KeePassXC - KeePass Cross-Platform Community Edition

KeePassXC 2.7.3 Released (October 24, 2022)

Website
Announcement
Changelog
Download (Github - Releases)

Spoiler: Changelog 2.7.3

2.7.3
Changes

• Enhance Tags Support and Add Saved Searches [#8435, #8607]
• Significant improvements to entry preview panel [#7993]
• Add password strength indicator to all password fields [#7885]
• Limit zxcvbn entropy estimation length to 128 characters [#7748]
• Try full URL path when fetching favicon [#8565]
• Hide usernames in preview panel when hidden in entry view [#8608]
• Enable dark title bar on windows when accent color is not used [#8498]
• Add option to display passwords in color in preview panel [#7097]
• Add XML Export option to GUI [#8524]
• Increase entropy required for a "good" password rating to 75 [#8523]
• Add shortcut to copy password with TOTP appended [#8443]
• Show entry count in status bar [#8435]
• Allow KeePassXC to be built without X11 [#8147]
• Enable use of VivoKey Apex and Dangerous Things FlexSecure tokens [#8332]
• Add setting for number of recent files [#8239]
• Add Ctrl+Tab shortcut to cycle databases in unlock dialog [#8168]
• Replace offensive words in eff_large.wordlist [#7968]
• Auto-Type: PICKCHARS can specify attribute and ignore BEEP [#8118]
• Linux: Add isHardwareKeySupported and refreshHardwareKeys to DBus methods [#8055]
• Add config variable to specify default database file name [#8042]
• Support numeric aware sorting on Windows and macOS [#8363]
• CLI: Add db-edit command [#8400]
• CLI: Add option to display all attributes with show command [#8256]
• CLI: Show UUID and tags with show and clip commands [#8241]
• Browser: Move socket into separate directory on Linux [#8030]
• Browser: Add group setting to omit WWW subdomain when matching URLs [#7988]
• FdoSecrets: Ask to unlock the database when creating items [#8022, #8028]
• FdoSecrets: Skip entries in recycle bin when searching [#8021]

Fixes

• Fix potential deadlock in UI when saving [#8606]
• Fix newlines when copying notes from preview panel [#8542]
• Fix dark mode detection on Linux [#8477]
• Fix crash when deleting items in recycle bin while searching [#8117]
• Fix crash when trying to close database during unlock [#8144]
• Fix tabbing around the interface [#8435, #8520]
• Fix OPVault import when there are multiple OTP fields [#8436]
• Fix various Windows Hello bugs [#8354]
• Fix use of Apple Watch for Quick Unlock [#8311]
• Better handling of "Lock on Minimize" setting [#8202]
• Check for write permission before entering portable mode [#8447]
• Correct regex escape logic to prevent parse errors [#7778]
• Normalize slashes and file case for last used databases [#7864, #7214]
• Link ykcore against pthread [#7807]
• Auto-Type: Fix menu entries in selection dialog on Windows [#7987]
• Auto-Type: Fix use of modifiers under macOS [#8111]
• CLI: Fix output when using clip with the -t flag [#8271]
• Browser: Use asynchronous access confirm dialog [#8273]
• Browser: Always send database locked/unlocked status [#8114]

 

KeePassXC Portable 2.7.3 (secure password manager) Released (October 25, 2022) (PortableApps.com)

 

KeePassXC 2.7.5 released

changelog :
https://github.com/keepassxreboot/keepassxc/releases/tag/2.7.5

Download :
https://keepassxc.org/download/#windows
https://keepassxc.org/download/#linux
https://keepassxc.org/download/#macos

 

KeePassXC 2.7.5 portable will not run at all on my fully updated Windows 10 22H2 laptop, but 2.7.4 works perfectly. I'm keeping an eye on the issue tracker at https://github.com/keepassxreboot/keepassxc/issues

 

Windows 10 Pro 22H2
KeePassXC 2.76
Firefox 121.0.1
Extension 1.8.12

Per the User Guide "Using the Browser Extension" point #6, figure 46, "the KeePassXC icon will appear in the username field of the login form (A). Click the icon to populate the field with your stored credentials."

Is that secure? Safe from keylogger and/or clipboard threats? Or encrypted from app-to-browser? Or...?

This is a little above my pay grade and have been unsuccessful in nailing down something clear-cut on github or searches otherwise.

I'm not using a Windows login, clipboard history, sync across devices or any Firefox sync.

Thanks!

 

The KeePassXC browser extension is developed by the KeePassXC team themselves. It is not developed by a third party as is the case with the original KeePass. The browser extension was one of the biggest reasons I switched from KeePass to KeePassXC.

The communication between KeePassXC and the browser extension is secured and encrypted with a key. When you first install the browser extension, it will ask to create a link with KeePassXC database. You can check it in KeePassXC browser extension settings under "connected databases". Once the link is created then all communication between KeePassXC database and the browser extension is secured. This information is not available to the clipboard, and keyloggers cannot capture this because they sit between the keyboard and the input field, and since no keyboard is used here, this info is invisible to them.

KeePassXC was audited most recently in January 2023. Here is the link to the audit report:

https://keepassxc.org/assets/pdf/KeePassXC-Review-V1-Molotnikov.pdf

This is what the auditor had to say about the KeePassXC browser extension:

 

@ Raza0007

Thanks for the fast, concise reply and additional info. That level of security is very reassuring. Cheers.

 

new install (never used) KeePassXC 2.76

 

One of your "Microsoft Visual C++ redistributable" is most likely corrupted. This can be easily fixed by reinstalling KeePassXC, or if that does not fix it then it can be fixed by uninstalling all "Microsoft Visual C++ redistributables" from your control panel and reinstalling them again from Microsoft. Make a note of all the ones installed on your system and reinstall all of them back, otherwise some other software will complain if they also need one of these redistributables.

See here for more info: https://answers.microsoft.com/en-us...ot-found/f43d5afd-9239-4913-8f32-20e44a959e13

 

@bjm_
I always install this to avoid C++ missing librairies :
https://github.com/abbodi1406/vcredist

 

@Raza0007
Uninstall => Reinstall

````````````````````````````````````````````````````````
@Rules
over the top?
VisualCppRedist_AIO_x86_x64.exe

 

@bjm_
Yes the package will uninstall all previously installed

 

Oh!...sounds too easy. Okay. I'll run package. Thanks
Edit: do I need all? see #90

Spoiler: C++

 

@bjm_
Maybe you don't need all versions (depends of wich software you're running), but it's a package, you should keep them all, and don't forget to check occasionally the github link for an updated package (often updated)

 

Okay...had I not tried to install KeePassXC on my daily rider. I wouldn't have know my Visual C++ were corrupt/missing. KeePass & Enpass run okay sans package. And KeePassXC installed, as test, okay on my dust collector machine. Thanks! Regards w Respect