SQLite
At #3 of 22 in our database management systems ranking, SQLite is summed up in the catalogue as: Serverless database in one file, with public domain source code.
Sebastiaan SmitsFounderSome vendors pay for placement on this site. This profile of SQLite is written by us, and vendor links are marked alike: disclosure.
Visit SQLite See it in the database management systems ranking
SQLite at a glance
| Headquarters | United States |
|---|---|
| Deployment | Open source code |
| Best for | Applications, devices and small sites that need storage inside the app |
| Pricing model | Free, public domain; paid support and warranty of title priced on a published list |
| API | Not stated in the pages we read |
| Free plan | Yes |
What is SQLite?
SQLite is an embedded SQL database engine distributed as a C library. Unlike MySQL or PostgreSQL it has no server process: the library reads and writes an ordinary disk file, and one file holds all tables, indexes, triggers and views. The source code is dedicated to the public domain, so anyone can use it for any purpose without a license fee. It is maintained by a small team around D. Richard Hipp at Hwaci, which also sells optional paid extensions and support.
The vendor's tagline is small, fast and reliable, and it describes the engine as the most widely deployed database in the world. It supports ACID transactions, JSON, common table expressions, window functions and indexes on expressions. The project suggests thinking of it as a replacement for fopen() rather than for Oracle. Typical uses are app file formats, mobile and embedded devices, local caches and small to medium websites.
SQLite key features
- Serverless, zero-configuration design. There is nothing to install, start or administer. The application links the library and opens a file. The vendor says the whole database lives in a single cross-platform file that can be copied between 32-bit and 64-bit systems and between big-endian and little-endian hardware.
- ACID transactions. Transactions are atomic, consistent, isolated and durable even after a crash or power failure, according to the vendor. This matters for applications that save state continuously and want File/Save to become unnecessary.
- Full SQL feature set. The SQL dialect covers partial indexes, indexes on expressions, JSON functions, common table expressions and window functions. The vendor publishes a page listing omitted features, so you can check for gaps before moving an application.
- Small footprint. With every feature enabled, the library is under 900 KiB depending on platform and compiler settings, and it can be much smaller with options removed. It is written in ANSI C and ships as one source file, sqlite3.c, called the amalgamation.
- Test discipline. The vendor says most of the source tree is test code, with millions of test cases and 100 percent branch coverage. Its testing page covers out-of-memory, I/O error, crash and fuzz testing, including Google OSS-Fuzz.
- Documented limits. The maximum database size is 281 terabytes and the maximum row size is 1 gigabyte. Default string and BLOB length is 1 billion bytes, adjustable at compile time. Limits have been defined and tested since version 3.5.8.
- Command-line shell. A standalone sqlite3 program ships with the project. It imports CSV, runs queries, creates SQL archives with the .archive command and works for analysis of large datasets. Bindings for dozens of languages are available, and Tcl bindings come included.
Who SQLite suits
- A desktop app developer. Instead of writing a custom file format, the developer stores documents in a SQLite file. Saves become transactions, the format is readable from other tools, and the backup API implements Save As. The Library of Congress recommends the format for archiving.
- A team building an IoT or mobile product. Devices cache readings and settings locally, keep working during poor connectivity and need no database administrator. The vendor lists phones, set-top boxes, vehicles, cameras and medical devices among the settings where the engine fits.
- A small business with a low-traffic website. The vendor says sites under about 100K hits per day should work fine and reports its own site handled about 400K to 500K requests per day in 2015 on one shared virtual machine. A single file keeps backup and hosting simple.
Getting started with SQLite
Download the precompiled command-line shell for your platform, or fetch the amalgamation, a single C file plus a header, and compile it into your program. The download page lists the source tree, amalgamation, autoconf bundle, documentation and precompiled binaries for Android and other platforms; version 3.54.1 was listed when checked.
Most languages include a SQLite driver already, and Python and Tcl ship with it built in. Learning is mostly SQL itself, plus a few SQLite details such as dynamic typing and how locking works. The documentation site is extensive, and free help is available on the SQLite Forum.
Where SQLite wins and where it does not
- SQLite runs inside your application and keeps the whole database in one ordinary file, so there is no server to buy, patch or leave.
- Embedded, one of the three traits the catalogue lists for SQLite.
- Marked in our records as single file.
- Where it fits: Applications, devices and small sites that need storage inside the app.
- SQLite is tagged Open source, public domain in our records.
- The project states it allows unlimited readers but only one writer at a time, and advises a client/server engine for busy or multi-computer use.
- The project accepts patches only from contributors who have signed a public domain affidavit.
- It allows one writer at any instant, so write-heavy or multi-server workloads need another engine.
- Look elsewhere if you are Systems with many machines writing to one shared database.
Our verdict on SQLite
SQLite runs inside your application and keeps the whole database in one ordinary file, so there is no server to buy, patch or leave.
The project states it allows unlimited readers but only one writer at a time, and advises a client/server engine for busy or multi-computer use. The developers sell support from 1,500 US dollars a year, and the company behind it is in Charlotte, North Carolina.
In our database management systems ranking SQLite stands at #3 of 22: it follows MariaDB and comes before CockroachDB. Places 1 to 3 in every list go to challengers where the category has them, so this is a position on that rule and not a score.
By headquarters, 15 of the 22 are established in North America, as SQLite is in the United States.
SQLite pros and cons in practice
- No server, no configuration and no license fee, which removes operations work for apps that only need local storage.
- A single portable file makes backup, transfer and testing simple, and the format is documented as stable over the long term.
- The project documents its test methods and limits openly, so risks can be assessed before adoption.
- Support options exist for firms that need them, from the free forum to paid help from the original author's company.
- Many clients writing over a network share are a poor fit, because the vendor warns that file locking is buggy on many network filesystems.
- There is no built-in user management or network server, so shared multi-user enterprise databases need a client/server engine.
- Encryption is not in the core library and needs the paid extension or a third-party build.
- Dynamic typing and feature differences from other SQL engines can surprise teams that port queries unchanged.
SQLite in practice
SQLite removes the database server from the budget, which is its whole case.
Setup is a library and a file, and exit is copying that file between operating systems.
The limits are stated on its own site: 281 terabytes maximum size, unlimited readers, one writer.
Paying for SQLite
Charging model: Free, public domain; paid support and warranty of title priced on a published list.
The library costs nothing. The vendor's copyright page states that all code and documentation are dedicated to the public domain, so anyone may copy, modify, sell or distribute them for any purpose, commercial or non-commercial. Paid items are optional and come from Hwaci: professional support and custom work 'for a modest fee' with no amounts printed, the SQLite Encryption Extension (SEE) for AES-encrypted files, the CEROD compressed and encrypted read-only extension, ZIPVFS, and the TH3 test harness. Prices for these were not published on the support page checked, so contact Hwaci for quotes. Free community support runs through the public forum.
Read from sqlite.org when Best Database Management Systems in 2026 was last reviewed (7 November 2026).
SQLite: data and security
SQLite runs inside your application, so data stays wherever your application stores the file; the project has no hosting region and no service holding your data. The core library does not encrypt files.
Encryption requires the paid SQLite Encryption Extension, which the vendor says supports 128-bit or 256-bit AES. The file format is cross-platform and documented, and the vendor says it is stable and enduring. The pages checked do not list audit certifications.
Integrations and ecosystem
Integrations the vendor names (12):
- Python
- Tcl
- C and C++
- Java
- Go
- Rust
- Android
- iOS
- Windows
- Linux
- macOS
- CSV import via the sqlite3 shell
SQLite in numbers and labels
| Product | SQLite |
|---|---|
| Vendor website | sqlite.org |
| Catalogue tags | Embedded, Open source, public domain, Single file |
| What we do not hold | funding rounds and staff numbers |
| Price visibility | Public on the vendor site |
| Headquarters | United States (North America) |
| Source code | Open source, per our records |
| Alternatives page | Not part of the alternatives set |
| Primary guide | Best Database Management Systems in 2026 |
| Rank there | #3 of 22 |
| Head-to-head pages | Not paired so far |
Alternatives to SQLite
4 products in this guide come closest to SQLite on tags, pricing and region.
- PostgreSQL (#1 of 22): Community-run relational engine under a permissive licence, no vendor involved.
- Couchbase (#8 of 22): JSON document database with SQL++ queries, sold as Capella or as Server. Best for: Teams wanting SQL++ over JSON documents plus mobile sync from one vendor.
- MySQL (#9 of 22): Oracle-owned relational server, free under GPLv2, paid editions on request.
- ScyllaDB (#15 of 22): Not for: teams that need ad hoc document queries or an OSI-approved licence for current releases. Wide-column database compatible with Cassandra and DynamoDB APIs.
Also ranked in
| Guide | Position |
|---|---|
| Best Database Management Systems in 2026 | #3 of 22 |
Questions about SQLite
9 answersWhat does SQLite cost?
Our catalogue records SQLite’s pricing as: Free, public domain; paid support and warranty of title priced on a published list. On free access, it has a free tier or free plan.
Which tools compete with SQLite?
Start with PostgreSQL, Couchbase, MySQL and ScyllaDB. They are ranked and described in the same list.
Where does SQLite stand among database management systems?
SQLite is #3 of 22 in our database management systems ranking.
Who should choose SQLite?
Applications, devices and small sites that need storage inside the app. It does not fit as well for systems with many machines writing to one shared database.
Which country is SQLite from?
Our records put SQLite in the United States, a North America vendor. That is where the contracting company sits, not necessarily where your data is hosted.
Is SQLite free for commercial use?
Yes. The vendor's copyright page says the code and documentation are in the public domain, and that anyone may use, modify, publish or sell them for any purpose, commercial or not. Optional extensions such as encryption are separate paid products from Hwaci.
When should I choose a client/server database instead?
The vendor's own guidance says to prefer a client/server engine when many programs send SQL to the same database over a network, since network filesystems add latency and unreliable file locking.
It also points to very large datasets and high write concurrency as cases for a server.
How big can a SQLite database be?
The vendor's about page gives a maximum database size of 281 terabytes and a maximum row size of 1 gigabyte. Its limits page sets the default maximum string or BLOB length at 1 billion bytes, adjustable at compile time, and says limits are tested.
Does SQLite encrypt data?
Not in the standard distribution. The vendor sells the SQLite Encryption Extension, which reads and writes files encrypted with 128-bit or 256-bit AES, and a compressed, encrypted read-only variant called CEROD. Both come from Hwaci under a paid licence.
SQLite: sources
Read from the vendor’s own pages on 5 November 2026.
- sqlite.org/about.html: overview, limits, testing summary
- sqlite.org/features.html: feature list
- sqlite.org/whentouse.html: use cases and limits of fit
- sqlite.org/limits.html: implementation limits
- sqlite.org/copyright.html: public domain status
- sqlite.org/support.html: paid support and extensions
- sqlite.org/download.html: download options
How we rank
Feature lists tell little, so positions rest on setup effort, the true price, portability and fit. SQLite ends up at #3 among 22. The editorial process sets out how facts are gathered and how commercial links are handled.