Updated: August 31, 2020


KeeAgent is a plugin for KeePass 2.x that allows SSH keys stored in a KeePass database to be used for SSH authentication by other programs.

If you are looking for a plugin for KeePass 1.x, you can find one here.


  • Store your SSH private keys in your KeePass 2.x database and use KeePass as your SSH agent (replaces Pageant on Windows).
  • Keys can be configured to automatically load when a KeePass database is opened and unload when the database is closed/locked.
  • Cross-platform: work on Windows/Linux/Mac.
  • Supports both PuTTY and OpenSSH private key formats.
  • Supports SSH1 and SSH2 keys.
  • SSH2 key formats include RSA, DSA, ECDSA and Ed25519.
  • Works with both PuTTY (and PuTTY compatible programs) and Cygwin/Msys on Windows.
  • Works with native SSH agent on Linux/Mac.
  • And more!

System Requirements

  • General
    • KeePass >= 2.41
  • Windows
    • .NET >= 4.5
  • Linux / Mac
    • Mono >= 3.2
    • ssh-agent (required for KeeAgent client mode)


Ubuntu/Linux Mint/elementary OS users: For easier installation, a PPA is available. Read these instructions for more information.

Arch Linux users: There is a community KeeAgent package available.

Windows users: If you use the Chocolatey package manager, there is a KeeAgent package available.

Source Code is available at github. (Pull requests welcome!)


The user manual is hosted on readthedocs.org.