keepassxreboot/keepassxc on Hacker News

I hadn't heard this story. Source: https://github.com/keepassxreboot/keepassxc/issues/10407#iss...

comment by spiffytech · 2025-10-28 · in Passkeys: They're not perfect but they're getting better

…of passkeys to block open-source implementations, because they allow you to export your passkeys: https://github.com/keepassxreboot/keepassxc/issues/10407#iss...

comment by josephcsible · 2025-10-28 · in Passkeys: They're not perfect but they're getting better

…they don't implement passkey storage on the client device in the way the spec authors prefer. https://github.com/keepassxreboot/keepassxc/issues/10406 [2] Maintaining a list of "non-compliant" clients, including the above open-source one,…

comment by coldpie · 2025-10-27 · in What happened to running what you wanted on your own machine?

…(perhaps targeted for enterprise usage?) but should be a separate spec/extension or something. [1]: https://github.com/keepassxreboot/keepassxc/issues/10407#iss...

comment by 8cvor6j844qw_d6 · 2025-09-03 · in Passkeys and Modern Authentication

Well, see here: https://github.com/keepassxreboot/keepassxc/issues/10374 I'm pretty sure a lot of this stuff are arbitrary decisions that sites make when they implement passkey support and you never know where it will work. Also some sites…

comment by shmerl · 2025-09-02 · in Passkeys and Modern Authentication

…an implementation if it allows export [1]. Imo users need the fundamental freedom to choose. [1] https://github.com/keepassxreboot/keepassxc/issues/10407#iss...

comment by tuckerman · 2025-09-02 · in Passkeys and Modern Authentication

…that KeepassXC have opted to implement the spec as per[0]. Good outcome to a good request. [0] https://github.com/keepassxreboot/keepassxc/issues/11363

comment by lucideer · 2025-09-01 · in We should have the ability to run any code we want on hardware we own

…the FIDO Alliance is trying to pressure KeepassXC to remove exporting passkeys in an open format: https://github.com/keepassxreboot/keepassxc/issues/10407

comment by breakingcups · 2025-09-01 · in We should have the ability to run any code we want on hardware we own

…had taken over the abandoned KeePassX project). [0]: https://github.com/eugenesan/keepassxc [1]: https://github.com/keepassxreboot/keepassxc

comment by Hackbraten · 2025-08-07 · in Emailing a one-time code is worse than passwords

…page for KeePassX. [0] < https://keepass.info/download.html > [1] < https://keepassxc.org/ > [2] < https://github.com/keepassxreboot/keepassxc/releases > [3] And -because I'm a Linux user- not only do I have KeePassXC in my package…

comment by simoncion · 2025-08-07 · in Emailing a one-time code is worse than passwords

…here, you risk having KeePassXC blocked by relying parties (similar to #10406). From the linked https://github.com/keepassxreboot/keepassxc/issues/10406 > | no signed stamp of approval from on high > see above. Once certification and…

comment by reginald78 · 2025-08-07 · in Emailing a one-time code is worse than passwords

…back up passkeys to paper, I think we'll have to allow providers to block keepass via attestation." https://github.com/keepassxreboot/keepassxc/issues/10407#iss... All because passkeys backup is deemed "too unsafe and users should never be…

comment by lelandbatey · 2025-08-07 · in Emailing a one-time code is worse than passwords

Well, having your passkey provider blocked for doing that might stop you. https://github.com/keepassxreboot/keepassxc/issues/10407 Of course, they might just block you for not being on a whitelist of approved providers anyway.

comment by reginald78 · 2025-08-07 · in Emailing a one-time code is worse than passwords

…and dangling possible bans in front of projects who implement Passkeys in more user-friendly ways: https://github.com/keepassxreboot/keepassxc/issues/10407 > To be very honest here, you risk having KeePassXC blocked by relying parties But…

comment by t_mann · 2025-08-07 · in Emailing a one-time code is worse than passwords

KeepassXC is great, until the Passkey mafia starts actively blocking its use: https://github.com/keepassxreboot/keepassxc/issues/10407#iss... > I've already heard rumblings that KeepassXC is likely to be featured in a few industry…

comment by mzajc · 2025-08-05 · in Passkeys are just passwords that require a password manager

…in the spec, all up to implementers. At least KeypassXC sure provides a way to access your data: https://github.com/keepassxreboot/keepassxc/issues/10407 . Other software behavior may vary. This thread is one of the guys from FIDO…

comment by reginald78 · 2025-08-05 · in Passkeys are just passwords that require a password manager

…with the attestation feature like one of the FIDO devs immediately threatened to do to keepass: https://github.com/keepassxreboot/keepassxc/issues/10407 I think the dance is all for naught though, they'll end up locked out as non-standard…

comment by reginald78 · 2025-08-05 · in Passkeys are just passwords that require a password manager

…in the spec, all up to implementers. At least KeypassXC sure provides a way to access your data: https://github.com/keepassxreboot/keepassxc/issues/10407 . Other software behavior may vary. > A passkey manager is morally required to do an…

comment by drdaeman · 2025-08-05 · in Passkeys are just passwords that require a password manager

KeepassXC seems to have included that for two years now: https://github.com/keepassxreboot/keepassxc/pull/8825 (I don't use Keepass, so I can't attest to how well it works.) There's a JSON example of an export on the page. It shows nicely…

comment by lucumo · 2025-07-04 · in Next month, saved passwords will no longer be in Microsoft’s Authenticator app

https://github.com/keepassxreboot/keepassxc/issues/10407#iss... > To be very honest here, you risk having KeePassXC blocked by relying parties Even if the bigtechs don't "officially" make the passkey standards require bigtech involvement,…

comment by endgame · 2025-07-04 · in Opening up ‘Zero-Knowledge Proof’ technology

…people pretty deep into the scene who didn't believe this was supposed to be the case. For example, https://github.com/keepassxreboot/keepassxc/issues/10407

comment by recursive · 2025-07-03 · in Next month, saved passwords will no longer be in Microsoft’s Authenticator app

…I really can't understand why anyone would promote passkeys in good faith if that's the case. [1]: https://github.com/keepassxreboot/keepassxc/issues/10407#iss...

comment by mzajc · 2025-07-03 · in Next month, saved passwords will no longer be in Microsoft’s Authenticator app

…from logging in, unless KeepassXC complies with FIDO demands regarding specific implementation [0] https://github.com/keepassxreboot/keepassxc/issues/10407#iss...

comment by ortekk · 2025-07-03 · in Next month, saved passwords will no longer be in Microsoft’s Authenticator app

…plaintext passkey export, they're at risk of being blocked once attestation is standardized: https://github.com/keepassxreboot/keepassxc/issues/10407 The goal here isn't maximizing user choice, it's to enforce minimum agreeable standards…

comment by AlotOfReading · 2025-06-16 · in An origin trial for a new HTML <permission> element (2024)

…and digital credentials @ okta" Not directly threatening but within that frame of mind: https://github.com/keepassxreboot/keepassxc/issues/10407#iss... https://github.com/keepassxreboot/keepassxc/issues/10407#iss...

comment by proactivesvcs · 2025-05-14 · in The cryptography behind passkeys

…banned by authenticating websites. The spec has explicit support for banning clients built in. https://github.com/keepassxreboot/keepassxc/issues/10407

comment by coldpie · 2025-05-14 · in The cryptography behind passkeys

…that I have previously rallied against but rethinking as of late because of these situations). " https://github.com/keepassxreboot/keepassxc/issues/10407

comment by coldpie · 2025-05-14 · in The cryptography behind passkeys

…happen because of non-spec compliant implementations and authenticators with poor security posture. https://github.com/keepassxreboot/keepassxc/issues/10406#iss... The spec authors' comments on these issues make it very clear that they…

comment by coldpie · 2025-05-08 · in UK rolls out passkeys across Gov.uk services

…5. KeePassXC has a "Password Generator": https://keepassxc.org/docs/KeePassXC_UserGuide , https://github.com/keepassxreboot/keepassxc , https://keepassxc.org/download , https://github.com/termux/termux-packages/tree/master/x11-pa...…

comment by sipofwater · 2025-04-15 · in EU issues US-bound staff with burner phones over spying fears

…anti-feature to blackball Keepassxc's implementation when they made something not locked in enough. https://github.com/keepassxreboot/keepassxc/issues/10407 There have been some discussions to create an export standard since then but I…

comment by reginald78 · 2025-03-20 · in 2FA or Not 2FA

…is one of the concerns, that it's yet another "push users to Apple and Google's tool of choice". > https://github.com/keepassxreboot/keepassxc/issues/10407#iss... "Users should be prevented from copying or sharing a private key".

comment by FireBeyond · 2025-03-09 · in Toward a Passwordless Future

Oof, I found a whole ton of anti-open-source-software quotes on the related Github issue https://github.com/keepassxreboot/keepassxc/issues/10406 : > When required, the authenticator must perform user verification (PIN, biometric, or some…

comment by coldpie · 2025-01-04 · in Passkey marketing is lying to you (it's actually really simple)

…of the Passkeys/WebAuthn spec people made a huge fuss over how KeePassXC did their export function https://github.com/keepassxreboot/keepassxc/issues/10407

comment by Nekit1234007 · 2024-12-30 · in Passkey technology is elegant, but it's most definitely not usable security

…KeePassXC also supports export but not yet using the aforementioned standard: https://github.com/keepassxreboot/keepassxc/issues/11363

comment by johnmaguire · 2024-12-30 · in Passkey technology is elegant, but it's most definitely not usable security

https://github.com/keepassxreboot/keepassxc/issues/10374 Passkeys not working on certain sites I suspect 1password also has at least a few sites that need special handling

comment by pas · 2024-12-30 · in Passkey technology is elegant, but it's most definitely not usable security

KeePassXC imports passkeys from Bitwarden: https://github.com/keepassxreboot/keepassxc/pull/11401/files

comment by thugcee · 2024-12-30 · in Passkey technology is elegant, but it's most definitely not usable security

I first learned of it because KeePassXC uses it https://github.com/keepassxreboot/keepassxc/blob/2.7.9/cmake...

comment by mdaniel · 2024-12-19 · in Botan: Crypto and TLS for Modern C++

…(wasn't it KeePas who had issues where they were threatened by being blocked from supporting that - https://github.com/keepassxreboot/keepassxc/issues/10407#iss... )

comment by FireBeyond · 2024-12-17 · in Microsoft Confirms Password Deletion for 1B Users

…built in device attestation feature to blackball any passkey providers that allow that, apparently: https://github.com/keepassxreboot/keepassxc/issues/10407#iss... Now imagine a whitelist of acceptable providers. Suddenly, you don't even…

comment by reginald78 · 2024-12-17 · in Microsoft Confirms Password Deletion for 1B Users

…already threats to use the attestation club to ban them from the landscape for not falling in line https://github.com/keepassxreboot/keepassxc/issues/10407#iss...

comment by reginald78 · 2024-12-17 · in Microsoft Confirms Password Deletion for 1B Users

…on what users can do with their own data. To be clear, I'm not speaking hypothetically: https://github.com/keepassxreboot/keepassxc/issues/10407#iss...

comment by josephcsible · 2024-10-22 · in Passkeys? Why hasn't it taken off yet?

…on KeePassXC for not abiding by this part of the protocol (and which I take Keepass's side). [0] https://github.com/keepassxreboot/keepassxc/issues/9339 [1] https://keepassxc.org/blog/2023-06-20-cve-202335866/ edit: This actually might be…

comment by prophesi · 2024-10-17 · in FIDO Alliance publishes new spec to let users move passkeys across providers

The original thread: https://github.com/keepassxreboot/keepassxc/issues/10407#iss...

comment by arianvanp · 2024-10-16 · in FIDO Alliance publishes new spec to let users move passkeys across providers

…with KeepassXC sudo apt install keepassxc There is also newer version with additional features: https://github.com/keepassxreboot/keepassxc

comment by xet7 · 2024-10-12 · in Ask HN: AWS registering MFA will be required in 29 days

https://github.com/keepassxreboot/keepassxc/issues/10407#iss... > You absolutely should be preventing users from being able to copy a private key! Huh? This is dumb. Users should be able to do whatever they want with their private keys.…

comment by shmerl · 2024-07-19 · in Concerns about Passkeys

> and then I'll use passkeys in keepassxc. If the auth cartel deigns to allow it: https://github.com/keepassxreboot/keepassxc/issues/10407 https://news.ycombinator.com/item?id=39698502 https://news.ycombinator.com/item?id=39706876…

comment by livueta · 2024-07-06 · in About Passkey – the password-free tech Apple is betting on

…adding an attestation feature that would allow websites to block various passkey implementations: https://github.com/keepassxreboot/keepassxc/issues/10407#iss... e.g., they could block ones that allow exports, or they could block ones that…

comment by hedora · 2024-06-12 · in Safari 18 can automatically transition users to passkeys [video]

…Enable/Disable Networking support (e.g., favicon downloading) (default: OFF) https://github.com/keepassxreboot/keepassxc/blob/develop/INS...

comment by yencabulator · 2024-05-31 · in The KeePassXC Kerfuffle

▲ 10

Debian removes KeePassXC browser integration

story by 6581 · 2024-05-18 · 2 comments

https://github.com/keepassxreboot/keepassxc/issues/10725

comment by gsich · 2024-05-14 · in The new APT 3.0 solver