are older than current upstream, but they still integrate cleanly with Ubuntu’s normal update flow.

Install KeePassXC from the Official PPA on Ubuntu 24.04 and 22.04

The official KeePassXC PPA upgrades Ubuntu 24.04 and 22.04 to KeePassXC 2.7.12 while keeping APT updates. On Ubuntu 26.04, Launchpad now publishes a resolute suite, but the live executables still come from Ubuntu’s keepassxc-full package, so Flatpak is the cleaner latest-version path there for now.

Minimal Ubuntu installs can miss add-apt-repository. If that command is unavailable, install software-properties-common first and then continue.

Add the PPA with:

sudo add-apt-repository ppa:phoerious/keepassxc -y

The -y flag accepts the Launchpad prompt automatically, which makes the command safe to paste in one shot.

Refresh APT so Ubuntu sees the new source:

sudo apt update

Relevant output on Ubuntu 24.04 includes:

Get:6 https://ppa.launchpadcontent.net/phoerious/keepassxc/ubuntu noble InRelease [17.8 kB]
Get:7 https://ppa.launchpadcontent.net/phoerious/keepassxc/ubuntu noble/main amd64 Packages [744 B]
Get:8 https://ppa.launchpadcontent.net/phoerious/keepassxc/ubuntu noble/main Translation-en [332 B]

Ubuntu 22.04 shows the same fetch pattern with jammy instead of noble. Once the new source appears, install the package:

sudo apt install keepassxc

Then confirm that APT selected the PPA build:

apt-cache policy keepassxc

Relevant output on Ubuntu 24.04 includes:

keepassxc:
  Installed: 2.7.12-1ppa1~noble1
  Candidate: 2.7.12-1ppa1~noble1
  Version table:
 *** 2.7.12-1ppa1~noble1 500
        500 https://ppa.launchpadcontent.net/phoerious/keepassxc/ubuntu noble/main amd64 Packages
        100 /var/lib/dpkg/status

Ubuntu 22.04 shows the same upstream version with a ~jammy1 package suffix. On Ubuntu 26.04, the PPA metadata currently updates keepassxc but not the keepassxc-full package that owns the GUI and CLI binaries, so the visible app version stays on Ubuntu’s 2.7.10 build.

Install KeePassXC with Flatpak on Ubuntu

Flatpak currently gives Ubuntu 26.04, 24.04, and 22.04 the same KeePassXC 2.7.12 build, which makes it the simplest current-release path across the full supported LTS range.

Install Flatpak first if your system does not already have it:

sudo apt install flatpak

Add Flathub as a system remote. The --if-not-exists flag keeps the command safe to rerun if Flathub is already configured:

sudo flatpak remote-add --if-not-exists flathub https://dl.flathub.org/repo/flathub.flatpakrepo

Confirm that Flathub is available at system scope before you install the app:

flatpak remotes

flathub system

If you want the broader Flatpak desktop setup, permissions background, or Flathub basics, see install Flatpak on Ubuntu.

Install KeePassXC from Flathub with:

sudo flatpak install flathub org.keepassxc.KeePassXC -y

Verify the installed Flatpak package with:

flatpak info org.keepassxc.KeePassXC

Relevant output includes:

KeePassXC - Secure and Full-featured Password Manager

          ID: org.keepassxc.KeePassXC
         Ref: app/org.keepassxc.KeePassXC/x86_64/stable
        Arch: x86_64
      Branch: stable
     Version: 2.7.12
Installation: system

If the launcher does not appear in your applications menu immediately, sign out and back in once so the desktop session refreshes the Flatpak exports.

Compile KeePassXC from Source on Ubuntu

This path makes sense when you want the current stable tag with manual control over the build instead of waiting for package repositories to catch up. The commands below keep the source tree in $HOME/keepassxc-build, which makes later updates easier than rebuilding from a throwaway directory.

Ubuntu 26.04 renamed Botan’s development package, so set one variable first and keep using the same terminal session for the dependency and build commands that follow.

if apt-cache show libbotan-3-dev >/dev/null 2>&1; then
  BOTAN_DEV=libbotan-3-dev
else
  BOTAN_DEV=libbotan-2-dev
fi
printf 'Using %s\n' "$BOTAN_DEV"

On Ubuntu 26.04 this prints Using libbotan-3-dev. Ubuntu 24.04 and 22.04 print Using libbotan-2-dev.

Install the validated build dependencies with:

sudo apt install build-essential cmake g++ git asciidoctor \
  qtbase5-dev qtbase5-private-dev qttools5-dev qttools5-dev-tools \
  libqt5svg5-dev libargon2-dev libminizip-dev "$BOTAN_DEV" libqrencode-dev \
  libkeyutils-dev zlib1g-dev libreadline-dev libpcsclite-dev libusb-1.0-0-dev \
  libxi-dev libxtst-dev libqt5x11extras5-dev

Resolve the latest stable KeePassXC tag next, then use that tag in the clone and checkout steps that follow.

LATEST_TAG=$(git ls-remote --tags --refs https://github.com/keepassxreboot/keepassxc.git | sed 's#.*refs/tags/##' | grep -E '^[0-9]+(\.[0-9]+){2}$' | sort -V | tail -1)
printf 'Latest stable tag: %s\n' "$LATEST_TAG"

Latest stable tag: 2.7.12

Clone the repository into the persistent build directory and check out that tag:

mkdir -p "$HOME/keepassxc-build"
cd "$HOME/keepassxc-build"
git clone https://github.com/keepassxreboot/keepassxc.git
cd keepassxc
git checkout "$LATEST_TAG"

Build and install KeePassXC from that checked-out source tree:

cmake -S . -B build -DWITH_XC_ALL=ON -DCMAKE_BUILD_TYPE=Release
make -C build -j"$(nproc)"
sudo make -C build install

Verify the installed source build with:

command -v keepassxc
command -v keepassxc-cli
keepassxc-cli --version

Relevant output after the source build installs cleanly includes:

/usr/local/bin/keepassxc
/usr/local/bin/keepassxc-cli
2.7.12

The source build also installs a desktop entry at /usr/local/share/applications/org.keepassxc.KeePassXC.desktop, so it shows up in the applications menu like the packaged methods.

Create the KeePassXC Source Update Command on Ubuntu

Because the source build lives in a persistent git checkout, you can update it in place with a small helper command. The script below checks for the source tree, refuses to overwrite a dirty checkout, compares your current tag with the latest stable tag, and only rebuilds when an update is actually available.

Use sudo tee here because the script is being saved into /usr/local/bin, and plain shell redirection would not write to that root-owned path.

sudo tee /usr/local/bin/update-keepassxc > /dev/null <<'EOF'
#!/bin/bash
set -euo pipefail

SOURCE_DIR="$HOME/keepassxc-build/keepassxc"

for cmd in git cmake make keepassxc-cli; do
  if ! command -v "$cmd" >/dev/null 2>&1; then
    echo "Error: $cmd is required but not installed."
    exit 1
  fi
done

if [[ ! -d "$SOURCE_DIR/.git" ]]; then
  echo "Error: Source checkout not found at $SOURCE_DIR"
  exit 1
fi

if [[ -n "$(git -C "$SOURCE_DIR" status --porcelain)" ]]; then
  echo "Error: Uncommitted changes found in $SOURCE_DIR"
  exit 1
fi

CURRENT_TAG=$(git -C "$SOURCE_DIR" tag --points-at HEAD | grep -E '^[0-9]+(\.[0-9]+){2}$' | sort -V | tail -1 || true)
CURRENT_TAG=${CURRENT_TAG:-none}
LATEST_TAG=$(git ls-remote --tags --refs https://github.com/keepassxreboot/keepassxc.git | sed 's#.*refs/tags/##' | grep -E '^[0-9]+(\.[0-9]+){2}$' | sort -V | tail -1)

if [[ -z "$LATEST_TAG" ]]; then
  echo "Error: Could not determine the latest stable tag."
  exit 1
fi

echo "Current source tag: $CURRENT_TAG"
echo "Latest stable tag: $LATEST_TAG"

if [[ "$CURRENT_TAG" == "$LATEST_TAG" ]]; then
  echo "Already up to date."
  exit 0
fi

echo "Checking out $LATEST_TAG..."
git -C "$SOURCE_DIR" fetch --tags
git -C "$SOURCE_DIR" checkout "$LATEST_TAG"

echo "Configuring build..."
cmake -S "$SOURCE_DIR" -B "$SOURCE_DIR/build" -DWITH_XC_ALL=ON -DCMAKE_BUILD_TYPE=Release

echo "Compiling KeePassXC..."
make -C "$SOURCE_DIR/build" -j"$(nproc)"

echo "Installing KeePassXC..."
sudo make -C "$SOURCE_DIR/build" install

echo "Installed version:"
keepassxc-cli --version
EOF

Make the command executable and confirm your shell can find it:

sudo chmod +x /usr/local/bin/update-keepassxc
command -v update-keepassxc

/usr/local/bin/update-keepassxc

Run the updater with:

update-keepassxc

Relevant output on an already-current build includes:

Current source tag: 2.7.12
Latest stable tag: 2.7.12
Already up to date.

Launch KeePassXC on Ubuntu

You can install KeePassXC entirely from a terminal, but the desktop application still needs an active graphical session to open. For terminal-only database work, the Ubuntu repository, the official PPA, and the source build all install keepassxc-cli, so you do not need a separate CLI package for those methods.

Launch KeePassXC from the Terminal on Ubuntu

APT, PPA, and source installs launch with the standard command:

keepassxc

Flatpak installs launch with:

flatpak run org.keepassxc.KeePassXC

Launch KeePassXC from the Applications Menu on Ubuntu

Once the package is installed, the graphical launcher appears in the normal Ubuntu applications menu.

1. Press the Super key or open Activities.
2. Type KeePassXC.
3. Select the KeePassXC launcher.

Update or Remove KeePassXC on Ubuntu

Update KeePassXC on Ubuntu

Ubuntu repository and PPA installs update through APT:

sudo apt install --only-upgrade keepassxc

Flatpak installs update with:

sudo flatpak update org.keepassxc.KeePassXC

Source builds update with the helper command created earlier:

update-keepassxc

Remove KeePassXC on Ubuntu

Ubuntu repository and PPA installs can be removed with:

sudo apt remove keepassxc
sudo apt autoremove

Review the autoremove list before confirming it, especially on systems that have seen other package testing or older desktop-app installs.

If you added the PPA on Ubuntu 24.04 or 22.04, remove the source and refresh APT:

sudo add-apt-repository --remove ppa:phoerious/keepassxc -y
sudo apt update

Then confirm the package is gone and the candidate has fallen back to Ubuntu’s own build:

apt-cache policy keepassxc

Relevant output after removing the PPA build on Ubuntu 24.04 includes:

keepassxc:
  Installed: (none)
  Candidate: 2.7.6+dfsg.1-1build3
  Version table:
     2.7.6+dfsg.1-1build3 500
   500 http://au.archive.ubuntu.com/ubuntu noble/universe amd64 Packages

Flatpak installs can be removed with:

sudo flatpak uninstall org.keepassxc.KeePassXC

After removal, the info command should report that the app is no longer installed:

flatpak info org.keepassxc.KeePassXC

error: org.keepassxc.KeePassXC/*unspecified*/*unspecified* not installed

Source builds can be removed by deleting the installed files under /usr/local and the persistent git checkout used for updates.

The last command below removes the local source tree under $HOME/keepassxc-build. If you added local patches or other changes there, back them up first.

sudo rm -f /usr/local/bin/keepassxc /usr/local/bin/keepassxc-cli /usr/local/bin/keepassxc-proxy /usr/local/bin/update-keepassxc
sudo rm -f /usr/local/share/applications/org.keepassxc.KeePassXC.desktop
sudo rm -rf /usr/local/share/keepassxc
rm -rf "$HOME/keepassxc-build"

Check the source-build install paths afterward with:

find /usr/local -maxdepth 3 \( -path "/usr/local/bin/keepassxc" -o -path "/usr/local/bin/keepassxc-cli" -o -path "/usr/local/bin/keepassxc-proxy" -o -path "/usr/local/bin/update-keepassxc" -o -path "/usr/local/share/applications/org.keepassxc.KeePassXC.desktop" -o -path "/usr/local/share/keepassxc" \) -print

No output means the source-installed files are gone.

Check for Remaining KeePassXC User Data on Ubuntu

Package removal does not always delete per-user settings, so scan your account first instead of assuming a fixed cleanup path.

This cleanup step removes application settings, recent database history, and other local state. Your .kdbx database files stay wherever you saved them, so delete those separately only if you intentionally want to remove them too.

find "$HOME" -maxdepth 3 \( -path "$HOME/.config/keepassxc" -o -path "$HOME/.cache/keepassxc" -o -path "$HOME/.local/share/keepassxc" -o -path "$HOME/.var/app/org.keepassxc.KeePassXC" \) -print

No output means KeePassXC did not leave a per-user directory in those common locations. If the scan prints one or more paths, remove only the directories you actually want to delete.

For example, if the scan shows the common config directory, remove it with:

rm -rf ~/.config/keepassxc

Troubleshoot KeePassXC on Ubuntu

The issues below are the ones most likely to trip readers up on current Ubuntu LTS releases.

Fix KeePassXC PPA Results on Ubuntu 26.04

The PPA now publishes a resolute suite, but Ubuntu 26.04 still keeps the live KeePassXC executables in keepassxc-full. That means APT can show a newer keepassxc package while the actual GUI and CLI stay on Ubuntu’s 2.7.10 build.

Check which package owns the real commands with:

dpkg -S /usr/bin/keepassxc /usr/bin/keepassxc-cli

keepassxc-full: /usr/bin/keepassxc
keepassxc-full: /usr/bin/keepassxc-cli

If you want KeePassXC 2.7.12 on Ubuntu 26.04 today, use the Flatpak build. If you prefer APT integration, stay on Ubuntu’s packaged 2.7.10 until the PPA ships a matching keepassxc-full update.

Fix KeePassXC Browser Integration on Ubuntu

Install the matching extension from the KeePassXC browser integration guide, then open KeePassXC and enable it under Tools > Settings > Browser Integration. KeePassXC’s docs also note that Flatpak and Snap based browsers are generally not supported on Linux, with Ubuntu’s Firefox Snap the current exception, so a supported browser package is still the safer choice when the extension refuses to connect.

KeePassXC on Ubuntu FAQ

Conclusion

Install KeePassXC on Ubuntu with the method that matches how you manage the rest of your system: Ubuntu’s own package for the simplest upkeep, the official PPA on 24.04 and 22.04 for the newest APT build, Flatpak for the same current release across every supported LTS version, or a source build when you want the stable tag in a local checkout you can update yourself. Once it is in place, you can start building an offline vault without handing your credentials to a hosted password service.