Live data from Hacker News

KeePassXC 2.3.0 released

keepassxc.org

51–60 of 105 posts

Re: KeePassXC 2.3.0 released

#51

Anybody have thoughts about where to store the encrypted database for backup? Would it be foolish to keep the database somewhere publicly accessible?

I use Resilio Sync to get the database to my phone, to my laptop, to my workstation at work and to my ZFS FreeNAS box at home. The NAS box does snapshots so any mistakes are easily reversed if needed.

The key file I just keep with me, doesn't follow the database, even though I own the cloud storage.

Btw. this is definitely the best password manager I've used. A simple QT interface and and I have it available from Mod+Shift++ in my i3 setup.

Re: KeePassXC 2.3.0 released

#52
post #49

I was a longtime user of KeePassX. The UI was terrible, but it was free, open source and most importantly cross platform. After KeePass2 made the DB incompatible and rewrote everything in C# it stopped being a proper cross platform product and I investigated aternatices. I've since moved to enpass and I'm very happy. Enpass is a great, native app on Win/Mac/Linux and has native Android/iOS apps (with fingerprint supp…

Only problem with it as i see it, it's closed source.

I switched to Bitwarden for that reason alone.

With that said, Bitwarden has it's issues: https://github.com/bitwarden/browser/issues/77

Re: KeePassXC 2.3.0 released

#53

Previous thread about KeepPassXC 2.2.0: https://news.ycombinator.com/item?id=14633576 I used KeePassXC for a period, but from these release notes, the UI/UX still isn't great. If you're on macOS, I recommend MacPass, which feels more native to the system, is compatible with existing KBDX databases and most-importantly, is also open-source: https://github.com/MacPass/MacPass

Also macPass is compatible with Keepass database 1.0, unlike KeepassXC.

Are you sure? The screenshot at the link URL has a button that suggests at least importing from Keepass 1 is supported.

Re: KeePassXC 2.3.0 released

#54

Anybody use this along with a non-tech significant other? How does it compare to commercial password managers in terms of usability?

It's not too bad at all. You need to walk through it with many users.

My wife, parents and in-laws all use it. The only thing that is a gotcha is sync. It's isn't obvious to folks that when you open a synced vault on an iOS device that it may not sync back.

Re: KeePassXC 2.3.0 released

#55
post #31

Earlier quoted context omitted.

I suggest using Bitwarden (open source) instead. See my article: https://greycoder.com/bitwarden-excellent-free-password-mana...

The linked article is very light on details to be called a comparison. Let me try to make it a little bit more detailed. ==================== Bitwarden: - Is essentially a service (with FLOSS client software and FLOSS server code). - Quite polished browser integration (to the extent browsers allow it). - Third party server holding the encrypted data. Proprietary (in a "completely unique, not compatible with anything…

I don't see anything wrong, but will add:

Bitwarden has a desktop app(electron .. sigh but is cross-platform) and has integrations with all the major browsers (Safari, Firefox, Chrome, IE)

Bitwarden also has Mobile support (iOS, Android & UWP).

KeepassXC only does Chrome(and family) and Firefox I believe.

Running your own bitwarden server is not difficult, and there are 3 implementations that I know about:

    The original .NET: https://github.com/bitwarden/core
    The Ruby one: https://github.com/jcs/bitwarden-ruby/
    The Go one: https://github.com/VictorNine/bitwarden-go

Re: KeePassXC 2.3.0 released

#56
post #48

Does anyone know what the license is for this software? It looks like there are NINE different license files in the repo: https://github.com/keepassxreboot/keepassxc Did they just copy paste every different license they could find into the repo?

https://keepassxc.org/

> The full source code is published under the terms of the GNU General Public License. We see open source as a vital prerequisite for any security-critical software product. For that reason, KeePassXC is and always will be free as in freedom (and in beer). Contributions by everyone are welcome!

Re: KeePassXC 2.3.0 released

#57
post #48

Does anyone know what the license is for this software? It looks like there are NINE different license files in the repo: https://github.com/keepassxreboot/keepassxc Did they just copy paste every different license they could find into the repo?

Not all parts of the source code are available under the same license. The individual source code files include the applicable license. Doing this is fine for compatible licenses and not unusual for projects, though it can make certain things more complicated. Here's an example of what GNU says about GPL compatibility[1] - roughly meaning the whole work is published as GPL.

[1]: https://www.gnu.org/licenses/gpl-faq.html#WhatDoesCompatMean

Re: KeePassXC 2.3.0 released

#58
post #48

Does anyone know what the license is for this software? It looks like there are NINE different license files in the repo: https://github.com/keepassxreboot/keepassxc Did they just copy paste every different license they could find into the repo?

[deleted]

Re: KeePassXC 2.3.0 released

#59
post #35

Earlier quoted context omitted.

I store the .kdbx (database) file on a network synced folder (e.g. like dropbox or gdrive). However, I use a "key file" in addition to a password. The key file is not synced and remains on computers that I control. I also have a backup copy on external media.

Aren't you worried about that fact that any program you run could potentially read all your passwords using the key file?

You can have a composite password to unlock consisting of keyfile + passphrase.
Post reply on HN