OneKeePass

This is a community package of OneKeePass, maintained independently. It repackages the official upstream build unmodified.

OneKeePass is a cross-platform password manager that works directly with KeePass .kdbx databases. Your vault is a file on your own disk — there is no account and no server involved.

• Reads and writes standard KeePass .kdbx vaults
• Organise entries by categories, groups, tags and entry types
• Custom entry types and custom fields
• Built-in TOTP (one-time password) support
• Password generator, including diceware passphrases
• SSH key entry type and SSH agent support

By default this package can read and write only your Documents folder. If your vault lives elsewhere, grant that directory:

• A sync folder: flatpak override --user --filesystem=~/Dropbox io.github.onekeepass.desktop
• A dedicated vault directory: flatpak override --user --filesystem=~/vaults io.github.onekeepass.desktop
• Your whole home (widest, only if you want it): flatpak override --user --filesystem=home io.github.onekeepass.desktop

Important: grant the directory that contains the vault, never the .kdbx file on its own. A single-file permission becomes a bind mount inside the sandbox, and OneKeePass saves by writing a temporary file and renaming it over the original — that rename cannot replace a mount point, so a file-level grant makes saving fail.

Browser integration is not wired up in this package: connecting the bundled native-messaging helper would require writing into your browser's own directory, which this package deliberately does not request.