Live data from Hacker News

KeePassXC 2.3.0 released

keepassxc.org

31–40 of 105 posts

Re: KeePassXC 2.3.0 released

#31
post #30

Is it worth moving to this from 1Password? I mean I don't have any problems at all tho I use an old version (6 on Mac, 4 on Win), the permanent license version not this new subscription. I was thinking to use this with Dropbox, Chrome, and iOS client (MiniKeePass?)

I suggest using Bitwarden (open source) instead. See my article: https://greycoder.com/bitwarden-excellent-free-password-mana...

Re: KeePassXC 2.3.0 released

#32

Previous thread about KeepPassXC 2.2.0: https://news.ycombinator.com/item?id=14633576 I used KeePassXC for a period, but from these release notes, the UI/UX still isn't great. If you're on macOS, I recommend MacPass, which feels more native to the system, is compatible with existing KBDX databases and most-importantly, is also open-source: https://github.com/MacPass/MacPass

I just switched from MacPass to KeePassXC for the reason mentioned in release notes: it obsoletes the HTTP Connector and uses another mechanism. MacPass keeps using HTTP, and it is uknown, when it will do the same switch.

Given that I use multiple computers, and the extensions are synced, I want to use the same mechanism on all of them.

Re: KeePassXC 2.3.0 released

#34

Is it worth to migrate from Keepass2 to this? Any interesting user experiences?

I'm strongly considering it just based on the community surrounding each project.

KeePass 2 seems to still be hosted on Sourceforge, and I'm not even sure where to get a copy of the latest (non-release) version of the source. The [Sourceforge repo][1] seems to be an outdated SVN repo which was last updated in 2009, and I don't see any description of how to contribute code to the project anywhere. As a result I'm not really sure how to gauge the level of activity on the project itself. Similarly, the website is ancient and doesn't seem to have kept up with the times; I seem to recall it was only recently that it even got HTTPS support.

In contrast, KeePassXC is hosted on GitHub, development is done out in the open, and it's trivial to see that in just the last year there were [dozens of individual contributors][2]. The website looks clean, is user-friendly with up-to-date documentation, and a [contribution guide][3] is plainly visible in the README on GitHub.

As a result, I feel a bit better about the long-term prospects of KeePassXC over KeePass 2.

[1]: https://sourceforge.net/p/keepass/code/HEAD/tree/

[2]: https://github.com/keepassxreboot/keepassxc/graphs/contribut...

[3]: https://github.com/keepassxreboot/keepassxc#contributing

Re: KeePassXC 2.3.0 released

#35

Anybody have thoughts about where to store the encrypted database for backup? Would it be foolish to keep the database somewhere publicly accessible?

I store the .kdbx (database) file on a network synced folder (e.g. like dropbox or gdrive). However, I use a "key file" in addition to a password. The key file is not synced and remains on computers that I control. I also have a backup copy on external media.

Re: KeePassXC 2.3.0 released

#36

Anybody use this along with a non-tech significant other? How does it compare to commercial password managers in terms of usability?

Usability is too low, unapproachable for non techies. Even my somewhat technical spouse found it unusable after a few months. It could be better with good browser plugins, but then you have the same security tradeoffs as more polished services like Bitwarden or LastPass.

> but then you have the same security tradeoffs as more polished services like Bitwarden or LastPass.

Not exactly. The database is handled with an independent program. With the new model, AFAIK, the browser extensions have no idea what records exist and can only query - and record matching is actually authenticated before plugin sees anything.

Re: KeePassXC 2.3.0 released

#37
Does anyone know of an iOS client that supports Argon2? The amazing Keepass2Android already supports it, but I can't move to it until there is also an iOS solution…

Re: KeePassXC 2.3.0 released

#38

Anybody have thoughts about where to store the encrypted database for backup? Would it be foolish to keep the database somewhere publicly accessible?

I would be leery of storing the DB file somewhere public (e.g., a public Github repo) even if it's encrypted with a private key file. I prefer the method mentioned by @nas which is what I personally do.

Re: KeePassXC 2.3.0 released

#39

Anybody have thoughts about where to store the encrypted database for backup? Would it be foolish to keep the database somewhere publicly accessible?

I use Spideroak (https://spideroak.com/one/). They encrypt your data. That coupled with the DB being encrypted means it's about as secure as you can get while cloud syncing.

Re: KeePassXC 2.3.0 released

#40

Since it got a lot of positive attention last time, here's a rough guide on getting started with password management, aimed at readers here who are not currently using a password manager: https://leclan.ch/password-managers/ TLDR: Download KeepassXC and start using it. :)

What does it do that Keepass/KeepassX cannot do? I looked at their website and nothing new shows up.
Post reply on HN