Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

KeePassXC 2.7.0

keepassxc.org

Post reply on HN
Print view View original

21–30 of 141 posts

Re: KeePassXC 2.7.0

#21

Post by diego_moita »

What I love on KeePassXC:

* Runs on Linux/Mac/Windows and there are compatible clients for Android. Make your own cloud with a RaspberryPi referred by a DDNS and you'll have super powers.

* Auto-type. Is tricky to get it working but once you get it you'll become addicted.

* The UI makes it much easier to copy and paste fields and the notes are clearly visible. I often use the notes to store things like github tokens (for git), etc. However, I keep 2FA TOTP codes on my Pebble watch only. If you keep 2FA codes on the same file as your password then it isn't 2 Factor anymore, right?

Little things that bothered me:

* It took me a while to understand how does the Touch ID/fingertip reader works (you need to turn on the checkbox, press Ok on the authentication modal and then touch the reader). Touch ID is one of those things that suddenly you discover you can't live without.

* The browser add-ins are not always smooth and friction-less. Sometimes you need to reload the page, reopen the db. Chrome's add-in is the hardest to get working. Firefox's is better.

* Edit: forget this. As varjolintu explains bellow, this is wrong. ~~You can't have multiple addresses per entry. Some sites will login with different URL's and KeepassXC will not recognize all.~~

But I am still a fan. I'd give it a 8/10.

Re: KeePassXC 2.7.0

#22

Post by willis936 »

Maakuth wrote: post #15
yumiris wrote: post #3

Love KeePassXC - it's a beautiful and speedy program which simply just works without ever causing any problems. The original KeePass always struck me as a tad heavy due to its somewhat archaic aesthetic and dependency on Mono, whereas KeePassXC looks modern and requires minimal resources and dependencies. I combine it with KeePassium on iOS and Resilio Sync for synchronising across my main and mobile devices. (Syncth…

I'm not iOS user myself, but I hear Möbius sync ( https://apps.apple.com/us/app/möbius-sync/id1539203216 ) is reasonably good Syncthing client wrapper for it.

I could never get mobius to behave as I wanted.

I host nextcloud and use strongbox. Nextcloud supports WebDAV and strongbox works well with syncing through that.

Re: KeePassXC 2.7.0

#24

Post by jl6 »

k8sToGo wrote: post #18
jl6 wrote: post #12

I still use KeePassX and have no issues with it so no reason to move to XC. I do value an actively maintained project, but I also value stability - and particularly for a security-sensitive application, I quite like the fact that it hasn’t been updated in years (I’m not saying I assume all the bugs have been fixed, just that there is less churn in which bugs could hide). How should I evaluate the respective projects…

>and particularly for a security-sensitive application, I quite like the fact that it hasn’t been updated in years I feel like this is an oxymoron. At least security updates should be something to look forward to, no?

I welcome updates that fix security vulnerabilities, but I view feature updates as a potential vector for introducing security vulnerabilities.

The difficulty is telling the difference between projects that rarely update because there aren’t any vulns, and projects that rarely update because they don’t care.

Re: KeePassXC 2.7.0

#25

Post by Semaphor »

circularfoyers wrote: post #9
Semaphor wrote: post #5

I switched from KeePass to KeePassXC some years ago when I realized the XC browser extension was better than what KeePass offered. Sync via my own Nextcloud, KeePass2Android on mobile, works great :)

Have you tried KeePassDX?

No, hadn’t even heard of it (or forgotten about it), it didn’t exist when I chose K2A, and I’m not having any issues. Might check it out anyway.

Re: KeePassXC 2.7.0

#26

Post by willis936 »

2Gkashmiri wrote: post #20

keepass is one of those apps you are either forced on to due to a disaster (forgetting your important portal credentials at the most problematic time) or your memory is like a sieve. it took me like 2015-2017 to teach my siblings to use it. now we have copies of each others kbdx files and passwords in our respective files so if there is an emergency to access the others data (which contains btw, all important data be…

I started using it because using the same password for everything was a bad practice and it was time to stop. I think the vast majority of people with passwords reuse 1-3 passwords for everything.

Re: KeePassXC 2.7.0

#27

Post by mxuribe »

mhb wrote: post #23

I use KeePass. Should I switch to KeePassXC?

You read my mind, as i was just asking myself the same thing. I have recently been thinking of switching over to bitwarden from classic keepass...but now i see keepassXC, and wondered what - if any - compelling feature/need that keepassXC brings...?

p.s. - Oh, and the reason for considering even moving to bitwarden is ease of mobile access by several people at once...since schlepping a keepass database via file sync stuff works sort of ok until you have to access the same file via mobile (possible but not great), plus my family and i kept stepping on each other's toes when updating said file, etc. Not hating on keepass, as it has served my family really weell...and i'm very thankful to the keepass devs! It is simply that we might be outgrowing it a tad...maybe.

Re: KeePassXC 2.7.0

#28

Post by ayushnix »

dorfsmay wrote: post #17
ayushnix wrote: post #11

Earlier quoted context omitted.

> The only issue for me is the autotype support on Wayland Are you using a wlroots compositor like sway or GNOME/KDE?

Not sure what you mean but the default KeepassXC on Fedora 35 with Wayland does not do autofill in Firefox.

I'm going to take a guess and say that you're using GNOME if you're using Fedora and yeah, I don't think auto type works on GNOME's wayland version yet. They're working on their own protocol called libie the last time I checked.

However, auto typing on Wayland works pretty well if you use wlroots compositors/window managers like sway.

Re: KeePassXC 2.7.0

#29

Post by varjolintu »

diego_moita wrote: post #21

What I love on KeePassXC: * Runs on Linux/Mac/Windows and there are compatible clients for Android. Make your own cloud with a RaspberryPi referred by a DDNS and you'll have super powers. * Auto-type. Is tricky to get it working but once you get it you'll become addicted. * The UI makes it much easier to copy and paste fields and the notes are clearly visible. I often use the notes to store things like github tokens…

You can have multiple URL's per entry. However, those only work with the browser extension. Edit entry and go to Browser Integration tab. There's a list of additional URL's.

Re: KeePassXC 2.7.0

#30

Post by phoerious »

jl6 wrote: post #24
k8sToGo wrote: post #18

Earlier quoted context omitted.

>and particularly for a security-sensitive application, I quite like the fact that it hasn’t been updated in years I feel like this is an oxymoron. At least security updates should be something to look forward to, no?

I welcome updates that fix security vulnerabilities, but I view feature updates as a potential vector for introducing security vulnerabilities. The difficulty is telling the difference between projects that rarely update because there aren’t any vulns, and projects that rarely update because they don’t care.

KeePassX has literally been abandoned, so you will not get updates of any kind: https://www.keepassx.org/index.html%3Fp=636.html
Post reply on HN