Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

KeePassXC 2.7.0

keepassxc.org

Post reply on HN
Print view View original

91–100 of 141 posts

Re: KeePassXC 2.7.0

#91

Post by vetinari »

gnramires wrote: post #67
Semaphor wrote: post #8

Earlier quoted context omitted.

Curious, why did you switch from BitWarden? It’s usually the other way around (though personally I never felt the need to switch from KPXC).

I chose KPXC because I am in easy access to the database, and since I already pay for cloud hosting I just sync the database on the cloud (I use Seafile, I recommend!). Open and convenient :) I'm sure Bitwarden is more than adequate as well though.

I've migrated from KPXC to Bitwarden because of all the sync conflicts and having to diff different versions and figuring out, which data is latest (yes, keepass-diff is a thing).

With Bitwarden, I cannot create a new password or change existing one without being online, but I consider that a small price for not having to deal with conflicts anymore.

Re: KeePassXC 2.7.0

#92

Post by riedel »

323 wrote: post #84

One thing I like about the original KeePass is that it uses Secure Desktop API on Windows, which makes it difficult for malware/keyloggers to intercept your password as you enter it if you are infected. https://keepass.info/help/kb/sec_desk.html I wish KeePassXC would implement this functionality on Windows. Seems there is an open issue, but KeePassXC author says this is just Windows security theater: https://github.…

I had a discussion today with the author on also on a security topic. I feel that he has a very opinionated take at usable security (nothing strictly bad about it). My problem is that probably anyone can easily extract the key of the registered browser extension. Therefore it is really important to no "remember" the choice to share the password with the browser as it is otherwise rather easy to exfiltrate it (having local access to a running machine). IMHO the security an threat models aof many password managers are only clear to the authors. It is very difficult to make informed choices as a user. I don't like that every password manager claims to have the better solution without really explaining themselves to the user in a sincere way ( including tradeoffs)

Re: KeePassXC 2.7.0

#93

Post by mdaniel »

rekoil wrote: post #13
running101 wrote: post #4

I recently researched password managers, settled on keypassxc. Happy I did. I use keypassxc on windows + keypassxc chrome plugin, strongbox on iOS and google drive for syncing. All works seamlessly.

I'll probably be switching from 1Password soon, as they get ready to force their Electron implementation onto customers. I downloaded Strongbox but I was surprised to find that configuring the storage backend was super confusing. What is the best "backend" for setting up sync between KeePassXC/Strongbox/etc, between multiple clients active simultaneously? Is there a good reason why we haven't seen something like a RE…

If you're after a rest backend for your password manager, Vaultwarden is likely what you're after

Having said that, I am in the same camp as some of the other comments in using KPXC for it's AutoType (and ssh agent), so if that's also your requirements then Vaultwarden won't get it done because the Bitwarden clients are aggressively stupid

Re: KeePassXC 2.7.0

#94

Post by LeonidasXIV »

k8sToGo wrote: post #61
wheybags wrote: post #6

Been using keepassxc with self hosted seafile for sync for a few years now. Keepassdx on android. Super happy with this combo.

Is KeepassDX better than KeepPass2Android?

In my experience - yes. I used Keepassdroid and on a new phone decided to try K2A but ended up much preferring the UI of KeepassDX. Its autofill works really well.

Re: KeePassXC 2.7.0

#95

Post by laurent123456 »

Iolaum wrote: post #79
anta40 wrote: post #78

Wait a second... So is this another KeePass fork, and is different from this one: https://formulae.brew.sh/cask/keepassx ?

KeePassXC is a fork of KeePassX, which is a fork of KeePass. There are some small differences between the projects in technical aspects but I don't fully recall the details. The C in KeePassXC stands for community IRC. Subjectively I 'd say that if you are wondering which of the 3 to use, go with KeePassXC. That's what I am using.

KeePassX wasn't a fork of KeePass since one was developed in Qt, the other in .NET. It was just a compatible program.

Re: KeePassXC 2.7.0

#96

Post by phoerious »

phoerious wrote: post #90
10729287 wrote: post #36

I use keepass2 at work on a PC/windows and KeepassXC on my home computers (Mac and Linux). The only thing that make me still liking Keepass2 more is its compatibility with plugins. I can't wait for keepassXC to support them.

Why do you want plugins? KeePassXC provides most of what KeePass needs plugins for out of the box in usually much better and more stable and tested quality. KeePassXC will never support plugins the way KeePass does and for good reason. Most plugins are unmaintained and some are outright dangerous to use. Your passwords are too precious to let unverified thirdparty plugins handle them. If you need external functionali…

I clarified that on our website, since that topic comes up again and again: https://keepassxc.org/docs/#faq-general-plugins

Re: KeePassXC 2.7.0

#97

Post by refracture »

joshuajill wrote: post #62
mhb wrote: post #23

I use KeePass. Should I switch to KeePassXC?

Also this: KeePass logged password in plaintext. Really bad CVE case. KPXC had no such issue. https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=keepass

Well I wasn't motivated to move but I am now.. that is rough.

Re: KeePassXC 2.7.0

#99

Post by [deleted] »

zuhsetaqi wrote: post #57
yumiris wrote: post #3

Love KeePassXC - it's a beautiful and speedy program which simply just works without ever causing any problems. The original KeePass always struck me as a tad heavy due to its somewhat archaic aesthetic and dependency on Mono, whereas KeePassXC looks modern and requires minimal resources and dependencies. I combine it with KeePassium on iOS and Resilio Sync for synchronising across my main and mobile devices. (Syncth…

I use Strongbox on iOS which I highly recommend checking out. It's payed (one time) but open source

[deleted]
Post reply on HN