KeePassXC

Changes

• Passkeys: Set BE and BS flags to true (NOTE: MAY BREAK EXISTING PASSKEYS) [#13042]
• Support TIMEOTP autotype and entry placeholder [#13117]
• Browser: Show URLs in browser access dialog [#12906]
• Bitwarden Import: Add support for nested folders [#13081]

Fixes

• Prevent exploits through OpenSSL configurations [#13118, #13124]
• Auto-Type: Revert change that caused race condition on Linux [#12738]
• Auto-Type: Fix help button enablement [#12937]
• Browser: Fix showing correct checkbox value in entry Browser Integration settings [#12980]
• Browser: Fix setting browser related values to customData [#13026]
• Passkeys: Add publicKey to register response [#12757]
• Fix main entry URL validation when using placeholders [#12964]
• Fix minor font and theme issues [#12814]
• Fix 'Remove' button in Plugin Data being enabled when no row is selected [#12916]
• Sanitize attachment file names before saving [#13114]

Note: The 2.7.11 macOS DMG and AppImage downloads have issues. Please download the 2.7.11-1 builds instead (also below).

Changes

• Add image, HTML, Markdown preview, and text editing support to inline attachment viewer [#12085, #12244, #12654]
• Add database merge confirmation dialog [#10173]
• Add option to auto-generate a password for new entries [#12593]
• Add support for group sync in KeeShare [#11593]
• Add {UUID} placeholder for use in references [#12511]
• Add “Wait for Enter” search option [#12263]
• Add keyboard shortcut to “Jump to Group” from search results [#12225]
• Add predefined search for TOTP entries [#12199]
• Add confirmation when closing database via ESC key [#11963]
• Add support for escaping placeholder expressions [#11904]
• Reduce tab indentation width in notes fields [#11919]
• Cap default Argon2 parallelism when creating a new database [#11853]
• Database lock after inactivity now enabled by default and set to 900 seconds [#12689, #12609]
• Copying TOTP now opens setup dialog if none is configured for entry [#12584]
• Make double click action configurable [#12322]
• Remove unused “Last Accessed” from GUI [#12602]
• Auto-Type: Add more granular confirmation settings [#12370]
• Auto-Type: Add URL typing preset and add copy options to menu [#12341]
• Browser: Do not allow sites automatically if entry added from browser extension [#12413]
• Browser: Add options to restrict exposed groups [#9852, #12119]
• Bitwarden Import: Add support for timestamps and password history [#12588]
• macOS: Add Liquid Glass icon [#12642]
• macOS: Remove theme-based menubar icon toggle [#12685]
• macOS: Add Window and Help menus [#12357]
• Windows: Add option to add KeePassXC to PATH during installation [#12171]

Fixes

• Fix window geometry not being restored properly when KeePassXC starts in tray [#12683]
• Fix potential database truncation when using direct write save method with YubiKeys [#11841]
• Fix issue with database backup saving [#11874]
• Fix UI lockups during startup with multiple tabs [#12053]
• Fix keyboard shortcuts when menubar is hidden [#12431]
• Fix clipboard being cleared on exit even if no password was copied [#12603]
• Fix single-instance detection when username contains invalid filename characters [#12559]
• Fix “Search Wait for Enter” setting not being save [#12614]
• Fix hotkey accelerators not being escaped properly on database tabs [#12630]
• Fix confusing error if user cancels out of key file edit dialog [#12639]
• Fix issues with saved searches and “Press Enter to Search” option [#12314]
• Fix URL wildcard matching [#12257]
• Fix TOTP visibility on unlock and settings change [#12220]
• Fix KeeShare entries with reference attributes not updating [#11809]
• Fix sort order not being maintained when toggling filters in database reports [#11849]
• Fix several UI font and layout issues [#11967, #12102]
• Prevent mouse wheel scroll on edit username field [#12398]
• Improve base translation consistency [#12432]
• Improve inactivity timer [#12246]
• Documentation improvements [#12373, #12506]
• Browser: Fix ordering of clientDataJSON in Passkey response object [#12120]
• Browser: Fix URL matching for additional URLs [#12196]
• Browser: Fix group settings inheritance [#12368]
• Browser: Allow read-only native messaging config files [#12236]
• Browser: Optimise entry iteration in browser access control dialog [#11817]
• Browser: Fix “Do not ask permission for HTTP Basic Auth” option [#11871]
• Browser: Fix native messaging path for Tor Browser launcher on Linux [#12005]
• Auto-Type: Fix empty window behaviour [#12622]
• Auto-Type: Take delays into account when typing TOTP [#12691]
• SSH Agent: Fix out-of-memory crash with malformed SSH keys [#12606]
• CSV Import: Fix modified and creation time import [#12379]
• CSV Import: Fix duplication of root groups on import [#12240]
• Proton Pass Import: Fix email addresses not being imported when no username set [#11888]
• macOS: Fix secure input getting stuck [#11928]
• Windows: Prevent launch as SYSTEM user from MSI installer [#12705]
• Windows: Remove broken check for MSVC Redistributable from MSI installer [#11950]
• Linux: Fix startup delay due to StartupNotify setting in desktop file [#12306]
• Linux: Fix memory initialisation when --pw-stdin is used with a pipe [#12050]

Check out our updated User Guide --> https://keepassxc.org/docs/KeePassXC_UserGuide

Changes

• Allow adjusting application font size [#11567]
• Add Proton Pass importer [#11197]
• Support KeePass2 TOTP settings [#11229]
• Add New/Preview Entry Attachments dialog and functionality [#11637, #11699, #11650]
• Add database name, color, and icon options for unlock view [#10819, #11725]
• Show entry background color as column [#6798]
• Use icons for password strength [#9844]
• Add "Group Full Path" column in entry view [#10278]
• Passphrase "MIXED case" Type [#11255]
• Allow deleting extension plugin data from Browser Statistics [#11218]
• Add --minimized option to keepassxc [#11693]
• Implement T-CONV and T-REPLACE-RX entry placeholders [#11453]
• Option to disable opening browser when URL field double-clicked [#11332]
• Overhaul action states and add icons to toolbar [#11047]
• Show character count in password generator dialog [#10940]
• Add ability to expire entries from context menu [#8731]
• Add copy field shortcuts to Auto-Type select dialog [#11518]
• Passkeys: Add support for selecting group on creation [#11260]
• Browser: Refactor Access Control Dialog [#9607]
• Browser: Add support for URL wildcards and exact URL [#9835, #11752]
• Browser: Allow groups to restrict by browser integration key [#9852]
• CLI: Add -d dry-run shortcut to merge command [#11192]
• CLI: HTML export [#11590]
• macOS: Add option to disable database lock when switching user [#9707]
• SSH Agent: Implement feature to clear all identities [#10649]

Fixes

• Major enhancements to documentation [#11745, #10875]
• Various UI and style fixes [#11535, #11672, #11511, #11445, #11426, #11273, #11455, #11321, #11594, #11539, #11351, #11354, #10748, #11602, #11303, #11291, #10091, #9417]
• Various improvements to tags [#11676, #11652, #11625]
• Reset splitter sizes on database unlock [#11014]
• Remember sort order in Auto-type popup dialog [#9508]
• Fix database password clearing when modifying key file / hardware key [#11001]
• Fix issues with reloading and handling of externally modified db file [#10612]
• Support passkeys with Bitwarden import [#11401]
• Fix various quirks with CSV import [#11787]
• Show Auto-Type select dialog even if window title is empty [#11603]
• Refactor hardware key code to avoid deadlock [#11703, #10872]
• Show a clear error if hardware key is found slots are not configured [#11609]
• Fix signal/slot disconnect when opening import wizard [#11039]
• Fix setting window title as modified [#11542]
• Fix assert hit when viewing entry history [#11413]
• Fix multiple crashes on Linux [#11513]
• Fix backup file path time substitution [#10834]
• Prevent long-running threads from deadlocking the program with only 1 CPU [#11155]
• Hide the menubar when menus lose focus (if toggled off) [#11355, #11605]
• CLI: Restore the original codepage on windows [#11470]
• Passkeys: Various fixes [#10934, #10951]
• Browser: Fix cancel with database unlock dialog [#11435]
• Browser: Resolve references in Access Confirm dialog [#11055]
• SSH Agent: Add timeout to streams to prevent deadlock [#11290]
• macOS: Replace legacy code for screen recording permissions [#11428]
• macOS: Implement Secure Input Mode [#11623]
• macOS: Fix showing ambigious name in settings [#11373]
• macOS: Fix copy-to-clipboard shortcut in entry preview widget [#10966]
• Linux: Prevent multiple lock requests [#11306]
• Snap: Prevent need for snap helper script to configure browser extension [#10924]
• Windows: Detect outdated VC Redist with MSI installer [#11469]
• Windows: Additional exclusion fields for clipboard [#11521]

Note: We have received some reports of silent crashing on Windows 10/11 starting with 2.7.9. This is immediately fixed by reinstalling the MSVC Redistributable.

Changes

• Passkeys: Ability to easily remove a passkey from an entry [#10777]
• Snap: Use new desktop portal for native messaging integration [#10906]

Fixes

• Improve entry placeholder/reference feature [#10846]
• Improve CSV importing when title field isn't specified [#10843]
• Improve encrypted Bitwarden importing [#10800]
• Improve database settings UX [#10821]
• Improve handling of clipboard actions from entry preview [#10810]
• Improve group/entry view resize behavior and set sensible defaults [#10641]
• Passkeys: Fix incorrect username fill [#10874]
• Passkeys: Return additional data to the extension [#10857]
• Fix password clear timer inconsistency on unlock view [#10708]
• Fix portability check [#10760]
• Fix page overflow on HTML exports [#10735]
• Fix broken builds when using system provided zxcvbn [#10717]
• Fix copy password button when text is selected [#10853]
• Fix tab ordering on application settings pages [#10907]
• SSH Agent: Fix broken decrypt button [#10638]
• Windows: Fix ALT Auto-Type modifier [#10795]
• Windows: Fix wrong DACL memory size allocation [#10712]
• macOS: Fix monospace font sizing [#10739]
• Flatpak: Fix configuration settings off-by-one error [#10688]
• BSD: Fix compiling with libusb implementation [#10736]

Changes

• Add hotkey for showing search help [#10591]
• Add hotkey for group switching (Ctrl+Shift+PgUp/PgDown) [#10625]
• Add per-database auto-save delay setting [#9100]
• Add configurable password strength check on database password [#9782]
• Add setting to hide menubar [#10341]
• Improve Bitwarden 1PUX import and support organization collections [#10499]
• Show advanced settings checkbox only for settings that have them [#6513]
• Remove obsolete setting for requiring repeated password entry [#9722]
• Passkeys: Allow registering Passkeys to existing entries [#10408]
• Passkeys: Show warning about data being unencrypted before Passkey export [#10411]
• Passkeys: Support NFC and USB transports [#10402]
• Passkeys: Pass extension JSON data to browser [#10615]
• SSH Agent: Do not use entries from recycle bin [#10518]
• Linux: Change hotkey sequence used for {CLEARFIELD} Auto-Type [#10008]
• Windows: Improve DACL memory access protection [#10618]

Fixes

• Fix crash when deleting history items [#10451]
• Fix crash on screen lock or computer sleep [#10458]
• Fix search field not being focused after unlock [#10459]
• Fix loss of window focus when Auto-Type needs to unlock a database [#10555]
• Fix inconsistent TOTP visibility on unlock [#10009]
• Fix CSV import skipping over single-name groups [#10575]
• Fix key file folder being remembered even if disabled in settings [#10636]
• Fix issues with entry editing and database locking [#10667]
• Fix key file text when provided on command line [#10642]
• Fix issues with hardware key auto detection [#10663]
• Do not override monospace font size [#10282]
• Perform group sort only when group view is in focus [#10202]
• Do not show decimals for attachment sizes in Bytes [#10595]
• Prevent merging of global custom data when merging databases [#10452]
• Fix minor translation issues [#10635]
• Passkeys: Fix StrongBox incompatibility [#10420]
• Passkeys: Set RP ID to effective domain if unset instead of returning an error [#10384]
• Passkeys: Various UI fixes and improvements [#10427, #10608, #10609]
• AppImage: Fix URL opening [#10624]
• Flatpak: Fix application autostart [#10563]
• Linux/macOS: Fix button sizes on modal alert popups [#10500]
• Linux: Fix clipboard clear on Wayland [#10500]
• Windows: Preserve file-hidden attribute [#10343]

Changes

• Support USB Hotplug for Hardware Key interface [#10092]
• Support 1PUX and Bitwarden import [#9815]
• Browser: Add support for PassKeys [#8825, #9987, #10318]
• Build System: Move to vcpkg manifest mode [#10088]

Fixes

• Fix multiple TOTP issues [#9874]
• Fix focus loss on save when the editor is not visible anymore [#10075]
• Fix visual when removing entry from history [#9947]
• Fix first entry is not selected when a search is performed [#9868]
• Prevent scrollbars on entry drag/drop [#9747]
• Prevent duplicate characters in "Also choose from" field of password generator [#9803]
• Security: Prevent byte-by-byte and attachment inference side channel attacks [#10266]
• Browser: Fix raising Update Entry messagebox [#9853]
• Browser: Fix bugs when returning credentials [#9136]
• Browser: Fix crash on database open from browser [#9939]
• Browser: Fix support for referenced URL fields [#8788]
• MacOS: Fix crash when changing highlight/accent color [#10348]
• MacOS: Fix TouchID appearance depending on lid open/closed [#10092]
• Windows: Fix terminating KeePassXC processes with MSI installer [#9822]
• FdoSecrets: Fix database merge crash when enabled [#10136]

Note: This is the most recent version of KeePassXC that supports macOS 10.x.

Changes

• Significant improvement to visual when drag/drop entries [#9698]
• Automatically prompt for Quick Unlock when showing unlock dialog [#9697]
• Improve colorful lock icon and fix file MIME icon on KDE [#9632]
• Ability to search by entry UUID [#9571]
• Add challenge-response support for NitroKey 3 [#9631]
• Auto-Type: Disable entry level Auto-Type when disabled at group/entry [#9672]
• Browser: Show warning when adding duplicate URL's to entry [#9588][#9635]
• Browser: Improve error message when proxy cannot be found [#9385]

Fixes

• Fix crash on exit on macOS [#9620]
• Fix crash on search if entry doesn't have a group [#9633]
• Fix several issues with Quick Unlock [#9697]
• Enable save button when not auto-saving non-data changes [#9634]
• Several UI/UX fixes [#9647]
• Move toolbar back to top of window when disabling movement [#9699]
• Browser: Fix handling of expired credentials [#9595]
• Windows: Prevent white flicker when launching application [#9637]
• Linux: Fix warning message about allow screencapture [#9638]
• FdoSecrets: Fix access confirmation dialog showing even when disabled [#9690]

Changes

• Add menu option to allow screenshots [#8841]
• Add support for Botan 3 [#9388]
• Increase max TOTP step to 24 hours [#9149]
• Improve HTML export layout [#8987]
• Turn search reset off by default [#9153]
• Use QClipboard::clear() instead of setting blank text [#9148]
• Hide group column header choice when not in search [#9171]
• Improve look of KeePassXC logo and icons [#9355]
• Add keyboard shortcuts for app and database settings [#9007]
• Hide rename button from attachments preview panel [#8842]
• Linux: Set SingleMainWindow in .desktop file [#7430]

Fixes

• Fix crash when search clears while creating new entry [#9230]
• Fix crash when using Windows Hello in a Remote Desktop session [#9006]
• Fix crash in Group Edit after enabling Browser Integration [#8778]
• Fix canceling quick unlock when it is unavailable [#9034]
• Set password input field font correctly [#8732]
• Greatly improve performance when rendering entry view [#9398]
• Fix various accessibility issues [#9138]
• Fix arrows size when expand/collapse a group [#9096]
• Select the clone instead of the original after cloning an entry [#9070]
• Fix bugs with preview widget [#9170]
• Fix status bar update when switching to other DB [#9073]
• Fix database settings spin box bug [#9101]
• Fix Ctrl+Tab shortcut to cycle databases in unlock dialog [#8839]
• Fix TOTP QR code maintaining square ratio [#9027]
• Fix Auto-Type configuration page on custom sequence selection [#8752]
• Fix unexpected behavior of --lock when KeePassXC is not running [#8889]
• Make open folder icon exempt from "Apply group icon to entry" [#9205]
• Allow setting default file open directory with env var [#9192]
• SSH Agent: Fix support for AES-256/GCM openssh keys [#8968]
• Browser: Fix Native Messaging script path with BSD OS's [#8835]
• MacOS: Fix text selection for Auto-Type clear field [#9066]
• MacOS: Don't rely on AppleInterfaceStyle for theme switching [#8615]
• Windows: Remove registry detection of desktop shortcut [#9380]

Changes

• Add 2 months expiration preset [#8687]
• CLI: Add Unicode support on Windows [#8618]

Fixes

• Fix crash on macOS when unlocking database [#8676]
• Fix display of passwords in preview panel [#8633]
• Fix clicking links in entry preview panel [#8644]
• Prevent expired entries search if no results returned [#8643]
• Browser: Revert code causing connection problems [#8665]
• Browser: Fix socket file symbolic link on Linux [#8656]
• Flatpak: Fix launching browser proxy service [#8680]
• SSH Agent: Fix paegent support on Windows [#8619]

Changes

• Enhance Tags Support and Add Saved Searches [#8435, #8607]
• Significant improvements to entry preview panel [#7993]
• Add password strength indicator to all password fields [#7885]
• Limit zxcvbn entropy estimation length to 128 characters [#7748]
• Try full URL path when fetching favicon [#8565]
• Hide usernames in preview panel when hidden in entry view [#8608]
• Enable dark title bar on windows when accent color is not used [#8498]
• Add option to display passwords in color in preview panel [#7097]
• Add XML Export option to GUI [#8524]
• Increase entropy required for a "good" password rating to 75 [#8523]
• Add shortcut to copy password with TOTP appended [#8443]
• Show entry count in status bar [#8435]
• Allow KeePassXC to be built without X11 [#8147]
• Enable use of VivoKey Apex and Dangerous Things FlexSecure tokens [#8332]
• Add setting for number of recent files [#8239]
• Add Ctrl+Tab shortcut to cycle databases in unlock dialog [#8168]
• Replace offensive words in eff_large.wordlist [#7968]
• Auto-Type: PICKCHARS can specify attribute and ignore BEEP [#8118]
• Linux: Add isHardwareKeySupported and refreshHardwareKeys to DBus methods [#8055]
• Add config variable to specify default database file name [#8042]
• Support numeric aware sorting on Windows and macOS [#8363]
• CLI: Add db-edit command [#8400]
• CLI: Add option to display all attributes with show command [#8256]
• CLI: Show UUID and tags with show and clip commands [#8241]
• Browser: Move socket into separate directory on Linux [#8030]
• Browser: Add group setting to omit WWW subdomain when matching URLs [#7988]
• FdoSecrets: Ask to unlock the database when creating items [#8022, #8028]
• FdoSecrets: Skip entries in recycle bin when searching [#8021]

Fixes

• Fix potential deadlock in UI when saving [#8606]
• Fix newlines when copying notes from preview panel [#8542]
• Fix dark mode detection on Linux [#8477]
• Fix crash when deleting items in recycle bin while searching [#8117]
• Fix crash when trying to close database during unlock [#8144]
• Fix tabbing around the interface [#8435, #8520]
• Fix OPVault import when there are multiple OTP fields [#8436]
• Fix various Windows Hello bugs [#8354]
• Fix use of Apple Watch for Quick Unlock [#8311]
• Better handling of "Lock on Minimize" setting [#8202]
• Check for write permission before entering portable mode [#8447]
• Correct regex escape logic to prevent parse errors [#7778]
• Normalize slashes and file case for last used databases [#7864, #7214]
• Link ykcore against pthread [#7807]
• Auto-Type: Fix menu entries in selection dialog on Windows [#7987]
• Auto-Type: Fix use of modifiers under macOS [#8111]
• CLI: Fix output when using clip with the -t flag [#8271]
• Browser: Use asynchronous access confirm dialog [#8273]
• Browser: Always send database locked/unlocked status [#8114]