Remote

Team KeePassXC

@keepassxc@fosstodon.org

mastodon 4.7.3

KeePassXC is a modern, secure, and open-source password manager that stores and manages your most sensitive information.

You can run KeePassXC on Windows, macOS, and Linux systems. KeePassXC saves many different types of information, such as usernames, passwords, URLs, attachments, and notes in an offline, encrypted file that can be stored in any location, including private and public cloud solutions.

Team email PGP key: 2FB8 CA9C 105D 8D57 BB97 46BD

10220 Followers

28 Following

32 Posts

Joined November 12, 2022

Website:

https://keepassxc.org

GitHub:

https://github.com/keepassxreboot/keepassxc

Snapshot Builds:

https://snapshot.keepassxc.org

Bluesky:

https://bsky.app/profile/keepassxc.org

Team KeePassXC @keepassxc@fosstodon.org

· 2w ago

🎉 We're happy to announce #KeePassXC version 2.8.0-beta1! This is the first test release of our next major update, which brings you an upgrade to Qt6, Auto-Type on Wayland, remote sync, ARM64 builds for Windows, and much more. More info and download links on our blog: https://keepassxc.org/blog/2026-09-23-2.8.0-beta1-released/

KeePassXC 2.8.0 (Beta 1) released – KeePassXC

KeePassXC 2.8.0 (Beta 1) released – KeePassXC

KeePassXC Password Manager

172

5

117

1

Team KeePassXC @keepassxc@fosstodon.org

· 2w ago

Replying to

@ciencia@social.wikidex.net It used to be, but with the remote desktop portal, it's possible now. We basically start a local "remote" control session. We still don't get the window names for automatic entry matching, but we can send keystrokes at least. How well it works is still very desktop-dependent, though. Especially if you use an older KDE or Gnome, you might encounter strange bugs.

2

2

0

0

Team KeePassXC @keepassxc@fosstodon.org

· 4mo ago

Here's your regular reminder to always check where you're downloading things from. #KeePassXC 's website is https://keepassxc.org.

Do not blindly trust search results or AI answers at the top!

https://blog.eclecticiq.com/seo-poisoning-campaign-leverages-gemini-and-claude-code-impersonation-to-deliver-infostealer

Fosstodon

113

8

105

2

Team KeePassXC @keepassxc@fosstodon.org

· 10mo ago

🎉 We're very happy to announce our new release KeePassXC 2.7.11 and... *drumroll* that the KeePassXC version 2.7.9 has been awarded a CSPN Security Visa by the French National Cybersecurity Agency (ANSSI). 🎉❤️🔒
See our blog post for more information: https://keepassxc.org/blog/2025-11-23-2.7.11-released/ #VisaSecu #KeePassXC

KeePassXC 2.7.11 released – KeePassXC

KeePassXC 2.7.11 released – KeePassXC

KeePassXC Password Manager

339

12

253

0

Team KeePassXC @keepassxc@fosstodon.org

· 4mo ago

RE: @bagder@mastodon.social

"All modern AI models are good at this now. Anyone with time and some experimental spirits can find security problems now. The high quality chaos is real."

Second that. The number of confidential security reports for KeePassXC has also gone up (though nothing major yet). Those AI reports used to be slop, but they are now mostly legitimate . We don't know which models are being used by the reporters, but occasionally, we get the same things reported multiple times within the span of just days.

mastodon.social

daniel:// stenberg://: "#Mythos finds a #curl vulnerability yes, as in s…" - Mastodon

59

7

49

0

Team KeePassXC @keepassxc@fosstodon.org

· 6mo ago

Replying to

The website is asking for your email address to access the downloads. We never ask for your email address. Do not enter your data there, it's a phishing attempt.

86

12

41

0

Team KeePassXC @keepassxc@fosstodon.org

· 6mo ago

Replying to

@eroc1990 We own several already, but it's a losing game and a pretty expensive one at that.

58

6

2

0

Team KeePassXC @keepassxc@fosstodon.org

· 7mo ago

New bugfix release: #KeePassXC 2.7.12. More information and full changelog at https://keepassxc.org/blog/2026-03-10-2.7.12-released/

Fosstodon

60

1

48

0

Team KeePassXC @keepassxc@fosstodon.org

· 8mo ago

To everyone experience issues with KeePassXC-Browser on Edge at the moment: We are aware of that. It's caused by a browser engine bug that has already been rolled back in other Chromium-based browsers, but not Edge. Please be patient, downgrade, or use this workaround: https://github.com/keepassxreboot/keepassxc-browser/issues/2838#issuecomment-3788210495

Browser extensions can't connect to KeePassXC in the latest version of Edge · Issue #2838 · keepassxreboot/keepassxc-browser

Have you searched for an existing issue? Yes, I tried searching and reviewed the pinned issues Brief Summary Can't connect DB or click any buttons in extension settings in the latest version of Edg...

35

1

24

0

Team KeePassXC @keepassxc@fosstodon.org

· 6mo ago

Replying to

@sn Thanks. I've reported it to Microsoft, Google, Netcraft, and other services as well.

16

1

2

0

Team KeePassXC @keepassxc@fosstodon.org

· 6mo ago

Replying to

@gremlin There's an infinite number of possible typos like that. Registering them all is pretty futile and expensive.

12

27

2

0

Team KeePassXC @keepassxc@fosstodon.org

· 6mo ago

Replying to

@gremlin We already own a lot of variants with different top-level domains and redirect them to keepassxc.org. The only one we couldn't get is .com, because someone snatched it already and has since put it on auction after it was put on block lists. But we cannot also register all possible combinations with hyphens and typos.

10

29

1

0

Team KeePassXC @keepassxc@fosstodon.org

· 6mo ago

Replying to

@gremlin And then multiply it by 10 different TLDs.

7

22

1

0

Team KeePassXC @keepassxc@fosstodon.org

· 6mo ago

Replying to

@gremlin As I said, we already own quite a few different domains. We're a small open source project. We get a healthy amount of donations, but we cannot spend $2000 a year on domains, just so someone can register yet another one we haven't registered yet.

6

19

0

0

Team KeePassXC @keepassxc@fosstodon.org

· 6mo ago

Replying to

@gremlin Six different variants with hyphens, kee, key -pw etc. times 10 TLDs times $30 is $1800. But if you want to help, keepassxc[.]com is on auction for a mere $50,000.

6

16

1

0

Team KeePassXC @keepassxc@fosstodon.org

· 6mo ago

Replying to

@gremlin The reason we started registering all those other TLDs is exactly because someone took .com and then used it to distribute fake downloads. We got the domain blocklisted quickly, so they put it up for sale. It's off the blocklist again now, but we haven't been able to acquire it and I don't think they'll ever let go of it unless we pay their scalper price.

5

10

0

0

Team KeePassXC @keepassxc@fosstodon.org

· 4mo ago

Replying to

@chronocide@sunny.garden KeePassXC is in the convenient position of having a rather low attack surface to begin with.

3

0

0

0

Team KeePassXC @keepassxc@fosstodon.org

· 4mo ago

Replying to

@dzwiedziu@mastodon.social The reports we get these days are mostly legitimate now (not all, but most). Legitimate doesn't necessarily mean "high impact".

3

0

0

0

Team KeePassXC @keepassxc@fosstodon.org

· 4mo ago

Replying to

@chronocide@sunny.garden We didn’t receive that many before, so unclear. They are helpful in the sense that some issue was found that people previously missed. Most are low-hanging fruit like hypothetical integer overflows and mismatches between code and documentation etc.

2

1

0

0

Team KeePassXC @keepassxc@fosstodon.org

· 4mo ago

Replying to

@mikeTesteLinuxQlub@qlub.social Yes

1

0

1

0

Team KeePassXC @keepassxc@fosstodon.org

· 6mo ago

Replying to

@ErikvanStraten @jeroengui They forwarded our abuse report to the hoster of the actual page. We’ll see. Also everyone, if you must visit the page, at least do it in a private window or clear your history afterwards, so you don’t accidentally open it again later!

2

0

1

0

Team KeePassXC @keepassxc@fosstodon.org

· 6mo ago

Replying to

@dreua @eroc1990 Without a registered trademark, there's little we can do.

2

2

1

0

Team KeePassXC @keepassxc@fosstodon.org

· 6mo ago

Replying to

@gremlin com is taken, see above. We own net, org, eu, de, us, and some others. Most of these TLDs are $10 the first year and then $15-30 for every following year unless you choose a different registrar for each. app and dev are among the most expensive ones. And then you still have to multiply all those by the number of typosquats you want to catch, which are easily 6-10 for each one.

2

12

1

0

Team KeePassXC @keepassxc@fosstodon.org

· 5mo ago

Replying to

@odnankenobi @dreua @eroc1990 trademarks do not automatically protect anything. The owner is required to pursue legal action to protect the mark. That costs... a LOT of money.

1

0

0

0

Team KeePassXC @keepassxc@fosstodon.org

· 6mo ago

Replying to

@jeroengui Not quite a takedown, but Cloudflare forwarded our request. The actual site is hosted at Hetzner.

1

3

0

0

Team KeePassXC @keepassxc@fosstodon.org

· 6mo ago

Replying to

@gremlin I'll give it a try.

1

0

0

0

Team KeePassXC @keepassxc@fosstodon.org

· 6mo ago

Replying to

@gremlin Of course they want to auction it off. The 50k is just the "buy now, stupid" price. But we're not a registered legal trademark (yet). Otherwise we'd have done that a long time ago.

1

8

0

0

Team KeePassXC @keepassxc@fosstodon.org

· 6mo ago

Replying to

@gremlin I would expect the domain to be put on the safe browsing list for a while and then they'll either drop it or park it. We don't need someone to gift us those domains (unless of course someone has the contacts or measures to transfer keepassxc[.]com to us). We can always buy a few more ourselves, but there will always be more.

1

6

0

0

Team KeePassXC @keepassxc@fosstodon.org

· 6mo ago

Replying to

@gremlin Maybe I'll try again some time. I guess in the meantime I'll spend another €320 on 36 months of more typoquat domains. Fun fact: I checked whether IONOS had a better offer than Godaddy. They did for the domains themselves. But in addition they wanted a fixed one-time fee of just over €1800 for "premium domains". Ridiculous.

1

4

0

0

Team KeePassXC @keepassxc@fosstodon.org

· 6mo ago

Replying to

@gremlin Namecheap was another option. Maybe I'll transfer some there. But in the long run, it's not much cheaper either.

1

2

0

0

Team KeePassXC @keepassxc@fosstodon.org

· 6mo ago

Replying to

@TheTearMiser Care to explain?

0

1

0

0