KeePassXC

Today, we are releasing KeePassXC 2.7.10 with many bug fixes and enhancements. The most prominent changes are the addition of a Proton Pass importer and (due to popular request) a new setting for changing the application font size. Other additions in ... [More] this release are nicer icons in the password strength column, a character count in the password generator, toolbar buttons for quick access to database settings and statistics, a new MIXED case preset for the passphrase generator, and a command-line flag to start KeePassXC in minimised mode. [Less]

Today, we are releasing KeePassXC 2.7.9 with many bug fixes and enhancements. Highlights include improvements to CSV and Bitwarden importing, passkeys refinement, several UX issues, and improvement to using browser integration with the Snap distribution.

Today, we are releasing KeePassXC 2.7.8 with many bug fixes and enhancements, particularly to our passkey support. We also fixed several crashes that were discovered in the previous release. Finally, this version introduces several quality of life ... [More] improvements that were ported over from the development branch that we think you will enjoy. Let’s dive in! [Less]

We’re thrilled to announce the release of KeePassXC version 2.7.7. This update brings several exciting features and enhancements that will improve your workflow and integration with modern authentication services. Let’s dive into the major ... [More] highlights: Passkeys Support This release delivers the official implementation of Passkeys for KeePassXC! This feature is a year in the making and uses the existing browser integration service to both store and use Passkeys for authentication. A special thank you to Ortham for providing an extremely comprehensive standards, security, and privacy review of our implementation prior to release. If you haven’t heard of Passkeys yet, they are an alternative to passwords that are incredibly secure and privacy preserving. Read more about Passkeys and also read our documentation. Passkeys Report [Less]

Today, we are releasing KeePassXC 2.7.6 with a few bug fixes and enhancements. This version fixes a crash on macOS that occurred on exit. We also improved the visual display when dragging entries to move/copy, Quick Unlock is now automatically ... [More] activated when unlocking for Auto-Type or Browser access, and the Auto-Type button and shortcut key will be disabled when Auto-Type is turned off for the entry or group. New Drag/Drop Example [Less]

On June 19, 2023 an alleged KeePassXC vulnerability with the identifier CVE-2023–35866 was posted against KeePassXC versions up to 2.7.5. As the developers of KeePassXC, we do not consider the issue a vulnerability and have filed a request for the ... [More] CVE to be rejected. Additional information can be found in the discussion on GitHub. The root of the argument submitted by the CVE author is that an attacker with unfettered access to an already unlocked database could export or change the password without requiring the original credentials. Where this is true, there are numerous barriers to actually executing this attack sequence. In addition, having lost control of your computer in this manner would mean the attacker could execute any number of security compromises against your KeePassXC database, regardless of requiring credentials prior to export or credential change. At this time, we are not planning any drastic changes to the program to address this submission. We are also monitoring the request to reject/dispute this CVE on the grounds it is not actually a vulnerability in our software. Information on mitigation and other factors is included after the break. [Less]