9 ms·

KeePassXC 2.7.0

242 points by Sami_Lehtinen 5y ago

gtirloni 5y ago
How well does it integrate with web browsing? The Lastpass/1Password extensions work pretty seamlessly.
- joshuajill 5y ago
  There are browser extensions but you might not even need it if you use the Autotype function.
- tormock 5y ago
  The auto-type works fine for me with the Firefox Keepass helper url-in-title addon.
  - varjolintu 5y ago
    You can also trigger Global Auto-Type from the browser extension with seperate keyboard shortcut (or using context menu), and it handles the URL matching with Auto-Type without any extra extensions.
    - tormock 5y ago
      > and it handles the URL matching with Auto-Type without any extra extensions. I don't see how switching to a different extension will improve anything.... I have global auto-type binded to CTRL-SHIFT-C and it just works
longstation 5y ago
KPXC is brilliant. Recently I switched to it from BitWarden and I am satisfied. The only issue for me is the autotype support on Wayland (it's not there yet; currently only able to auto fill password and username for xwayland app).
- brightball 5y ago
  I am curious why you switched from Bitwarden? Usually when people are exiting a password manager it’s migrating to Bitwarden or KeePass but you’re the first I’ve heard moving from Bitwarden itself.
  - antiframe 5y ago
    I too switched from BitWarden to KeePass. I was reading about browser security and became concerned about running my password manager in the same process as the browser and relying on its sandbox. With KeePassXC I have the option to either forgo browser integration completely or use their addon which communicates to the manager and asks for an entry, which prompts for permission itself or uses an allow list by URL. That makes it much harder for a website to somehow break the sandbox and access my entire database. It's a small change but it does reduce the attack surface as well as force me to manage my data myself which I want to do more of. Also with BitWarden, their UI annoyed me when I needed a password outside the browser. L
  - mrandish 5y ago
    I'm not the person you asked but I switched from BitWarden to KeepassXC. BW was very good so the only reason I looked for an alternative was I wanted something that would support entering passwords with autotype in OS apps instead of just the browser.
  - longstation 5y ago
    Sorry for my late reply. I replied for the other question above.
- Semaphor 5y ago
  Curious, why did you switch from BitWarden? It’s usually the other way around (though personally I never felt the need to switch from KPXC).
  - gnramires 5y ago
    I chose KPXC because I am in easy access to the database, and since I already pay for cloud hosting I just sync the database on the cloud (I use Seafile, I recommend!). Open and convenient :) I'm sure Bitwarden is more than adequate as well though.
yumiris 5y ago
Love KeePassXC - it's a beautiful and speedy program which simply just works without ever causing any problems. The original KeePass always struck me as a tad heavy due to its somewhat archaic aesthetic and dependency on Mono, whereas KeePassXC looks modern and requires minimal resources and dependencies. I combine it with KeePassium on iOS and Resilio Sync for synchronising across my main and mobile devices. (Syncthing doesn't offer an iOS client, sadly, hence the choice of using Resilio)
- Maakuth 5y ago
  I'm not iOS user myself, but I hear Möbius sync (https://apps.apple.com/us/app/möbius-sync/id1539203216 https://apps.apple.com/us/app/möbius-sync/id1539203216) is reasonably good Syncthing client wrapper for it.
  - willis936 5y ago
    I could never get mobius to behave as I wanted. I host nextcloud and use strongbox. Nextcloud supports WebDAV and strongbox works well with syncing through that.
- zuhsetaqi 5y ago
  I use Strongbox on iOS which I highly recommend checking out. It's payed (one time) but open source
  - deleted 5y ago
    [deleted]
  - fn-mote 5y ago
    > payed (one time) This is true, but pricing is currently $3/mo, $15/year, $60 lifetime. So the one time payment is larger than most.
    - nerdponx 5y ago
      I've easily gotten $60 worth of value out of it. Happy to pay that kind of money for software that I use frequently and that works well.
running101 5y ago
I recently researched password managers, settled on keypassxc. Happy I did. I use keypassxc on windows + keypassxc chrome plugin, strongbox on iOS and google drive for syncing. All works seamlessly.
- rekoil 5y ago
  I'll probably be switching from 1Password soon, as they get ready to force their Electron implementation onto customers. I downloaded Strongbox but I was surprised to find that configuring the storage backend was super confusing. What is the best "backend" for setting up sync between KeePassXC/Strongbox/etc, between multiple clients active simultaneously? Is there a good reason why we haven't seen something like a REST API enabled backend using KeePassXC as a client? Syncing files using off-the-shelf services is great that it exists, but it's obviously far from an optimal solution.
  - mdaniel 5y ago
    If you're after a rest backend for your password manager, Vaultwarden is likely what you're after Having said that, I am in the same camp as some of the other comments in using KPXC for it's AutoType (and ssh agent), so if that's also your requirements then Vaultwarden won't get it done because the Bitwarden clients are aggressively stupid
Semaphor 5y ago
I switched from KeePass to KeePassXC some years ago when I realized the XC browser extension was better than what KeePass offered. Sync via my own Nextcloud, KeePass2Android on mobile, works great :)
- circularfoyers 5y ago
  Have you tried KeePassDX?
  - Semaphor 5y ago
    No, hadn’t even heard of it (or forgotten about it), it didn’t exist when I chose K2A, and I’m not having any issues. Might check it out anyway.
  - JeremyNT 5y ago
    I'm using KeePassDX on Android (sync'd to KeepassXC on PC using syncthing). It works quite well and the GUI feels quite polished. Of all the Keepass implementations in Android it seems to be the most actively maintained and featureful, but it's great to have a few different options. In addition to KeePassDroid (which I used to use, and have no major issues with) there's another (Authpass) on F-Droid which I haven't yet tried but looks promising.
  - worble 5y ago
    The only issue with KeepassDX is that it doesn't yet support yubikey NFC for challenge response mode, although it's on their roadmap I believe.
  - deleted 5y ago
    [deleted]
wheybags 5y ago
Been using keepassxc with self hosted seafile for sync for a few years now. Keepassdx on android. Super happy with this combo.
- k8sToGo 5y ago
  Is KeepassDX better than KeepPass2Android?
  - LeonidasXIV 5y ago
    In my experience - yes. I used Keepassdroid and on a new phone decided to try K2A but ended up much preferring the UI of KeepassDX. Its autofill works really well.
baal80spam 5y ago
My only issue (albeit minor) with KeePassXC is that I can't drag'n'drop data (eg. username or password) from entry list to a browser control. It works perfectly in KeePass.
- joshuajill 5y ago
  Keepass was recently found to be less secure and expose password in plain text in some situation. Depending on how your OS deals with drag and drop, might not be the safest option. BTW KeepassXC did not have the same issue.
wink 5y ago
This might have been 2.6 already but I find the new flat interface kinda meh. Sure, not everyone was happy with the old 2.4 "native windows 95" look but with the new one everything just feels too big, like a mobile app on the desktop :(
- dividuum 5y ago
  On my Linux version, there's View > Theme > Classic.
- Psychotherapist 5y ago
  There is a "Compact Mode" you can turn on via the View Menu up top, maybe that helps :)
jl6 5y ago
I still use KeePassX and have no issues with it so no reason to move to XC. I do value an actively maintained project, but I also value stability - and particularly for a security-sensitive application, I quite like the fact that it hasn’t been updated in years (I’m not saying I assume all the bugs have been fixed, just that there is less churn in which bugs could hide). How should I evaluate the respective projects from the perspective of security, and the level of trust I should be placing in the developers?
- k8sToGo 5y ago
  >and particularly for a security-sensitive application, I quite like the fact that it hasn’t been updated in years I feel like this is an oxymoron. At least security updates should be something to look forward to, no?
  - jl6 5y ago
    I welcome updates that fix security vulnerabilities, but I view feature updates as a potential vector for introducing security vulnerabilities. The difficulty is telling the difference between projects that rarely update because there aren’t any vulns, and projects that rarely update because they don’t care.
    - phoerious 5y ago
      KeePassX has literally been abandoned, so you will not get updates of any kind: https://www.keepassx.org/index.html%3Fp=636.html https://www.keepassx.org/index.html%3Fp=636.html
      - jl6 5y ago
        That’s the answer I was looking for!
        k8sToGo 5y ago
        When you said, it does not get any updates, I thought this is what you were referring to. That's why I was confused!
KingJulian 5y ago
Been a happy user of KeePassXC for over 4 years now. I keep the password databases and keys synchronised across devices using Syncthing. Once I've set this up, it's pretty transparent and I haven't had to tinker with it.
- tormock 5y ago
  Same setup, the DB only came out of sync (conflict) a few times but that's because with my setup Syncthing is only doing it's thing when I'm on my local network...
  - KingJulian 5y ago
    > Same setup, the DB only came out of sync (conflict) a few times but that's because with my setup Syncthing is only doing it's thing when I'm on my local network... I see. You've chosen not to use remote sync?
2Gkashmiri 5y ago
keepass is one of those apps you are either forced on to due to a disaster (forgetting your important portal credentials at the most problematic time) or your memory is like a sieve. it took me like 2015-2017 to teach my siblings to use it. now we have copies of each others kbdx files and passwords in our respective files so if there is an emergency to access the others data (which contains btw, all important data besides login credentials, passport numbers, tax information, expiry of policies) and other than the occasional password change which barely happens now because we don't go and willy nilly create accounts or changes. this is a very low cost/maintenance option because the files exist on our phones, in our backups, on our devices, the whole shebang. i don't need an online password manager, it simply will not work for me because i am relying on someone else and because the data is on my device, its as secure as the xkcd plumbing password
- willis936 5y ago
  I started using it because using the same password for everything was a bad practice and it was time to stop. I think the vast majority of people with passwords reuse 1-3 passwords for everything.
  - 2Gkashmiri 5y ago
    sure but over time you forget "usernames". "what was the routing number of my bank" or "when does my passport expire" or "what is the private key of my crypto paper wallet, what is my paper wallet code itself". "what was the recovery email/mobile to my fb/gmail?" this works almost like a safekeep in case a person dies and their heirs get to access important stuff which otherwise get lost. i mean my family has a copy of my file with the password
diego_moita 5y ago
What I love on KeePassXC: * Runs on Linux/Mac/Windows and there are compatible clients for Android. Make your own cloud with a RaspberryPi referred by a DDNS and you'll have super powers. * Auto-type. Is tricky to get it working but once you get it you'll become addicted. * The UI makes it much easier to copy and paste fields and the notes are clearly visible. I often use the notes to store things like github tokens (for git), etc. However, I keep 2FA TOTP codes on my Pebble watch only. If you keep 2FA codes on the same file as your password then it isn't 2 Factor anymore, right? Little things that bothered me: * It took me a while to understand how does the Touch ID/fingertip reader works (you need to turn on the checkbox, press Ok on the authentication modal and then touch the reader). Touch ID is one of those things that suddenly you discover you can't live without. * The browser add-ins are not always smooth and friction-less. Sometimes you need to reload the page, reopen the db. Chrome's add-in is the hardest to get working. Firefox's is better. * Edit: forget this. As varjolintu explains bellow, this is wrong. ~~You can't have multiple addresses per entry. Some sites will login with different URL's and KeepassXC will not recognize all.~~ But I am still a fan. I'd give it a 8/10.
- varjolintu 5y ago
  You can have multiple URL's per entry. However, those only work with the browser extension. Edit entry and go to Browser Integration tab. There's a list of additional URL's.
  - diego_moita 5y ago
    Wow! Now I feel stupid. Thank you. That's very cool.
    - joshuajill 5y ago
      On Linux at least you don't really need a browser extension and can arguably reduce the attack surface You can use global Auto-type which brings up Keepass window where you can pick from relevant entries. You can a Global keyboard shortcut and it will work mostly anywhere.
mhb 5y ago
I use KeePass. Should I switch to KeePassXC?
- mxuribe 5y ago
  You read my mind, as i was just asking myself the same thing. I have recently been thinking of switching over to bitwarden from classic keepass...but now i see keepassXC, and wondered what - if any - compelling feature/need that keepassXC brings...? p.s. - Oh, and the reason for considering even moving to bitwarden is ease of mobile access by several people at once...since schlepping a keepass database via file sync stuff works sort of ok until you have to access the same file via mobile (possible but not great), plus my family and i kept stepping on each other's toes when updating said file, etc. Not hating on keepass, as it has served my family really weell...and i'm very thankful to the keepass devs! It is simply that we might be outgrowing it a tad...maybe.
  - ceesharp 5y ago
    KeePassDX works great on android.
    - mxuribe 5y ago
      Thanks, I'll give it a go.
- theandrewbailey 5y ago
  Do you use any plugins with KeePass? KeePassXC might have those features built in. I had plugins for TOTP, SSH agent, and browser integration in KeePass, and it made setting it up and maintaining it a mild pain, but XC has them out of the box.
  - mhb 5y ago
    WebAutoType. I'll give XC a try. Thanks.
- AdmiralAsshat 5y ago
10729287 5y ago
I use keepass2 at work on a PC/windows and KeepassXC on my home computers (Mac and Linux). The only thing that make me still liking Keepass2 more is its compatibility with plugins. I can't wait for keepassXC to support them.
- Sander_Marechal 5y ago
  Never, ever mix Keepass2 and KeepassXC. KeepassXC does not support the sync protocol from keepass2 that allows multiple people/devices to use the same keepass database. We only found out after losing 200+ passwords.
- phoerious 5y ago
  Why do you want plugins? KeePassXC provides most of what KeePass needs plugins for out of the box in usually much better and more stable and tested quality. KeePassXC will never support plugins the way KeePass does and for good reason. Most plugins are unmaintained and some are outright dangerous to use. Your passwords are too precious to let unverified thirdparty plugins handle them. If you need external functionality that is not available in KeePassXC, you can try to bolt it on via the KeePassXC-Browser API or open a feature request (or even better: pull request) to get it into the core application.
  - phoerious 5y ago
    I clarified that on our website, since that topic comes up again and again: https://keepassxc.org/docs/#faq-general-plugins https://keepassxc.org/docs/#faq-general-plugins
  - marwis 5y ago
    I need to integrate 3rd party custom OTP. In KeePass2 this can be done with plugins or even easier with {CMD} placeholder. KPXC supports neither :(
youerbt 5y ago
Tagging was the single biggest thing I was missing in KeePassXC. Great to see it finally released. I guess it is time to clean my database a bit. KeePassXC is a great program and combined with synthing, excellent solution to managing your passwords.
mettamage 5y ago
I've heard this one recommended over and over again. Are there any "I wish I knew this beforehand" type of tips? Also, how would people compare this to something such as 1Password?
- mixedCase 5y ago
  Multiple devices is a slight pain, you have to keep everything synchronized yourself, and conflicts mean you can lose passwords in your sync service debris (if you even have that feature). I switched to Bitwarden in order to deal with this.
  - Narigo 5y ago
    Did you try diffing the conflicting databases through a tool like keepass-diff before switching? I'm the author of keepass-diff and built it for my own needs. Looking through the comments here about why people switched from Keepass to Bitwarden, it feels like the compare feature is something that should be integrated to UI clients as many people seem to face this problem. I always assumed it was more because of permissions and better ability to work with it as a team...
    - mixedCase 5y ago
      I did not, I wasn't aware of keepass-diff and certainly it would've been able to solve the problem. But to tell you the truth I don't think I would use it. This is something that I really don't want to have to worry about regardless of what device I'm using.
      - Narigo 5y ago
        Thanks for the insight! I guess it's a hard problem to solve with these conflicts. I'm wondering how it could be automatically resolved if a user has the same thing open multiple times with changes to the same password...
- dano 5y ago
  I used KeePassXC for many years. As the number of devices on which I need my password manager proliferated I've moved to BitWarden primarily for the built-in database replication. One can certainly replicate KeePassXC db's using any variety of methods, but it becomes a liability on my time to ensure that it is operating properly. KeePassXC is quite a fine and useful bit of software. The lack of built-in replication is considered by many (me included) as more secure as the db is only on a single system and never in the cloud or on the wire.
AdmiralAsshat 5y ago
KeePassXC won't let me upgrade/install the new version without rebooting. Exactly what "service" is it trying to modify at the OS level that it can't do without restarting?
- ConfusedDog 5y ago
  I just tried it. On Windows, after install, you have 2 choices of restarting keepassxc-proxy.exe or rebooting OS. Restarting application failed bc folder/file is being held. It said failed, but without rebooting OS, it seems to have upgraded without problem.
qwerty456127 5y ago
KeePassXC seems more cool from the technical point of view but I like the original KeePass 2 look&feel much more. Is there a way to configure KeePassXC to look and feel like KeePass 2?
- joshuajill 5y ago
  Keepass was found to have a security issue recently which exposed password in plain text on log files, which makes me happy I never used it. KeePassXC had no such issue. That was CVE-2022-0275 https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=keepass https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=keepass
- red_trumpet 5y ago
  You can enable the Classic (platform-native) theme, and Compact Mode.
Sander_Marechal 5y ago
PSA: Never, ever mix Keepass2 and KeepassXC when using network shares. KeepassXC does not support the sync protocol from keepass2 that allows multiple people/devices to use the same keepass database. We only found out after losing 200+ passwords.
- XorNot 5y ago
  I'd say there's no good reason to ever use multiple shared access compared to synchronizing with hooks on open.
  - kkjjkgjjgg 5y ago
    What is synchronizing with hooks on open?
    - XorNot 5y ago
      KeePass has triggers to run on open/close. Set them up to do a sync with your network share and the local database. This way every user has an up to date synced copy.
      - kkjjkgjjgg 5y ago
        Thanks!
clircle 5y ago
Switched from Bitwarden to KeepassXC+Syncthing last year, and I'm very pleased. But I personally enjoy collecting and organizing passwords, and I treat the KeePassXC database report as a kind of game that I'm trying to get a high score on (as many unique PWs as possible with high entropy).
anta40 5y ago
Wait a second... So is this another KeePass fork, and is different from this one: https://formulae.brew.sh/cask/keepassx https://formulae.brew.sh/cask/keepassx ?
- Iolaum 5y ago
  KeePassXC is a fork of KeePassX, which is a fork of KeePass. There are some small differences between the projects in technical aspects but I don't fully recall the details. The C in KeePassXC stands for community IRC. Subjectively I 'd say that if you are wondering which of the 3 to use, go with KeePassXC. That's what I am using.
  - phoerious 5y ago
    KeePassX was abandoned years ago, which is why KeePassXC exists. KeePass is a different product and more like the original inspiration for KeePassX/XC.
  - laurent123456 5y ago
    KeePassX wasn't a fork of KeePass since one was developed in Qt, the other in .NET. It was just a compatible program.
- k8sToGo 5y ago
  Originally, they wanted to merge KeepassXC back to KeepassX, but that idea got tossed.
sigzero 5y ago
I wish it had templates for credit cards.
- abdullahkhalids 5y ago
  The other critical feature I want is for it to store my expired passwords, once I change them. I have had stupid services where the old passwords were still in use somewhere or the other, and I don't want to delete them. Right now I just copy past them in the notes, but there should be an easier way.
  - iamateapot 5y ago
    KeePassXC has a history function? https://keepassxc.org/docs/KeePassXC_UserGuide.html#_history https://keepassxc.org/docs/KeePassXC_UserGuide.html#_history
    - abdullahkhalids 5y ago
      I didn't know this was a thing. This works I think.
323 5y ago
One thing I like about the original KeePass is that it uses Secure Desktop API on Windows, which makes it difficult for malware/keyloggers to intercept your password as you enter it if you are infected. https://keepass.info/help/kb/sec_desk.html https://keepass.info/help/kb/sec_desk.html I wish KeePassXC would implement this functionality on Windows. Seems there is an open issue, but KeePassXC author says this is just Windows security theater: https://github.com/keepassxreboot/keepassxc/issues/3460 https://github.com/keepassxreboot/keepassxc/issues/3460
- riedel 5y ago
  I had a discussion today with the author on also on a security topic. I feel that he has a very opinionated take at usable security (nothing strictly bad about it). My problem is that probably anyone can easily extract the key of the registered browser extension. Therefore it is really important to no "remember" the choice to share the password with the browser as it is otherwise rather easy to exfiltrate it (having local access to a running machine). IMHO the security an threat models aof many password managers are only clear to the authors. It is very difficult to make informed choices as a user. I don't like that every password manager claims to have the better solution without really explaining themselves to the user in a sincere way ( including tradeoffs)
edwinyzh 5y ago
Does KeePassXC has triggers like KeePass? I use triggers to auto-mount TrueCrypt drives after opened the password database, does KeepPassCX allow me to do the same thing? Thanks.
electrotype 5y ago
I use regular KeePass for one reason only: its ability to open a remote database using SFTP. https://keepass.info/plugins.html#sftpsync https://keepass.info/plugins.html#sftpsync
- npteljes 5y ago
  How does this system handle conflicts?
  - electrotype 5y ago
    How exactly, I don't know the details. But there is a built-in "synchronize" feature.
    - npteljes 5y ago
      What would happen if the synchorized safe is open on two computers at the same time, they both add a new entry roughly at the same time? I like the idea of this sync but I don't know how the internal implementation would handle this. Dropbox and Nextcloud both sync the files themselves, and in case of a conflict, they preserve both versions, and let you pick which one you'd like to use as the "canonical". It's a pain but at least the data is preserved.
deleted 5y ago
[deleted]
acquacow 5y ago
Anyone know an easy way to keep it matching domains when the subdomain changes? eg: account.domain.com changes to signon.domain.com at some point and it stops matching. I've gone in and saved some accounts as just domain.com to prevent this, but when creating new passwords/etc, it always adds the current URL and the problem happens again after some time. Thanks!

KeePassXC 2.7.0

242 points by Sami_Lehtinen 5y ago

gtirloni 5y ago

How well does it integrate with web browsing? The Lastpass/1Password extensions work pretty seamlessly.

joshuajill 5y ago
There are browser extensions but you might not even need it if you use the Autotype function.
tormock 5y ago
The auto-type works fine for me with the Firefox Keepass helper url-in-title addon.
- varjolintu 5y ago
  You can also trigger Global Auto-Type from the browser extension with seperate keyboard shortcut (or using context menu), and it handles the URL matching with Auto-Type without any extra extensions.
  - tormock 5y ago
    > and it handles the URL matching with Auto-Type without any extra extensions. I don't see how switching to a different extension will improve anything.... I have global auto-type binded to CTRL-SHIFT-C and it just works

longstation 5y ago

KPXC is brilliant. Recently I switched to it from BitWarden and I am satisfied. The only issue for me is the autotype support on Wayland (it's not there yet; currently only able to auto fill password and username for xwayland app).

brightball 5y ago
I am curious why you switched from Bitwarden? Usually when people are exiting a password manager it’s migrating to Bitwarden or KeePass but you’re the first I’ve heard moving from Bitwarden itself.
- antiframe 5y ago
  I too switched from BitWarden to KeePass. I was reading about browser security and became concerned about running my password manager in the same process as the browser and relying on its sandbox. With KeePassXC I have the option to either forgo browser integration completely or use their addon which communicates to the manager and asks for an entry, which prompts for permission itself or uses an allow list by URL. That makes it much harder for a website to somehow break the sandbox and access my entire database. It's a small change but it does reduce the attack surface as well as force me to manage my data myself which I want to do more of. Also with BitWarden, their UI annoyed me when I needed a password outside the browser. L
- mrandish 5y ago
  I'm not the person you asked but I switched from BitWarden to KeepassXC. BW was very good so the only reason I looked for an alternative was I wanted something that would support entering passwords with autotype in OS apps instead of just the browser.
- longstation 5y ago
  Sorry for my late reply. I replied for the other question above.
Semaphor 5y ago
Curious, why did you switch from BitWarden? It’s usually the other way around (though personally I never felt the need to switch from KPXC).
- gnramires 5y ago
  I chose KPXC because I am in easy access to the database, and since I already pay for cloud hosting I just sync the database on the cloud (I use Seafile, I recommend!). Open and convenient :) I'm sure Bitwarden is more than adequate as well though.

yumiris 5y ago

Love KeePassXC - it's a beautiful and speedy program which simply just works without ever causing any problems. The original KeePass always struck me as a tad heavy due to its somewhat archaic aesthetic and dependency on Mono, whereas KeePassXC looks modern and requires minimal resources and dependencies. I combine it with KeePassium on iOS and Resilio Sync for synchronising across my main and mobile devices. (Syncthing doesn't offer an iOS client, sadly, hence the choice of using Resilio)

Maakuth 5y ago
I'm not iOS user myself, but I hear Möbius sync (https://apps.apple.com/us/app/möbius-sync/id1539203216 https://apps.apple.com/us/app/möbius-sync/id1539203216) is reasonably good Syncthing client wrapper for it.
- willis936 5y ago
  I could never get mobius to behave as I wanted. I host nextcloud and use strongbox. Nextcloud supports WebDAV and strongbox works well with syncing through that.
zuhsetaqi 5y ago
I use Strongbox on iOS which I highly recommend checking out. It's payed (one time) but open source
- deleted 5y ago
  [deleted]
- fn-mote 5y ago
  > payed (one time) This is true, but pricing is currently $3/mo, $15/year, $60 lifetime. So the one time payment is larger than most.
  - nerdponx 5y ago
    I've easily gotten $60 worth of value out of it. Happy to pay that kind of money for software that I use frequently and that works well.

running101 5y ago

I recently researched password managers, settled on keypassxc. Happy I did. I use keypassxc on windows + keypassxc chrome plugin, strongbox on iOS and google drive for syncing. All works seamlessly.

rekoil 5y ago
I'll probably be switching from 1Password soon, as they get ready to force their Electron implementation onto customers. I downloaded Strongbox but I was surprised to find that configuring the storage backend was super confusing. What is the best "backend" for setting up sync between KeePassXC/Strongbox/etc, between multiple clients active simultaneously? Is there a good reason why we haven't seen something like a REST API enabled backend using KeePassXC as a client? Syncing files using off-the-shelf services is great that it exists, but it's obviously far from an optimal solution.
- mdaniel 5y ago
  If you're after a rest backend for your password manager, Vaultwarden is likely what you're after Having said that, I am in the same camp as some of the other comments in using KPXC for it's AutoType (and ssh agent), so if that's also your requirements then Vaultwarden won't get it done because the Bitwarden clients are aggressively stupid

Semaphor 5y ago

I switched from KeePass to KeePassXC some years ago when I realized the XC browser extension was better than what KeePass offered. Sync via my own Nextcloud, KeePass2Android on mobile, works great :)

circularfoyers 5y ago
Have you tried KeePassDX?
- Semaphor 5y ago
  No, hadn’t even heard of it (or forgotten about it), it didn’t exist when I chose K2A, and I’m not having any issues. Might check it out anyway.
- JeremyNT 5y ago
  I'm using KeePassDX on Android (sync'd to KeepassXC on PC using syncthing). It works quite well and the GUI feels quite polished. Of all the Keepass implementations in Android it seems to be the most actively maintained and featureful, but it's great to have a few different options. In addition to KeePassDroid (which I used to use, and have no major issues with) there's another (Authpass) on F-Droid which I haven't yet tried but looks promising.
- worble 5y ago
  The only issue with KeepassDX is that it doesn't yet support yubikey NFC for challenge response mode, although it's on their roadmap I believe.
- deleted 5y ago
  [deleted]

wheybags 5y ago

Been using keepassxc with self hosted seafile for sync for a few years now. Keepassdx on android. Super happy with this combo.

k8sToGo 5y ago
Is KeepassDX better than KeepPass2Android?
- LeonidasXIV 5y ago
  In my experience - yes. I used Keepassdroid and on a new phone decided to try K2A but ended up much preferring the UI of KeepassDX. Its autofill works really well.

baal80spam 5y ago

My only issue (albeit minor) with KeePassXC is that I can't drag'n'drop data (eg. username or password) from entry list to a browser control. It works perfectly in KeePass.

joshuajill 5y ago
Keepass was recently found to be less secure and expose password in plain text in some situation. Depending on how your OS deals with drag and drop, might not be the safest option. BTW KeepassXC did not have the same issue.

wink 5y ago

This might have been 2.6 already but I find the new flat interface kinda meh. Sure, not everyone was happy with the old 2.4 "native windows 95" look but with the new one everything just feels too big, like a mobile app on the desktop :(

dividuum 5y ago
On my Linux version, there's View > Theme > Classic.
Psychotherapist 5y ago
There is a "Compact Mode" you can turn on via the View Menu up top, maybe that helps :)

jl6 5y ago

I still use KeePassX and have no issues with it so no reason to move to XC. I do value an actively maintained project, but I also value stability - and particularly for a security-sensitive application, I quite like the fact that it hasn’t been updated in years (I’m not saying I assume all the bugs have been fixed, just that there is less churn in which bugs could hide). How should I evaluate the respective projects from the perspective of security, and the level of trust I should be placing in the developers?

k8sToGo 5y ago
>and particularly for a security-sensitive application, I quite like the fact that it hasn’t been updated in years I feel like this is an oxymoron. At least security updates should be something to look forward to, no?
- jl6 5y ago
  I welcome updates that fix security vulnerabilities, but I view feature updates as a potential vector for introducing security vulnerabilities. The difficulty is telling the difference between projects that rarely update because there aren’t any vulns, and projects that rarely update because they don’t care.
  - phoerious 5y ago
    KeePassX has literally been abandoned, so you will not get updates of any kind: https://www.keepassx.org/index.html%3Fp=636.html https://www.keepassx.org/index.html%3Fp=636.html
    - jl6 5y ago
      That’s the answer I was looking for!
      - k8sToGo 5y ago
        When you said, it does not get any updates, I thought this is what you were referring to. That's why I was confused!

KingJulian 5y ago

Been a happy user of KeePassXC for over 4 years now. I keep the password databases and keys synchronised across devices using Syncthing. Once I've set this up, it's pretty transparent and I haven't had to tinker with it.

tormock 5y ago
Same setup, the DB only came out of sync (conflict) a few times but that's because with my setup Syncthing is only doing it's thing when I'm on my local network...
- KingJulian 5y ago
  > Same setup, the DB only came out of sync (conflict) a few times but that's because with my setup Syncthing is only doing it's thing when I'm on my local network... I see. You've chosen not to use remote sync?

2Gkashmiri 5y ago

keepass is one of those apps you are either forced on to due to a disaster (forgetting your important portal credentials at the most problematic time) or your memory is like a sieve. it took me like 2015-2017 to teach my siblings to use it. now we have copies of each others kbdx files and passwords in our respective files so if there is an emergency to access the others data (which contains btw, all important data besides login credentials, passport numbers, tax information, expiry of policies) and other than the occasional password change which barely happens now because we don't go and willy nilly create accounts or changes. this is a very low cost/maintenance option because the files exist on our phones, in our backups, on our devices, the whole shebang. i don't need an online password manager, it simply will not work for me because i am relying on someone else and because the data is on my device, its as secure as the xkcd plumbing password

willis936 5y ago
I started using it because using the same password for everything was a bad practice and it was time to stop. I think the vast majority of people with passwords reuse 1-3 passwords for everything.
- 2Gkashmiri 5y ago
  sure but over time you forget "usernames". "what was the routing number of my bank" or "when does my passport expire" or "what is the private key of my crypto paper wallet, what is my paper wallet code itself". "what was the recovery email/mobile to my fb/gmail?" this works almost like a safekeep in case a person dies and their heirs get to access important stuff which otherwise get lost. i mean my family has a copy of my file with the password

diego_moita 5y ago

What I love on KeePassXC: * Runs on Linux/Mac/Windows and there are compatible clients for Android. Make your own cloud with a RaspberryPi referred by a DDNS and you'll have super powers. * Auto-type. Is tricky to get it working but once you get it you'll become addicted. * The UI makes it much easier to copy and paste fields and the notes are clearly visible. I often use the notes to store things like github tokens (for git), etc. However, I keep 2FA TOTP codes on my Pebble watch only. If you keep 2FA codes on the same file as your password then it isn't 2 Factor anymore, right? Little things that bothered me: * It took me a while to understand how does the Touch ID/fingertip reader works (you need to turn on the checkbox, press Ok on the authentication modal and then touch the reader). Touch ID is one of those things that suddenly you discover you can't live without. * The browser add-ins are not always smooth and friction-less. Sometimes you need to reload the page, reopen the db. Chrome's add-in is the hardest to get working. Firefox's is better. * Edit: forget this. As varjolintu explains bellow, this is wrong. ~~You can't have multiple addresses per entry. Some sites will login with different URL's and KeepassXC will not recognize all.~~ But I am still a fan. I'd give it a 8/10.

varjolintu 5y ago
You can have multiple URL's per entry. However, those only work with the browser extension. Edit entry and go to Browser Integration tab. There's a list of additional URL's.
- diego_moita 5y ago
  Wow! Now I feel stupid. Thank you. That's very cool.
  - joshuajill 5y ago
    On Linux at least you don't really need a browser extension and can arguably reduce the attack surface You can use global Auto-type which brings up Keepass window where you can pick from relevant entries. You can a Global keyboard shortcut and it will work mostly anywhere.

mhb 5y ago

I use KeePass. Should I switch to KeePassXC?

mxuribe 5y ago
You read my mind, as i was just asking myself the same thing. I have recently been thinking of switching over to bitwarden from classic keepass...but now i see keepassXC, and wondered what - if any - compelling feature/need that keepassXC brings...? p.s. - Oh, and the reason for considering even moving to bitwarden is ease of mobile access by several people at once...since schlepping a keepass database via file sync stuff works sort of ok until you have to access the same file via mobile (possible but not great), plus my family and i kept stepping on each other's toes when updating said file, etc. Not hating on keepass, as it has served my family really weell...and i'm very thankful to the keepass devs! It is simply that we might be outgrowing it a tad...maybe.
- ceesharp 5y ago
  KeePassDX works great on android.
  - mxuribe 5y ago
    Thanks, I'll give it a go.
theandrewbailey 5y ago
Do you use any plugins with KeePass? KeePassXC might have those features built in. I had plugins for TOTP, SSH agent, and browser integration in KeePass, and it made setting it up and maintaining it a mild pain, but XC has them out of the box.
- mhb 5y ago
  WebAutoType. I'll give XC a try. Thanks.
AdmiralAsshat 5y ago

10729287 5y ago

I use keepass2 at work on a PC/windows and KeepassXC on my home computers (Mac and Linux). The only thing that make me still liking Keepass2 more is its compatibility with plugins. I can't wait for keepassXC to support them.

Sander_Marechal 5y ago
Never, ever mix Keepass2 and KeepassXC. KeepassXC does not support the sync protocol from keepass2 that allows multiple people/devices to use the same keepass database. We only found out after losing 200+ passwords.
phoerious 5y ago
Why do you want plugins? KeePassXC provides most of what KeePass needs plugins for out of the box in usually much better and more stable and tested quality. KeePassXC will never support plugins the way KeePass does and for good reason. Most plugins are unmaintained and some are outright dangerous to use. Your passwords are too precious to let unverified thirdparty plugins handle them. If you need external functionality that is not available in KeePassXC, you can try to bolt it on via the KeePassXC-Browser API or open a feature request (or even better: pull request) to get it into the core application.
- phoerious 5y ago
  I clarified that on our website, since that topic comes up again and again: https://keepassxc.org/docs/#faq-general-plugins https://keepassxc.org/docs/#faq-general-plugins
- marwis 5y ago
  I need to integrate 3rd party custom OTP. In KeePass2 this can be done with plugins or even easier with {CMD} placeholder. KPXC supports neither :(

youerbt 5y ago

Tagging was the single biggest thing I was missing in KeePassXC. Great to see it finally released. I guess it is time to clean my database a bit. KeePassXC is a great program and combined with synthing, excellent solution to managing your passwords.

mettamage 5y ago

I've heard this one recommended over and over again. Are there any "I wish I knew this beforehand" type of tips? Also, how would people compare this to something such as 1Password?

mixedCase 5y ago
Multiple devices is a slight pain, you have to keep everything synchronized yourself, and conflicts mean you can lose passwords in your sync service debris (if you even have that feature). I switched to Bitwarden in order to deal with this.
- Narigo 5y ago
  Did you try diffing the conflicting databases through a tool like keepass-diff before switching? I'm the author of keepass-diff and built it for my own needs. Looking through the comments here about why people switched from Keepass to Bitwarden, it feels like the compare feature is something that should be integrated to UI clients as many people seem to face this problem. I always assumed it was more because of permissions and better ability to work with it as a team...
  - mixedCase 5y ago
    I did not, I wasn't aware of keepass-diff and certainly it would've been able to solve the problem. But to tell you the truth I don't think I would use it. This is something that I really don't want to have to worry about regardless of what device I'm using.
    - Narigo 5y ago
      Thanks for the insight! I guess it's a hard problem to solve with these conflicts. I'm wondering how it could be automatically resolved if a user has the same thing open multiple times with changes to the same password...
dano 5y ago
I used KeePassXC for many years. As the number of devices on which I need my password manager proliferated I've moved to BitWarden primarily for the built-in database replication. One can certainly replicate KeePassXC db's using any variety of methods, but it becomes a liability on my time to ensure that it is operating properly. KeePassXC is quite a fine and useful bit of software. The lack of built-in replication is considered by many (me included) as more secure as the db is only on a single system and never in the cloud or on the wire.

AdmiralAsshat 5y ago

KeePassXC won't let me upgrade/install the new version without rebooting. Exactly what "service" is it trying to modify at the OS level that it can't do without restarting?

ConfusedDog 5y ago
I just tried it. On Windows, after install, you have 2 choices of restarting keepassxc-proxy.exe or rebooting OS. Restarting application failed bc folder/file is being held. It said failed, but without rebooting OS, it seems to have upgraded without problem.

qwerty456127 5y ago

KeePassXC seems more cool from the technical point of view but I like the original KeePass 2 look&feel much more. Is there a way to configure KeePassXC to look and feel like KeePass 2?

joshuajill 5y ago
Keepass was found to have a security issue recently which exposed password in plain text on log files, which makes me happy I never used it. KeePassXC had no such issue. That was CVE-2022-0275 https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=keepass https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=keepass
red_trumpet 5y ago
You can enable the Classic (platform-native) theme, and Compact Mode.

Sander_Marechal 5y ago

PSA: Never, ever mix Keepass2 and KeepassXC when using network shares. KeepassXC does not support the sync protocol from keepass2 that allows multiple people/devices to use the same keepass database. We only found out after losing 200+ passwords.

XorNot 5y ago
I'd say there's no good reason to ever use multiple shared access compared to synchronizing with hooks on open.
- kkjjkgjjgg 5y ago
  What is synchronizing with hooks on open?
  - XorNot 5y ago
    KeePass has triggers to run on open/close. Set them up to do a sync with your network share and the local database. This way every user has an up to date synced copy.
    - kkjjkgjjgg 5y ago
      Thanks!

clircle 5y ago

Switched from Bitwarden to KeepassXC+Syncthing last year, and I'm very pleased. But I personally enjoy collecting and organizing passwords, and I treat the KeePassXC database report as a kind of game that I'm trying to get a high score on (as many unique PWs as possible with high entropy).

anta40 5y ago

Wait a second... So is this another KeePass fork, and is different from this one: https://formulae.brew.sh/cask/keepassx https://formulae.brew.sh/cask/keepassx ?

Iolaum 5y ago
KeePassXC is a fork of KeePassX, which is a fork of KeePass. There are some small differences between the projects in technical aspects but I don't fully recall the details. The C in KeePassXC stands for community IRC. Subjectively I 'd say that if you are wondering which of the 3 to use, go with KeePassXC. That's what I am using.
- phoerious 5y ago
  KeePassX was abandoned years ago, which is why KeePassXC exists. KeePass is a different product and more like the original inspiration for KeePassX/XC.
- laurent123456 5y ago
  KeePassX wasn't a fork of KeePass since one was developed in Qt, the other in .NET. It was just a compatible program.
k8sToGo 5y ago
Originally, they wanted to merge KeepassXC back to KeepassX, but that idea got tossed.

sigzero 5y ago

I wish it had templates for credit cards.

abdullahkhalids 5y ago
The other critical feature I want is for it to store my expired passwords, once I change them. I have had stupid services where the old passwords were still in use somewhere or the other, and I don't want to delete them. Right now I just copy past them in the notes, but there should be an easier way.
- iamateapot 5y ago
  KeePassXC has a history function? https://keepassxc.org/docs/KeePassXC_UserGuide.html#_history https://keepassxc.org/docs/KeePassXC_UserGuide.html#_history
  - abdullahkhalids 5y ago
    I didn't know this was a thing. This works I think.

323 5y ago

One thing I like about the original KeePass is that it uses Secure Desktop API on Windows, which makes it difficult for malware/keyloggers to intercept your password as you enter it if you are infected. https://keepass.info/help/kb/sec_desk.html https://keepass.info/help/kb/sec_desk.html I wish KeePassXC would implement this functionality on Windows. Seems there is an open issue, but KeePassXC author says this is just Windows security theater: https://github.com/keepassxreboot/keepassxc/issues/3460 https://github.com/keepassxreboot/keepassxc/issues/3460

riedel 5y ago
I had a discussion today with the author on also on a security topic. I feel that he has a very opinionated take at usable security (nothing strictly bad about it). My problem is that probably anyone can easily extract the key of the registered browser extension. Therefore it is really important to no "remember" the choice to share the password with the browser as it is otherwise rather easy to exfiltrate it (having local access to a running machine). IMHO the security an threat models aof many password managers are only clear to the authors. It is very difficult to make informed choices as a user. I don't like that every password manager claims to have the better solution without really explaining themselves to the user in a sincere way ( including tradeoffs)

edwinyzh 5y ago

Does KeePassXC has triggers like KeePass? I use triggers to auto-mount TrueCrypt drives after opened the password database, does KeepPassCX allow me to do the same thing? Thanks.

electrotype 5y ago

I use regular KeePass for one reason only: its ability to open a remote database using SFTP. https://keepass.info/plugins.html#sftpsync https://keepass.info/plugins.html#sftpsync

npteljes 5y ago
How does this system handle conflicts?
- electrotype 5y ago
  How exactly, I don't know the details. But there is a built-in "synchronize" feature.
  - npteljes 5y ago
    What would happen if the synchorized safe is open on two computers at the same time, they both add a new entry roughly at the same time? I like the idea of this sync but I don't know how the internal implementation would handle this. Dropbox and Nextcloud both sync the files themselves, and in case of a conflict, they preserve both versions, and let you pick which one you'd like to use as the "canonical". It's a pain but at least the data is preserved.

deleted 5y ago

[deleted]

acquacow 5y ago

Anyone know an easy way to keep it matching domains when the subdomain changes? eg: account.domain.com changes to signon.domain.com at some point and it stops matching. I've gone in and saved some accounts as just domain.com to prevent this, but when creating new passwords/etc, it always adds the current URL and the problem happens again after some time. Thanks!