KeePassXC 2.2.0 released with YubiKey and TOTP support

Really good timing for me to self promote. :-) I&#x27;m working on improved keepassxc browser extension. Communication between browser and KeePassXC is via NativeClient. You need varjolintu fork of KeePassXC, but eventually it will also support KeePassHTTP protocol too.<p>My goals currently are: internalization, nicer UI, clean and extensible code base. I already did options page with material-ui and react. Currently working on replacing jquery popup implentation for hyperapp, which appeared here on HN yesterday.<p>If interested I can send instruction how you can build extentions. I would like to see this as official part of KeePassXC and willing to donate for free. What you guys think?<p>You can try options UI on <a href="https:&#x2F;&#x2F;mauron85.github.io&#x2F;keepassxc-browser&#x2F;preview&#x2F;" rel="nofollow">https:&#x2F;&#x2F;mauron85.github.io&#x2F;keepassxc-browser&#x2F;preview&#x2F;</a>

Still no KDBX 4 support though?<p>Please consider making it a priority - it looks like someone tried to pull request it but that failed? The older format uses a custom AES-based KDF - and while I don&#x27;t personally see any major issues with it, I&#x27;m much more comfortable with the modern, heavily reviewed Argon2 design used in the KDBX4.<p><a href="https:&#x2F;&#x2F;github.com&#x2F;keepassxreboot&#x2F;keepassxc&#x2F;issues&#x2F;148" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;keepassxreboot&#x2F;keepassxc&#x2F;issues&#x2F;148</a>

So there&#x27;s KeePass, KeePassX, and now KeePassXC? (And two different variants of KeePass that have nothing to do with each other.)<p>Not that there&#x27;s anything wrong with that. I&#x27;m just curious if KeePassXC is yet another fork, or if it&#x27;s from the same people who did KeePassX. KeePassX has an excellent security reputation, so it&#x27;d suck if an unrelated fork ruined that.

This is by far the best of the KeePassX* lot, incorporating loads of enhancements which, disappointingly after years of development, never made it into KeePassX 2.x proper, and some 1.x features which simply disappeared in the upgrade.<p>[Edit: missing word]

I really like KeePassXC, it&#x27;s the only password manager I use (excluding mobile) but my one major bugbear still exists in this release.<p>The &#x27;lock database&#x27; and &#x27;copy password to clipboard&#x27; icons are nearly identical (both essentially a padlock) and still adjacent but one in the UI.<p>I accidentally lock the database far more often than I would like. I know I&#x27;m a bit clumsy and a slow to catch on but this one simple change would really make application a <i>lot</i> more useable for us divs.<p><a href="https:&#x2F;&#x2F;image.ibb.co&#x2F;k1amA5&#x2F;kxpc.png" rel="nofollow">https:&#x2F;&#x2F;image.ibb.co&#x2F;k1amA5&#x2F;kxpc.png</a>

I&#x27;m still waiting for it to arrive in Debian: <a href="https:&#x2F;&#x2F;bugs.debian.org&#x2F;cgi-bin&#x2F;bugreport.cgi?bug=855173" rel="nofollow">https:&#x2F;&#x2F;bugs.debian.org&#x2F;cgi-bin&#x2F;bugreport.cgi?bug=855173</a>

You guys rock! Thank you for your hard work.<p>BTW the Windows portable version link on your download page is 404ing:<p>Incorrect URL: <a href="https:&#x2F;&#x2F;github.com&#x2F;keepassxreboot&#x2F;keepassxc&#x2F;releases&#x2F;download&#x2F;2.2.0&#x2F;KeePassXC-2.2.0-Win64.zip" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;keepassxreboot&#x2F;keepassxc&#x2F;releases&#x2F;downloa...</a><p>Correct URL: <a href="https:&#x2F;&#x2F;github.com&#x2F;keepassxreboot&#x2F;keepassxc&#x2F;releases&#x2F;download&#x2F;2.2.0&#x2F;KeePassXC-2.2.0-Win64-Portable.zip" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;keepassxreboot&#x2F;keepassxc&#x2F;releases&#x2F;downloa...</a>

Notable features:<p>1. Unlock using Yubikey<p>2. TOTP 2FA<p>3. Diceware password generator<p>4. ASLR for in-memory security (didn&#x27;t expect this!)<p>5. Portable and Single instance mode (I&#x27;ll have to check this one in detail)<p>Thanks for your work team!

An official ppa repository for Ubuntu would be great! There is a link to an unofficial one in your page, but since this is a security app, installing it from some random repo just feels wrong... Thank you for the great work!

Has anyone thought of a good redundancy scheme for yubikey?<p>Physical object authentication is great except physical objects are less durable than brain memory (or at least, if my brain memory is gone then I probably would have no use for the password anyway).

This release looks great. Unfortunately I had to switch to LastPass to get sharing, real sync support rather than blob syncing in, and also easy usage on mobile.

I see it supports Linux, Windows, and macOS, but are there any Android and iOS apps to open and modifty KeePassXC databases?

As someone using Keepass2 (mono on Linux), can someone knowledgeable briefly tell me (and probably others) why should and why should not I switch to KeePassX?<p>I&#x27;m getting the feeling that this uses the older protocol?<p>I got a good answer to the above question from desdiv so I&#x27;m adding an edit:<p>Is there a reason to use this (and not use this) in place of KeePass2 on Windows?

One thing I like about the KeePassX interface is the ability to search with a hotkey (CTRL+F). Also, this could be done without having the menu bar visible, hitting the hotkey just pulls up the input field.

I use MacPass, which is a good native Mac alternative for KeePass. It supports KeePassHTTP and judging by their github wiki they have recently implemented support for the KDBX4 format.

Docs are.. sparse. The website says go to the GitHub wiki, and that only really talks about how to build and develop the app, not how to use it.<p>Can anyone tell me how to enable Yubikey?

Can someone explain how the YubiKey and TOTP support is supposed to work? I can&#x27;t think of a way those could work with a local password manager like KeePass.

Features I like:<p>1) Download website favicon (no clue how though, tried entering website but didn&#x27;t see an option to download favicon)<p>2) Command line interface, no clue again how to use.

It also now has CSV importing so you can now import your passwords from LastPass (though you&#x27;ll have to manually recreate the folder structure).

Doesn&#x27;t work for my DB ... &quot;Unable to open the database. Duplicate custom attribute found&quot;. Gonna stick with MacPass I guess.

Well done! It&#x27;s great to see some progress with open source in this particular area.<p>At the moment I&#x27;m still stuck with [insert_name_of_commercial_proprietary_solution] but would love to switch to a true open source solution with good user experience and reliable mobile support.<p>I will make a small donation as soon as I get through the flattr waitlist as a small token of appreciation.

This is really cool. Here are more feature requests (and for all I know they&#x27;re already there):<p>* Optionally display a secret as a QR code<p>* Generate and validate BIP39-compatible seeds (like Diceware but with a checksum. Many Bitcoin wallets these days accept them)<p>* Get this into Tails

Great release!<p>Is kdbx format supported by any iPhone app? I&#x27;m stuck with KeepassX for that reason.

I&#x27;m trying the snap package, but I don&#x27;t think the cli is available this way. I can find the binary in &#x2F;snap&#x2F;keepassxc&#x2F;current&#x2F;bin, but it has library loading problems.

Anyone knows how should I change the font? I know this seems a minor thing but I&#x27;d like this thing to be readable :-).<p>The font-size is too small. And I&#x27;d prefer a font of my own choice.

How well does it work for teams? Is there issues for syncing the database if two or more people are using it at the same time?

Nice! Excited for future development of this. I&#x27;ll have to get a Neo soon to try out these new features.

I&#x27;d love to be able to decide which characters to use when generating a password.

No KDBX 4 support unfortunately.

Storing password and TOTP seed in a single storage goes against the concept of 2FA.

Is there a KeePass fork with support for the new MacBook touch bar?

How is KeePassXC comparing in verification&#x2F;testing vs the original KeePass2?<p>I was not able to find information on that process on eithers project homepage