keepassxreboot/keepassxc on Hacker News

https://github.com/keepassxreboot/keepassxc/issues/10407#iss... > To be very honest here, you risk having KeePassXC blocked by relying parties This threat, because someone dared to give users control, is completely unacceptable to me.

comment by _jackdk_ · 2026-10-14 · in Passkeys are not a trap

…of course means timcappalli with minor contributions from two others. You might remember him from https://github.com/keepassxreboot/keepassxc/issues/10407#iss... .

comment by mzajc · 2026-10-14 · in Passkeys are not a trap

…It is only through community outcry that "Credential Exchange Format (CXF)" came to existence. https://github.com/keepassxreboot/keepassxc/issues/10407 This one is specifically about 1Password: https://news.ycombinator.com/item?id=37836783…

comment by yencabulator · 2026-10-14 · in Passkeys are a trap

…we're all roped into yet another anti-user scheme. And yes, passkeys absolutely ARE a trap. [0]: https://github.com/keepassxreboot/keepassxc/issues/10407#iss...

comment by mzajc · 2026-10-14 · in Passkeys are not a trap

The cauldron is already warm. I encourage people to read these issue trackers. https://github.com/keepassxreboot/keepassxc/issues/10407#iss... https://github.com/keepassxreboot/keepassxc/issues/10406 "The unfortunate piece is that your…

comment by deltoidmaximus · 2026-10-14 · in Passkeys are not a trap

…allows you to export your passkeys should you choose. The people behind passkeys do not like this. https://github.com/keepassxreboot/keepassxc/issues/10407

comment by Banditoz · 2026-10-14 · in Passkeys are not a trap

This is a violation of the spec you cited above and criticized by FIDO devs here: https://github.com/keepassxreboot/keepassxc/issues/10407#iss...

comment by tennysont · 2026-10-13 · in Passkeys are a trap

…have specifically disavowed Bitwarden's behavior of allowing users to access their passkeys. [1] https://github.com/keepassxreboot/keepassxc/issues/10407 [2] https://github.com/keepassxreboot/keepassxc/issues/10407#iss...

comment by tennysont · 2026-10-13 · in Passkeys are a trap

That's not a fair reading of that comment, in my view (assuming you mean https://github.com/keepassxreboot/keepassxc/issues/10407#iss... ). I read it as "your actions might push relying parties to use attestation to be able to block you",…

comment by lxgr · 2026-10-13 · in Ricky Mondello responds to "Passkeys are a trap. Do not use them."

…Fast forward to today... and it looks like there's movement towards doing exactly that: https://github.com/keepassxreboot/keepassxc/pull/13343 -- Edit: Indeed if you scroll down to the last comment on that infamous PR (…

comment by jesseendahl · 2026-10-12 · in Ricky Mondello responds to "Passkeys are a trap. Do not use them."

https://github.com/keepassxreboot/keepassxc/issues/10407#iss...

comment by AlotOfReading · 2026-10-12 · in Ricky Mondello responds to "Passkeys are a trap. Do not use them."

…bad things too" isn't the greatest argument... > FIDO devs: maybe we could hop on a phone call? [1] https://github.com/keepassxreboot/keepassxc/issues/10407 [2] https://github.com/keepassxreboot/keepassxc/issues/10406

comment by tennysont · 2026-10-12 · in Passkeys are a trap

…that I have previously rallied against but rethinking as of late because of these situations). https://github.com/keepassxreboot/keepassxc/issues/10407#iss... They need to remove attestation from the spec. Instead of promising no one will…

comment by coldpie · 2026-10-12 · in Passkeys are a trap

…to it later". They will use it as a weapon to blacklist providers that don't play by their rules. https://github.com/keepassxreboot/keepassxc/issues/10407#iss... https://github.com/keepassxreboot/keepassxc/issues/10406

comment by deltoidmaximus · 2026-10-12 · in Passkeys are a trap

…and attestation goes live, there will be a minimum functional and security bar for providers." https://github.com/keepassxreboot/keepassxc/issues/10406

comment by deltoidmaximus · 2026-10-12 · in Passkeys are a trap

…or they'll be blackballed using attestation and certification weapons the FIDO alliance possesses: https://github.com/keepassxreboot/keepassxc/issues/10406 You don't get to decide how to use your passkeys, some on else does.

comment by deltoidmaximus · 2026-10-12 · in Passkeys are a trap

…exported in clear text."[3] [1] https://www.w3.org/TR/webauthn/ [2] https://passkeys.dev/about/ [3] https://github.com/keepassxreboot/keepassxc/issues/10407

comment by Telaneo · 2026-10-12 · in Passkeys are a trap

…export them and sync between devices. That's not the intention of the relevant standards.[1] [1] https://github.com/keepassxreboot/keepassxc/issues/10407

comment by Telaneo · 2026-10-12 · in Passkeys are a trap

For now: https://github.com/keepassxreboot/keepassxc/issues/10406 Or not: https://github.com/Kunzisoft/KeePassDX/issues/2321 They are imo clearly gearing up to lock down passkeys in practice one day so that you will only be able to use…

comment by duskdozer · 2026-08-18 · in How Bluesky draws its logo on screenshots

Funny enough, that's what the big passkey folks want: https://github.com/keepassxreboot/keepassxc/issues/10407

comment by duskdozer · 2026-08-18 · in How Bluesky draws its logo on screenshots

…that I have previously rallied against but rethinking as of late because of these situations). https://github.com/keepassxreboot/keepassxc/issues/10407#iss... They 100% will lock it down to "secure" options you cannot control. I suppose if…

comment by duskdozer · 2026-07-23 · in Passkeys were invented by engineers with zero understanding of consumer brain

KeepassXC gave users this choice. And was threatened to be blocked for it.[1] [1] https://github.com/keepassxreboot/keepassxc/issues/10407#iss...

comment by pseudalopex · 2026-07-22 · in Passkeys were invented by engineers with zero understanding of consumer brain

…is free, open source, and supports passkeys. KeepassXC was threatened to be blocked.[1] [1] https://github.com/keepassxreboot/keepassxc/issues/10407#iss...

comment by pseudalopex · 2026-07-22 · in Passkeys were invented by engineers with zero understanding of consumer brain

…which do not actually implement the spec correctly. KeepassXC was threatened to be blocked.[1] [1] https://github.com/keepassxreboot/keepassxc/issues/10407#iss...

comment by pseudalopex · 2026-07-22 · in Passkeys were invented by engineers with zero understanding of consumer brain

Here's KeePassXC being threatened with blacklisting over granting users control over their own data: https://github.com/keepassxreboot/keepassxc/issues/10407#iss... Here's the most readable reference to playing favorites on passkey vaults…

comment by OkayPhysicist · 2026-07-22 · in Passkeys were invented by engineers with zero understanding of consumer brain

…It's an impossible design. It's all just obfuscation, most of which is confusing to users. [1] https://github.com/keepassxreboot/keepassxc/issues/10407

comment by Telaneo · 2026-07-22 · in Passkeys were invented by engineers with zero understanding of consumer brain

…are paternalistic and don't trust users. I had an argument with one of them a few months ago. https://github.com/keepassxreboot/keepassxc/issues/10407 https://news.ycombinator.com/item?id=47189749#47193048 My read on it all is that FIDO is…

comment by kingstnap · 2026-07-22 · in Passkeys were invented by engineers with zero understanding of consumer brain

…this issue asking keepassxc to disable plaintext exports, which is completely technically feasible https://github.com/keepassxreboot/keepassxc/issues/10407

comment by corndoge · 2026-07-22 · in Passkeys were invented by engineers with zero understanding of consumer brain

…> This implementation is not spec compliant and has the potential to be blocked by relying parties. https://github.com/keepassxreboot/keepassxc/issues/10406

comment by coldpie · 2026-07-22 · in Passkeys were invented by engineers with zero understanding of consumer brain

…is not for a "normal" user. It really needs to get default entry tempates [1] out the door. [1] https://github.com/keepassxreboot/keepassxc/issues/8228

comment by sigzero · 2026-06-25 · in LastPass notifies users of yet another data breach

> KeepassXC can't do auto-type on Wayland https://github.com/keepassxreboot/keepassxc/issues/2281 Though it looks like there's a recent PR for that: https://github.com/keepassxreboot/keepassxc/pull/13359

comment by genpfault · 2026-06-03 · in Preparing for KDE Plasma's Last X11-Supported Release

…by the spec[1]. [1] "To be very honest here, you risk having KeePassXC blocked by relying parties." https://github.com/keepassxreboot/keepassxc/issues/10407#iss... More examples here https://fy.blackhats.net.au/blog/2025-12-17-yep-passkeys-…

comment by coldpie · 2026-04-10 · in Microsoft suspends dev accounts for high-profile open source projects

…even went on GitHub telling an open source implementation to not let users copy the private key. https://github.com/keepassxreboot/keepassxc/issues/10407 There is a good reason for it. If you can copy and paste your passkey, then a…

comment by pibaker · 2026-02-28 · in Don't use passkeys for encrypting user data

…a push to make it as opaque as possible, likely through attestation or similar mechanisms. [1]: https://github.com/keepassxreboot/keepassxc/issues/10407

comment by 8cvor6j844qw_d6 · 2026-02-28 · in Don't use passkeys for encrypting user data

…annoy users unnecessarily. > KeePassXC is not "being threatened with being banned via attestation". https://github.com/keepassxreboot/keepassxc/issues/10406#iss... It's a thinly veiled threat. Making a certification process and refusing to…

comment by digiown · 2026-02-08 · in Credentials for Linux: Bringing Passkeys to the Linux Desktop

…these anti-user features. As a result, they are being threatened with being banned via attestation: https://github.com/keepassxreboot/keepassxc/issues/10406 https://github.com/keepassxreboot/keepassxc/issues/10407 Screw these "You'll own…

comment by digiown · 2026-02-08 · in Credentials for Linux: Bringing Passkeys to the Linux Desktop

…comment here, KeePassXC has supported item templates including for secure notes for some time: https://github.com/keepassxreboot/keepassxc/issues/8228 This discussion of KeePassXC for notes also mentions BitWarden and ProtonPass:…

comment by Terretta · 2026-02-02 · in Show HN: Sklad – Secure, offline-first snippet manager (Rust, Tauri v2)

Passkeys don't require it, but relying-parties may: https://github.com/keepassxreboot/keepassxc/issues/10407#iss... If enough RPs ban clients that let users manage their own data in the name of "security," then it is effectively required…

comment by coldpie · 2025-12-23 · in Things I learnt about passkeys when building passkeybot

…Spec author quote: "To be very honest here, you risk having KeePassXC blocked by relying parties." https://github.com/keepassxreboot/keepassxc/issues/10407#iss... [2] https://www.smokingonabike.com/2025/01/04/passkey-marketing-... [3]…

comment by coldpie · 2025-12-22 · in Things I learnt about passkeys when building passkeybot

…Yes, literally from you : "Passkeys should never be allowed to be exported in clear text." https://github.com/keepassxreboot/keepassxc/issues/10407 Also, "You absolutely should be preventing users from being able to copy a private key!" >…

comment by lapcat · 2025-12-17 · in Yep, Passkeys Still Have Problems

…you be in support of an ecosystem where RPs might block my implementation based on my AAGUID? [0] https://github.com/keepassxreboot/keepassxc/issues/10406#iss...

comment by Dagonfly · 2025-12-17 · in Yep, Passkeys Still Have Problems

…restrict user freedom significantly arguably. But the incentives and capabilities are clear. [1] https://github.com/keepassxreboot/keepassxc/issues/10407#iss...

comment by pseudalopex · 2025-12-17 · in Yep, Passkeys Still Have Problems

…featured in a few industry presentations that highlight security challenges with passkey providers https://github.com/keepassxreboot/keepassxc/issues/10407

comment by shantara · 2025-12-17 · in Yep, Passkeys Still Have Problems

QT6 port is still not ready https://github.com/keepassxreboot/keepassxc/pull/11651 The main issue for me with keepassxc is the broken autotype on wayland

comment by lousken · 2025-11-26 · in KDE Plasma 6.8 Will Go Wayland-Exclusive in Dropping X11 Session Support

…ELM_ENGINE=wayland_egl SDL_VIDEODRIVER=wayland _JAVA_AWT_WM_NONREPARENTING=1 keepassxc https://github.com/keepassxreboot/keepassxc/issues/2973

comment by greenavocado · 2025-11-26 · in KDE Plasma 6.8 Will Go Wayland-Exclusive in Dropping X11 Session Support

…implementations who allow exports outside of the vendor cartel are threatened to be blacklisted: https://github.com/keepassxreboot/keepassxc/issues/10407 > My primary hardware key can be from a completely different vendor than the backup…

comment by Nextgrid · 2025-11-23 · in Native Secure Enclave backed SSH keys on macOS

You have never been skilled at being considerate: https://github.com/keepassxreboot/keepassxc/issues/10725#iss...

comment by RustSupremacist · 2025-11-01 · in Hard Rust requirements from May onward

…does not revolve around him and the problems he chooses to manufacture to justify his paycheck. https://github.com/keepassxreboot/keepassxc/issues/10725#iss...

comment by RustSupremacist · 2025-11-01 · in Hard Rust requirements from May onward

…packages. Here's a thread of them insulting upstream developers & users of the Debian packages. https://github.com/keepassxreboot/keepassxc/issues/10725

comment by cmm11 · 2025-11-01 · in Hard Rust requirements from May onward

…example with an existing system like TOTP and a big company like Steam.......... Link unrelated https://github.com/keepassxreboot/keepassxc/discussions/9591 Eventually get debanked and go live in the woods ig

comment by hollow-moe · 2025-10-29 · in Passkeys: They're not perfect but they're getting better