Windows

Where Does KeePass Store Its Config?

KeePass config file for installer versus portable use, and where your databases actually live.

Last updated

KeePass splits its config three ways. The installer keeps shared defaults in Program Files and your live settings in %APPDATA%\KeePass\KeePass.config.xml (database MRU, window layout, options). An optional enforced file lets admins lock values for everyone.

Portable use is simpler: with no config shipped, settings stay in KeePass.config.xml next to the exe. Databases are never in any of these places: .kdbx files live wherever you saved them (often Documents), so back them up separately. The -cfg-local flag redirects the local config anywhere you like.

Where KeePass stores this, by platform

Windows
%APPDATA%\KeePass\KeePass.config.xml

Live per user settings for installer builds. Shared defaults in C:\Program Files\KeePass Password Safe 2\KeePass.config.xml; admin locks in KeePass.config.enforced.xml. Portable builds keep the config beside the exe. Databases (.kdbx) are user chosen, not stored here.

Frequently asked questions

How do I move KeePass from installer to portable?

Copy the program files to USB, then copy %APPDATA%\KeePass\KeePass.config.xml over the portable one. Move your .kdbx databases separately; they were never inside the config.

Where are my KeePass passwords stored?

In your .kdbx database files, wherever you saved them (check the MRU list in the config or File, Open Recent). The config holds settings only, so losing it costs convenience while losing the .kdbx costs everything.

Notice an outdated path? Let us know.