Live data from Hacker News

KeePassXC 2.2.0 released with YubiKey and TOTP support

keepassxc.org

91–100 of 132 posts

Re: KeePassXC 2.2.0 released with YubiKey and TOTP support

#91
post #58

An official ppa repository for Ubuntu would be great! There is a link to an unofficial one in your page, but since this is a security app, installing it from some random repo just feels wrong... Thank you for the great work!

Have you tried the snap install ?

Sorry to hijack the thread a bit, but since you're discussing the snap install I thought I'd ask. This is the first snap app I've ever used. I find the file browser for opening the DB won't show anything outside of my $HOME. I assume this is some sort of sandbox feature of snap apps. But I'd like to store my DB on a network mount, so that gets in the way unless I set up symlinks. Is there any way to get this to behave a bit more like a normal desktop program?

Re: KeePassXC 2.2.0 released with YubiKey and TOTP support

#92
post #31

As someone using Keepass2 (mono on Linux), can someone knowledgeable briefly tell me (and probably others) why should and why should not I switch to KeePassX? I'm getting the feeling that this uses the older protocol? I got a good answer to the above question from desdiv so I'm adding an edit: Is there a reason to use this (and not use this) in place of KeePass2 on Windows?

1. Unlocking the database takes much longer than it should. Linux Keepass2 is much slower at unlocking than Windows Keepass2 on the same machine. 2. On Linux, after entering the password the windows disappears, giving no UI feedback during the lengthy unlocking process. When you type the password wrong, it takes even longer for some reason, and there's no tray icon when you type the password wrong, so you'd have to m…

It might take slightly longer, sure, but just slightly (instant vs maybe 0.5s at most). Maybe my database isn't big enough (~200 passwords) for this to be annoying, but it's certainly not that bad.

Re: KeePassXC 2.2.0 released with YubiKey and TOTP support

#93
post #64
post #62

Earlier quoted context omitted.

Same here. I was hoping to run this completely headlessly but any attempt to run even `keepassxc --help` or `keepassxc --version` results in: QXcbConnection: Could not connect to display Aborted

Can you open an issue on Github? Thanks

EDIT: I originally created an issue for the wrong repository, and it looks like someone has already made an issue for me: https://github.com/keepassxreboot/keepassxc/issues/668

Thanks for your attention

Re: KeePassXC 2.2.0 released with YubiKey and TOTP support

#94
post #58

An official ppa repository for Ubuntu would be great! There is a link to an unofficial one in your page, but since this is a security app, installing it from some random repo just feels wrong... Thank you for the great work!

Have you tried the snap install ?

The snap is great! Yes, the theming current is not perfect, and I've noticed the longer startup time. But yesterday my RSS reader showed this post (actually, the Github release page a little earlier) and one impatient `sudo snap refresh` later, this new version is installed, direct from the upstream, without any extra repo or PPA that could replace my kernel.

Re: KeePassXC 2.2.0 released with YubiKey and TOTP support

#95
I really like KeePassXC, it's the only password manager I use (excluding mobile) but my one major bugbear still exists in this release.

The 'lock database' and 'copy password to clipboard' icons are nearly identical (both essentially a padlock) and still adjacent but one in the UI.

I accidentally lock the database far more often than I would like. I know I'm a bit clumsy and a slow to catch on but this one simple change would really make application a lot more useable for us divs.

https://image.ibb.co/k1amA5/kxpc.png

Re: KeePassXC 2.2.0 released with YubiKey and TOTP support

#96
post #95

I really like KeePassXC, it's the only password manager I use (excluding mobile) but my one major bugbear still exists in this release. The 'lock database' and 'copy password to clipboard' icons are nearly identical (both essentially a padlock) and still adjacent but one in the UI. I accidentally lock the database far more often than I would like. I know I'm a bit clumsy and a slow to catch on but this one simple cha…

I use Command-L to lock, for what it's worth.

Re: KeePassXC 2.2.0 released with YubiKey and TOTP support

#97

Earlier quoted context omitted.

Have you tried the snap install ?

Sorry to hijack the thread a bit, but since you're discussing the snap install I thought I'd ask. This is the first snap app I've ever used. I find the file browser for opening the DB won't show anything outside of my $HOME. I assume this is some sort of sandbox feature of snap apps. But I'd like to store my DB on a network mount, so that gets in the way unless I set up symlinks. Is there any way to get this to behav…

It is because of a sandbox feature. You can't easily disable it right now.

I would try the symlink approach for now. Possibly drop a file next to the DB on your share in case you have to do it again and don't remember.

Re: KeePassXC 2.2.0 released with YubiKey and TOTP support

#98

Earlier quoted context omitted.

Decent mobile support is the only thing holding me back from switching. The current 3rd party options are underwhelming.

I just wait for Android O Autofill Framework to arrive. Then mobile password managers will finally be useful.

Interesting, how will it be better? The Lastpass for Android autofill in both native apps and web is already pretty perfect in my experience, it detects the fields and fills in the login. In the very rare case it doesn't, the notification list will have a one-click entry to force-fill the info.

Re: KeePassXC 2.2.0 released with YubiKey and TOTP support

#99

Really good timing for me to self promote. :-) I'm working on improved keepassxc browser extension. Communication between browser and KeePassXC is via NativeClient. You need varjolintu fork of KeePassXC, but eventually it will also support KeePassHTTP protocol too. My goals currently are: internalization, nicer UI, clean and extensible code base. I already did options page with material-ui and react. Currently workin…

A few things to be wary of:

* KeePassHTTP doesn't use authenticated encryption for its protocol and thus is insecure (decrypt password level insecure). Please make sure you don't have this issue.

* Browser integration means there is only some JS code between my unlocked password vault and random websites. Please study findings from Tavis Ormandy and others who found such vulnerabilities in LastPass et al

Re: KeePassXC 2.2.0 released with YubiKey and TOTP support

#100
post #58

An official ppa repository for Ubuntu would be great! There is a link to an unofficial one in your page, but since this is a security app, installing it from some random repo just feels wrong... Thank you for the great work!

Have you tried the snap install ?

It makes me kind of sad that we're moving to a world where a 500 KB program gets installed in a 80 MB container :(

EDIT: Wait, now it's downloading a second 80 MB container :(

Post reply on HN