Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

KeePassXC 2.7.0

keepassxc.org

Post reply on HN
Print view View original

71–80 of 141 posts

Re: KeePassXC 2.7.0

#71

Post by jl6 »

phoerious wrote: post #30
jl6 wrote: post #24

Earlier quoted context omitted.

I welcome updates that fix security vulnerabilities, but I view feature updates as a potential vector for introducing security vulnerabilities. The difficulty is telling the difference between projects that rarely update because there aren’t any vulns, and projects that rarely update because they don’t care.

KeePassX has literally been abandoned, so you will not get updates of any kind: https://www.keepassx.org/index.html%3Fp=636.html

That’s the answer I was looking for!

Re: KeePassXC 2.7.0

#72

Post by varjolintu »

tormock wrote: post #64
gtirloni wrote: post #37

How well does it integrate with web browsing? The Lastpass/1Password extensions work pretty seamlessly.

The auto-type works fine for me with the Firefox Keepass helper url-in-title addon.

You can also trigger Global Auto-Type from the browser extension with seperate keyboard shortcut (or using context menu), and it handles the URL matching with Auto-Type without any extra extensions.

Re: KeePassXC 2.7.0

#73

Post by tormock »

varjolintu wrote: post #72
tormock wrote: post #64

Earlier quoted context omitted.

The auto-type works fine for me with the Firefox Keepass helper url-in-title addon.

You can also trigger Global Auto-Type from the browser extension with seperate keyboard shortcut (or using context menu), and it handles the URL matching with Auto-Type without any extra extensions.

> and it handles the URL matching with Auto-Type without any extra extensions.

I don't see how switching to a different extension will improve anything.... I have global auto-type binded to CTRL-SHIFT-C and it just works

Re: KeePassXC 2.7.0

#74

Post by WHA8m »

jabroni_salad wrote: post #39
diego_moita wrote: post #21

What I love on KeePassXC: * Runs on Linux/Mac/Windows and there are compatible clients for Android. Make your own cloud with a RaspberryPi referred by a DDNS and you'll have super powers. * Auto-type. Is tricky to get it working but once you get it you'll become addicted. * The UI makes it much easier to copy and paste fields and the notes are clearly visible. I often use the notes to store things like github tokens…

One of the things I like about the auto-type is that you can reconfigure it on a per-site basis in case the login sequence isn't the usual. I can have it page through my company's sso labrynth, enter tenancy IDs, trigger my preferred duo method or even navigate to a subpage after logging in. With most other PW managers you are just left with what it gives you and if it doesn't detect the logon fields, that's just too…

I really like the DELAY function. YouTube is one of those sites where they have email and password on different cards/sites, so I can just add a delay of about 3 seconds and the auto fill in will work:)

Re: KeePassXC 2.7.0

#75

Post by XorNot »

Sander_Marechal wrote: post #69

PSA: Never, ever mix Keepass2 and KeepassXC when using network shares. KeepassXC does not support the sync protocol from keepass2 that allows multiple people/devices to use the same keepass database. We only found out after losing 200+ passwords.

I'd say there's no good reason to ever use multiple shared access compared to synchronizing with hooks on open.

Re: KeePassXC 2.7.0

#76

Post by nkg »

diego_moita wrote: post #21

What I love on KeePassXC: * Runs on Linux/Mac/Windows and there are compatible clients for Android. Make your own cloud with a RaspberryPi referred by a DDNS and you'll have super powers. * Auto-type. Is tricky to get it working but once you get it you'll become addicted. * The UI makes it much easier to copy and paste fields and the notes are clearly visible. I often use the notes to store things like github tokens…

I love it and I didn't know of any of these features! :)

Re: KeePassXC 2.7.0

#77

Post by clircle »

Switched from Bitwarden to KeepassXC+Syncthing last year, and I'm very pleased. But I personally enjoy collecting and organizing passwords, and I treat the KeePassXC database report as a kind of game that I'm trying to get a high score on (as many unique PWs as possible with high entropy).

Re: KeePassXC 2.7.0

#79

Post by Iolaum »

anta40 wrote: post #78

Wait a second... So is this another KeePass fork, and is different from this one: https://formulae.brew.sh/cask/keepassx ?

KeePassXC is a fork of KeePassX, which is a fork of KeePass.

There are some small differences between the projects in technical aspects but I don't fully recall the details.

The C in KeePassXC stands for community IRC.

Subjectively I 'd say that if you are wondering which of the 3 to use, go with KeePassXC. That's what I am using.

Re: KeePassXC 2.7.0

#80

Post by antiframe »

brightball wrote: post #35
longstation wrote: post #2

KPXC is brilliant. Recently I switched to it from BitWarden and I am satisfied. The only issue for me is the autotype support on Wayland (it's not there yet; currently only able to auto fill password and username for xwayland app).

I am curious why you switched from Bitwarden? Usually when people are exiting a password manager it’s migrating to Bitwarden or KeePass but you’re the first I’ve heard moving from Bitwarden itself.

I too switched from BitWarden to KeePass. I was reading about browser security and became concerned about running my password manager in the same process as the browser and relying on its sandbox. With KeePassXC I have the option to either forgo browser integration completely or use their addon which communicates to the manager and asks for an entry, which prompts for permission itself or uses an allow list by URL. That makes it much harder for a website to somehow break the sandbox and access my entire database.

It's a small change but it does reduce the attack surface as well as force me to manage my data myself which I want to do more of.

Also with BitWarden, their UI annoyed me when I needed a password outside the browser. L

Post reply on HN