Live data from Hacker News

KeePassXC 2.3.0 released

keepassxc.org

61–70 of 105 posts

Re: KeePassXC 2.3.0 released

#61

I highly recommend https://keeweb.info/ if you're looking for an attractive, easy to use, cross-platform and Open Source solution. I've been using it on Windows and MacOS for years without any major issues. It's by far the best looking front-end for keepass databases I've seen.

Unfortunately it's slow as hell. KDBX4 file, ChaCha20/Argon2 30 rounds, that takes under a second to open in KeePassXC took 10 seconds in this app.

Electron apps ...

Re: KeePassXC 2.3.0 released

#62
post #35

Earlier quoted context omitted.

I store the .kdbx (database) file on a network synced folder (e.g. like dropbox or gdrive). However, I use a "key file" in addition to a password. The key file is not synced and remains on computers that I control. I also have a backup copy on external media.

Aren't you worried about that fact that any program you run could potentially read all your passwords using the key file?

keyfile in addition to a strong password.

Re: KeePassXC 2.3.0 released

#63

Anybody have thoughts about where to store the encrypted database for backup? Would it be foolish to keep the database somewhere publicly accessible?

Assuming you chose a strong passphrase, which you safeguard properly, and barring keyloggers, you should have absolutely no issue having your encrypted database published on the front page of google.com and offered to everybody.

Just ensure you have a few million key transformation iterations to really harden it against bruteforcing attempts.

In reality, though, given that you can never be 100% sure you don't have a keylogger or other malware, you shouldn't really volunteer half the keys to the kingdom (= the database) to the world.

Actually, if you handle third party data this could even be a breach of regulations (think HIPAA)

Re: KeePassXC 2.3.0 released

#64
The best UX improvement in this release (IMHO) is pretty buried in the changelog, and I don't see it mentioned here: no more lock files!

If you use Keepass on something like Dropbox it's a blessing.

Re: KeePassXC 2.3.0 released

#65
post #34

Is it worth to migrate from Keepass2 to this? Any interesting user experiences?

I'm strongly considering it just based on the community surrounding each project. KeePass 2 seems to still be hosted on Sourceforge, and I'm not even sure where to get a copy of the latest (non-release) version of the source. The [Sourceforge repo][1] seems to be an outdated SVN repo which was last updated in 2009, and I don't see any description of how to contribute code to the project anywhere. As a result I'm not…

The threads found on this are disappointing as well ([1] and [2]). The author(s), as far as I can tell, only make the source available for each release. They do not want a public repository and are very resistant when others ask.

They do make the source available with each release, and a user has mirrored them onto GitHub [3]. I also cannot find the source for older releases.

[1] https://sourceforge.net/p/keepass/discussion/329220/thread/0...

[2] https://sourceforge.net/p/keepass/discussion/329220/thread/b...

[3] https://github.com/dlech/KeePass2.x

Re: KeePassXC 2.3.0 released

#67
post #44
post #34

Earlier quoted context omitted.

I'm strongly considering it just based on the community surrounding each project. KeePass 2 seems to still be hosted on Sourceforge, and I'm not even sure where to get a copy of the latest (non-release) version of the source. The [Sourceforge repo][1] seems to be an outdated SVN repo which was last updated in 2009, and I don't see any description of how to contribute code to the project anywhere. As a result I'm not…

source code is available at https://keepass.info/download.html (scroll down to "Other Downloads and Resources")

That's just a zipped snapshot of the source code as of the current release; it doesn't necessarily reflect current development on the project.

With KeePassXC for example, even though the latest release came out less than a day ago I can see that there have already been [14 commits][1] to the `develop` branch since that release. I can't find the equivalent of such a branch for KeePass 2.

[1]: https://github.com/keepassxreboot/keepassxc/compare/2.3.0......

Re: KeePassXC 2.3.0 released

#69

Previous thread about KeepPassXC 2.2.0: https://news.ycombinator.com/item?id=14633576 I used KeePassXC for a period, but from these release notes, the UI/UX still isn't great. If you're on macOS, I recommend MacPass, which feels more native to the system, is compatible with existing KBDX databases and most-importantly, is also open-source: https://github.com/MacPass/MacPass

Also macPass is compatible with Keepass database 1.0, unlike KeepassXC.

You can import v1.0 DBs into the new app.

Re: KeePassXC 2.3.0 released

#70
post #48

Does anyone know what the license is for this software? It looks like there are NINE different license files in the repo: https://github.com/keepassxreboot/keepassxc Did they just copy paste every different license they could find into the repo?

KeePassXC maintainer here.

This comment is really funny and made me laugh.

Anyway we are following the Debian guidelines. The full copyright for each component and file is specified in the COPYING file in the root of the repository along side with each author.

Post reply on HN