Serious Discussion KeePassXC Password Manager

silversurfer

Level 85
Thread author
Verified
Honorary Member
Top Poster
Content Creator
Malware Hunter
Well-known
Aug 17, 2014
10,227
Homepage: KeePassXC Password Manager
GitHub: GitHub - keepassxreboot/keepassxc: KeePassXC is a cross-platform community-driven port of the Windows application “Keepass Password Safe”.
KeePassXC is a modern, secure, and open-source password manager that stores and manages your most sensitive information.

You can run KeePassXC on Windows, macOS, and Linux systems. KeePassXC is for people with extremely high demands of secure personal data management. It saves many types of information, such as usernames, passwords, URLs, attachments, and notes in an offline, encrypted file that can be stored in any location, including private and public cloud solutions.



Today, we are releasing KeePassXC 2.7.6 with a few bug fixes and enhancements. This version fixes a crash on macOS that occurred on exit. We also improved the visual display when dragging entries to move/copy, Quick Unlock is now automatically activated when unlocking for Auto-Type or Browser access, and the Auto-Type button and shortcut key will be disabled when Auto-Type is turned off for the entry or group.

New Drag/Drop Example
New Drag/Drop Example​

Download​


Changes​

  • Significant improvement to visual when drag/drop entries [#9698]
  • Automatically prompt for Quick Unlock when showing unlock dialog [#9697]
  • Improve colorful lock icon and fix file MIME icon on KDE [#9632]
  • Ability to search by entry UUID [#9571]
  • Add challenge-response support for NitroKey 3 [#9631]
  • Auto-Type: Disable entry level Auto-Type when disabled at group/entry [#9672]
  • Browser: Show warning when adding duplicate URL's to entry [#9588][#9635]
  • Browser: Improve error message when proxy cannot be found [#9385]

Fixes​

  • Fix crash on exit on macOS [#9620]
  • Fix crash on search if entry doesn't have a group [#9633]
  • Fix several issues with Quick Unlock [#9697]
  • Enable save button when not auto-saving non-data changes [#9634]
  • Several UI/UX fixes [#9647]
  • Move toolbar back to top of window when disabling movement [#9699]
  • Browser: Fix handling of expired credentials [#9595]
  • Windows: Prevent white flicker when launching application [#9637]
  • Linux: Fix warning message about allow screencapture [#9638]
  • FdoSecrets: Fix access confirmation dialog showing even when disabled [#9690]
 
Last edited:

silversurfer

Level 85
Thread author
Verified
Honorary Member
Top Poster
Content Creator
Malware Hunter
Well-known
Aug 17, 2014
10,227

KeePassXC 2.7.7​

We’re thrilled to announce the release of KeePassXC version 2.7.7. This update brings several exciting features and enhancements that will improve your workflow and integration with modern authentication services. Let’s dive into the major highlights:

Passkeys Support​

This release delivers the official implementation of Passkeys for KeePassXC! This feature is a year in the making and uses the existing browser integration service to both store and use Passkeys for authentication. A special thank you to Ortham for providing an extremely comprehensive standards, security, and privacy review of our implementation prior to release. If you haven’t heard of Passkeys yet, they are an alternative to passwords that are incredibly secure and privacy preserving. Read more about Passkeys and also read our documentation.

Passkeys Report


Changes​

  • Support USB Hotplug for Hardware Key interface [#10092]
  • Support 1PUX and Bitwarden import [#9815]
  • Browser: Add support for PassKeys [#8825, #9987, #10318]
  • Build System: Move to vcpkg manifest mode [#10088]

Fixes​

  • Fix multiple TOTP issues [#9874]
  • Fix focus loss on save when the editor is not visible anymore [#10075]
  • Fix visual when removing entry from history [#9947]
  • Fix first entry is not selected when a search is performed [#9868]
  • Prevent scrollbars on entry drag/drop [#9747]
  • Prevent duplicate characters in "Also choose from" field of password generator [#9803]
  • Security: Prevent byte-by-byte and attachment inference side channel attacks [#10266]
  • Browser: Fix raising Update Entry messagebox [#9853]
  • Browser: Fix bugs when returning credentials [#9136]
  • Browser: Fix crash on database open from browser [#9939]
  • Browser: Fix support for referenced URL fields [#8788]
  • MacOS: Fix crash when changing highlight/accent color [#10348]
  • MacOS: Fix TouchID appearance depending on lid open/closed [#10092]
  • Windows: Fix terminating KeePassXC processes with MSI installer [#9822]
  • FdoSecrets: Fix database merge crash when enabled [#10136]
 
Last edited:

silversurfer

Level 85
Thread author
Verified
Honorary Member
Top Poster
Content Creator
Malware Hunter
Well-known
Aug 17, 2014
10,227

KeePassXC 2.7.8​

Changes​

  • Add hotkey for showing search help [#10591]
  • Add hotkey for group switching (Ctrl+Shift+PgUp/PgDown) [#10625]
  • Add per-database auto-save delay setting [#9100]
  • Add configurable password strength check on database password [#9782]
  • Add setting to hide menubar [#10341]
  • Improve Bitwarden 1PUX import and support organization collections [#10499]
  • Show advanced settings checkbox only for settings that have them [#6513]
  • Remove obsolete setting for requiring repeated password entry [#9722]
  • Passkeys: Allow registering Passkeys to existing entries [#10408]
  • Passkeys: Show warning about data being unencrypted before Passkey export [#10411]
  • Passkeys: Support NFC and USB transports [#10402]
  • Passkeys: Pass extension JSON data to browser [#10615]
  • SSH Agent: Do not use entries from recycle bin [#10518]
  • Linux: Change hotkey sequence used for {CLEARFIELD} Auto-Type [#10008]
  • Windows: Improve DACL memory access protection [#10618]

Fixes​

  • Fix crash when deleting history items [#10451]
  • Fix crash on screen lock or computer sleep [#10458]
  • Fix search field not being focused after unlock [#10459]
  • Fix loss of window focus when Auto-Type needs to unlock a database [#10555]
  • Fix inconsistent TOTP visibility on unlock [#10009]
  • Fix CSV import skipping over single-name groups [#10575]
  • Fix key file folder being remembered even if disabled in settings [#10636]
  • Fix issues with entry editing and database locking [#10667]
  • Fix key file text when provided on command line [#10642]
  • Fix issues with hardware key auto detection [#10663]
  • Do not override monospace font size [#10282]
  • Perform group sort only when group view is in focus [#10202]
  • Do not show decimals for attachment sizes in Bytes [#10595]
  • Prevent merging of global custom data when merging databases [#10452]
  • Fix minor translation issues [#10635]
  • Passkeys: Fix StrongBox incompatibility [#10420]
  • Passkeys: Set RP ID to effective domain if unset instead of returning an error [#10384]
  • Passkeys: Various UI fixes and improvements [#10427, #10608, #10609]
  • AppImage: Fix URL opening [#10624]
  • Flatpak: Fix application autostart [#10563]
  • Linux/macOS: Fix button sizes on modal alert popups [#10500]
  • Linux: Fix clipboard clear on Wayland [#10500]
  • Windows: Preserve file-hidden attribute [#10343]

 
Last edited:

ErzCrz

Level 21
Verified
Top Poster
Well-known
Aug 19, 2019
1,027
Still my favourite password manager :D

EDIT: The below is probably because it's an .msi file that is downloaded. Just odd though I could get it from the MS store, just not latest version.

Firefox gave a Not Commonly Downloaded warning but clear on VirusTotal.

1715001799398.png


and then SmartScreen blocked it. Guess I won't update for now and maybe look at classic KeePass with the TOTP Addon.

1715001910997.png
 
Last edited:

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top