Updated: May 26, 2024


Page Contents

KeeAgent is a plugin for KeePass 2.x that allows SSH keys stored in a KeePass database to be used for SSH authentication by other programs.

If you are looking for a plugin for KeePass 1.x, you can find one here.


  • Store your SSH private keys in your KeePass 2.x database and use KeePass as your SSH agent (replaces Pageant on Windows).
  • Keys can be configured to automatically load when a KeePass database is opened and unload when the database is closed/locked.
  • Cross-platform: work on Windows/Linux/Mac.
  • Supports both PuTTY and OpenSSH private key formats.
  • Supports RSA, DSA, ECDSA and Ed25519 encryption algorithms.
  • Works with both PuTTY (and PuTTY compatible programs) and Cygwin/Msys and WSL1 on Windows.
  • Works with native OpenSSH agent on Windows/Linux/Mac.
  • And more!

System Requirements

  • General
    • KeePass >= 2.52
  • Windows
    • .NET >= 4.6.2
  • Linux / Mac
    • Mono >= 4.4
    • ssh-agent (required for KeeAgent client mode)


Source Code is available at github. (Pull requests welcome!)

Windows users: If you use the Chocolatey package manager, there is a KeeAgent package available.


The user manual is hosted on readthedocs.org.