Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

KeePassXC 2.2.0 released with YubiKey and TOTP support

keepassxc.org

Post reply on HN
Print view View original

71–80 of 132 posts

Re: KeePassXC 2.2.0 released with YubiKey and TOTP support

#71

Post by ktta »

th3zero wrote: post #59
problems wrote: post #44

Earlier quoted context omitted.

For anyone wondering - the TOTP 2FA is not on the password wallet itself, but that the wallet is able to store the TOTP key, authenticating TOTP involves knowing the key, by which point there's really no value in using it to authenticate the wallet, it'd be a UI-only protection. However I think storing TOTP keys in your wallet is a bad idea for security - now if someone hacks your machine they get both your password…

Just to make sure no one gets the wrong impression: You should store your TOTP keys in a different KDBX file, locked with a different master password, and maybe even used on a different device/PC. We all know that you shouldn't store your password along with TOTP secrets, or should I make a blog post explaining this?

>We all know that you shouldn't store your password along with TOTP secrets

https://xkcd.com/1053/

Re: KeePassXC 2.2.0 released with YubiKey and TOTP support

#72

Post by kronos29296 »

angelsl wrote: post #49
problems wrote: post #43

Still no KDBX 4 support though? Please consider making it a priority - it looks like someone tried to pull request it but that failed? The older format uses a custom AES-based KDF - and while I don't personally see any major issues with it, I'm much more comfortable with the modern, heavily reviewed Argon2 design used in the KDBX4. https://github.com/keepassxreboot/keepassxc/issues/148

That would be me. I wrote the patch against the original KeePassX which seems to be no longer maintained (?). One of the KeePassXC guys asked me to rebase it over so I did. Then we (they) spent a week or two debating on how to support libargon2 and the newer libgcrypt required for ChaCha20, coming to no resolution, and I just lost any motivation to push for them to merge my patch. They also disagreed with the way I i…

Hope somebody cleans it up and adds the PR to Keepassxc. I would but I am not a C++ guy.(only Python guy sadly)

Re: KeePassXC 2.2.0 released with YubiKey and TOTP support

#73

Post by kronos29296 »

sillysaurus3 wrote: post #6

So there's KeePass, KeePassX, and now KeePassXC? (And two different variants of KeePass that have nothing to do with each other.) Not that there's anything wrong with that. I'm just curious if KeePassXC is yet another fork, or if it's from the same people who did KeePassX. KeePassX has an excellent security reputation, so it'd suck if an unrelated fork ruined that.

Keepass is actively developed but uses .Net so Linux requires mono. So KeepassX was created to use C++ so Mono is not required but the project is inactive.

So KeepassXC was created as a fork of KeepassX for the linux users who don't want an ugly MOno version of Keepass.

Re: KeePassXC 2.2.0 released with YubiKey and TOTP support

#74

Post by niksakl »

melicerte wrote: post #67
niksakl wrote: post #58

An official ppa repository for Ubuntu would be great! There is a link to an unofficial one in your page, but since this is a security app, installing it from some random repo just feels wrong... Thank you for the great work!

Have you tried the snap install ?

Yes I did that, but the gui looked horrible, as it was not using my themes, colors etc. I then found out that this was a known issue of snap at that time.

Re: KeePassXC 2.2.0 released with YubiKey and TOTP support

#75

Post by mosselman »

finchisko wrote: post #48

Really good timing for me to self promote. :-) I'm working on improved keepassxc browser extension. Communication between browser and KeePassXC is via NativeClient. You need varjolintu fork of KeePassXC, but eventually it will also support KeePassHTTP protocol too. My goals currently are: internalization, nicer UI, clean and extensible code base. I already did options page with material-ui and react. Currently workin…

Any chance of creating an Opera version as well? I just force installed the chrome version on Opera, but it doesn't seem to work.

Re: KeePassXC 2.2.0 released with YubiKey and TOTP support

#76

Post by finchisko »

mosselman wrote: post #75
finchisko wrote: post #48

Really good timing for me to self promote. :-) I'm working on improved keepassxc browser extension. Communication between browser and KeePassXC is via NativeClient. You need varjolintu fork of KeePassXC, but eventually it will also support KeePassHTTP protocol too. My goals currently are: internalization, nicer UI, clean and extensible code base. I already did options page with material-ui and react. Currently workin…

Any chance of creating an Opera version as well? I just force installed the chrome version on Opera, but it doesn't seem to work.

I'll take look. If Opera supports webextensions, then it should be viable.

Re: KeePassXC 2.2.0 released with YubiKey and TOTP support

#77

Post by finchisko »

wh-uws wrote: post #68
finchisko wrote: post #48

Really good timing for me to self promote. :-) I'm working on improved keepassxc browser extension. Communication between browser and KeePassXC is via NativeClient. You need varjolintu fork of KeePassXC, but eventually it will also support KeePassHTTP protocol too. My goals currently are: internalization, nicer UI, clean and extensible code base. I already did options page with material-ui and react. Currently workin…

awesome will definitely signup to be a beta test when you get it where you want that. actively using lastpass now and would like to move to an open source solution I feel like I can trust

You can go fully OSS already. Try https://github.com/pfn/passifox. It is using KeePassXC http protocol. I'am working on it's replacement.

Re: KeePassXC 2.2.0 released with YubiKey and TOTP support

#79

Post by finchisko »

melicerte wrote: post #67
niksakl wrote: post #58

An official ppa repository for Ubuntu would be great! There is a link to an unofficial one in your page, but since this is a security app, installing it from some random repo just feels wrong... Thank you for the great work!

Have you tried the snap install ?

keepassxc from snap is starting much longer. at least 5sec diff
Post reply on HN