Live data from Hacker News

KeePassXC 2.2.0 released with YubiKey and TOTP support

keepassxc.org

81–90 of 132 posts

Re: KeePassXC 2.2.0 released with YubiKey and TOTP support

#82
post #69

Great release! Is kdbx format supported by any iPhone app? I'm stuck with KeepassX for that reason.

Try MiniKeePass.

It works well but has some actions flow to sync your kdbx backups with updated data from the phone and vise versa.

https://itunes.apple.com/us/app/minikeepass-secure-password-...

Re: KeePassXC 2.2.0 released with YubiKey and TOTP support

#83

Really good timing for me to self promote. :-) I'm working on improved keepassxc browser extension. Communication between browser and KeePassXC is via NativeClient. You need varjolintu fork of KeePassXC, but eventually it will also support KeePassHTTP protocol too. My goals currently are: internalization, nicer UI, clean and extensible code base. I already did options page with material-ui and react. Currently workin…

The official and latest version is always available here: https://github.com/varjolintu/keepassxc-browser

Firefox Nightly (version 56) is also supported. The extension will work officially when Mozilla releases build 57.

Re: KeePassXC 2.2.0 released with YubiKey and TOTP support

#84
Well done! It's great to see some progress with open source in this particular area.

At the moment I'm still stuck with [insert_name_of_commercial_proprietary_solution] but would love to switch to a true open source solution with good user experience and reliable mobile support.

I will make a small donation as soon as I get through the flattr waitlist as a small token of appreciation.

Re: KeePassXC 2.2.0 released with YubiKey and TOTP support

#85
post #49

Still no KDBX 4 support though? Please consider making it a priority - it looks like someone tried to pull request it but that failed? The older format uses a custom AES-based KDF - and while I don't personally see any major issues with it, I'm much more comfortable with the modern, heavily reviewed Argon2 design used in the KDBX4. https://github.com/keepassxreboot/keepassxc/issues/148

That would be me. I wrote the patch against the original KeePassX which seems to be no longer maintained (?). One of the KeePassXC guys asked me to rebase it over so I did. Then we (they) spent a week or two debating on how to support libargon2 and the newer libgcrypt required for ChaCha20, coming to no resolution, and I just lost any motivation to push for them to merge my patch. They also disagreed with the way I i…

KDBX4 is a priority indeed, but we only have limited resources. We hoped to get it into 2.2.0, but it just wasn't possible. We really appreciate your patch and will make sure it lands in 2.3.0. It's not forgotten.

Re: KeePassXC 2.2.0 released with YubiKey and TOTP support

#86
post #63
post #41

I'd love to be able to decide which characters to use when generating a password.

You can already select a char-set. Do you mean selecting only a few chars and use them to generate the password?

Yes. Single special characters.

Re: KeePassXC 2.2.0 released with YubiKey and TOTP support

#88
post #40

This is really cool. Here are more feature requests (and for all I know they're already there): * Optionally display a secret as a QR code * Generate and validate BIP39-compatible seeds (like Diceware but with a checksum. Many Bitcoin wallets these days accept them) * Get this into Tails

Would you be so kind to file a feature request on GitHub? Here it gets lost. Thanks!

Re: KeePassXC 2.2.0 released with YubiKey and TOTP support

#89
post #80

One thing I like about the KeePassX interface is the ability to search with a hotkey (CTRL+F). Also, this could be done without having the menu bar visible, hitting the hotkey just pulls up the input field.

Would you be so kind to file a feature request for that on GitHub? Thanks!

Re: KeePassXC 2.2.0 released with YubiKey and TOTP support

#90

As someone using Keepass2 (mono on Linux), can someone knowledgeable briefly tell me (and probably others) why should and why should not I switch to KeePassX? I'm getting the feeling that this uses the older protocol? I got a good answer to the above question from desdiv so I'm adding an edit: Is there a reason to use this (and not use this) in place of KeePass2 on Windows?

I'll answer part of my own question- this does look like it's compatible with the Keepass protocol 2. So that shouldn't be the reason to stop. Of course there could be other reasons.

KeePassXC does support the KeePass2 format (i.e., KDBX3). It does not (yet) support the very latest format (KDBX4), but by default KeePass also still uses KDBX3, so both are compatible.
Post reply on HN