Opinions about keypassXC

igorzwx · 2025-09-04 19:38:08

Sorry, I forgot that jokes can be censored.

golinux · 2025-09-04 20:00:08

And you have the right to your opinion even though it is not aligned with reality. Excess and lack of ability to moderate behavior is the problem.

igorzwx · 2025-09-04 20:09:01

Have you already compiled keypassXC?

kapqa · 2025-09-04 20:19:33

i use it with yubiky and like it quite a lot < may not be securest, but helps to concentrate passwords in one place.

igorzwx · 2025-09-05 01:11:34

Yubikeys are vulnerable to cloning attacks
_https://twit.tv/posts/transcripts/security-now-991-transcript
Security Now 991
RAMBO
Hosted by Steve Gibson, Mikah Sargent
Cloned YubiKeys, Telegram vs. Signal, French Elevators, Unix Time
_https://twit.tv/shows/security-now/episodes/991

zapper · 2025-09-05 03:49:32

@kappa nitrokey is better then yubikey according to what I have heard. Its completely open source or if you prefer libre.

EDX-0 · 2025-09-05 04:39:15

ffp wrote:

I use keepassxc-minimal.
I don't need the networking, browser integration, ssh agent, freedesktop.org secret storage features and it serves my needs well enough.
Should I be concerned about anything?

well, nothing to be concerned today, nor tomorrow nor in a year, probably nothing to be concerned even in 2 debian stable release cycles, however in the long run it is better to rely on software with an opt-in feature model than software that needs to be built and packaged with opt-out features like any *-minimal package, hence why i gave an idea of how to tackle it for the long term with multiple programs and libraries that are designed to be composable into a full fledged feature-set but every component is opt-in and intended to be different packages, i may eventually start cobbling the programs but expect nothing this year nor the next...

kapqa · 2025-09-05 07:58:04

my primarey key it tokentoo , it cost only fraction of yubiky, but cannot be used yet for keepassxc; there is another one supposed by good, but it is not easily available in europe, onlyky.

EDIT: it seems the onlyky is now also available through store in 'ol europe, but maybe won't probabyly function with keepasxc. but maybe there are some other function that other key don't have onbarod.

EDIT2- thanks, will look into/~~maybe try the~~ nitroky, ~~reads promising~~! ,but i dislike to NFC ont eh ky.

Last edited by kapqa (2025-09-05 08:54:45)

ffp · 2025-09-05 14:57:02

In the long run it is better to rely on software with an opt-in feature model than software that needs to be built and packaged with opt-out features like any *-minimal package

I agree here completely and I tend to prefer software that solves one problem well and doesn't come with a plethora of features I don't need.
Sometimes though, it's hard to find good alternatives and I think the situation will inevitably get even worse in time.

greenjeans · 2025-09-05 15:29:21

Sorry, I forgot that jokes can be censored.

Context can be difficult on the internet, perhaps if you had included like the winking smiley it might have indicated you were joking.

Do you know to use smilies?

greenjeans · 2025-09-05 15:30:17

A piece of paper and a pen. <<greenjeans password managing system

zapper · 2025-09-06 18:39:51

@kapqa nitrokey is the best at the moment. completely open development. Not proprietary at all.

kapqa · 2025-09-07 09:28:37

@zappa, thanks, looked again, the 3a mini is sans-nfc, maybe the one for me.

but i like the numpad on the onlyky, "looks" useful.

found that even with passkey it often needs another verification with 2fa, like on ebay, so you still need another device at hand.

maybe such one could help
https://www.token2.com/shop/product/mol … ware-token

EDX-0 · 2025-09-15 01:11:16

eh offtopic but not more offtopic than many of the other posts

greenjeans wrote:

^^Lol, "autohell"

https://felipec.wordpress.com/2024/04/0 … -insanity/

autohell truly is the piece of software that keeps on giving, because simple makefiles are poison i guess...

zapper · 2025-09-16 02:06:06

@EDX-0

and cmake isn't bloated as hell?

Idk... man.

EDX-0 · 2025-09-16 02:11:55

cmake is just as bad as autohell, meson is okay so is ninja, simple makefiles are still the best way, if you need a configure.sh script just build one yourself instead of letting autohell to spit out half a morbillion lines of highly obfuscated shell slop.

zapper · 2025-09-16 05:01:27

@EDX-0 Well I don't know much about autotools, but if you say cmake and autotools are both bloated, I can buy that thought process. Linux land is going towards bloat... so yeah

igorzwx · 2025-09-16 12:35:33

Perhaps, you failed to compile something with CMake. Was it keypassXC ?

Is it about sour grapes?
_https://read.gov/aesop/005.html

Last edited by igorzwx (2025-09-16 13:15:40)

Calamity · 2025-10-07 18:47:45

I was using KeePassX and KeePass2 before, did not care for XC at all but now I found a very nice alternative called QtPass.

It uses GPG for encryption and doesn't have bells & whistles like autotype, attachments etc. - just a password generator, hierarchical storage and customizable extra fields. May be worth checking out if you're looking for this kind of simplicity.

pcalvert · 2026-02-20 22:54:23

Altoid wrote:

As you may have read in this thread, installing keypassXC requires network access by default.
If you want keypassXC without any networking code, you have to compile it yourself.

ffp asked about keepassxc-minimal.

Quote:

“This package includes only the bare minimal functionality, and no security complications like networking, SSH agent, browser plugin, fdo secret storage. See keepassxc-full if you absolutely need those.”

greenjeans · Yesterday 02:07:53

ffp asked about keepassxc-minimal.
Quote:
“This package includes only the bare minimal functionality, and no security complications like networking, SSH agent, browser plugin, fdo secret storage. See keepassxc-full if you absolutely need those.”

Lol, in 29 mb, I just made something that does most of the same in 40 kb.

Last edited by greenjeans (Yesterday 02:08:04)

steve_v · Yesterday 05:00:58

in 29 mb

The application is 4.1MiB, the rest is non-code assets such as icons, translations and documentation.

in 40 kb

Plus libsodium to do most of the difficult things a password manager needs (i.e. robust encryption), which is more than 10x that size on it's own. Not to mention whatever GUI toolkit you're using, (which I can't be arsed looking into because it's probably GTbarf) and all the translations and documentation you haven't written.

If you want to poke fun at other developers and brag about how much smaller your stuff is, at least try not to be gratuitously disingenuous.

zapper · Yesterday 10:11:18

@greenjeans does keepassxc minimal still require dbus?

greenjeans · Yesterday 15:05:35

If you want to poke fun at other developers and brag about how much smaller your stuff is, at least try not to be gratuitously disingenuous.

I wasn't poking fun at anyone, but yes I was bragging about my little scriptlet, and incredibly enough I am aware of dependencies (shocker huh?), which is why I know the program mentioned ALSO HAS DEPENDS, so yeah it's even larger than 29 mb which is what the package is listed at for installed size.

But sure, if you pull the cruft you mentioned out (which my app doesn't have or need), then maybe there is 4 mb of actual code. That's still 100 times larger than my little experiment. I'm sure it has some extra lovely features though that might be very handy.

What I made does the basic main task such things should do, it's tiny so there's a lot less to go wrong and it's easy to audit, and a good solid base if someone wanted to expand on it.

And damn, really toolkit bullshit?? Every gui program uses one toolkit or another, so that comment was nonsense. And no i'm not shoving all that QT crap into my system, GTK has issues but QT sucks too.

And wtf? You're on here usually giving people shit for complaining instead of doing something about it. And here I am trying to do something about it and you're giving me misery too?

Hell, you're probably right, I don't know why I bother. Maybe time for another break from linux for me.

Last edited by greenjeans (Yesterday 15:06:46)

Andre4freedom · Yesterday 17:51:44

@greenjeans
you are a very valued member of that community and I (and surely many others) appreciate what you do. Bravo.
Please don't let you intimidate by ranters and those who like to play the judge to chide others.
You are a contributor, thank you.
Do the same as I do to get the nerves calm again: play music. You the guitar, I play the piano. Sweet melodies!

The officially official Devuan Forum!

#26 2025-09-04 19:38:08

Re: Opinions about keypassXC

#27 2025-09-04 20:00:08

Re: Opinions about keypassXC

#28 2025-09-04 20:09:01

Re: Opinions about keypassXC

#29 2025-09-04 20:19:33

Re: Opinions about keypassXC

#30 2025-09-05 01:11:34

Re: Opinions about keypassXC

#31 2025-09-05 03:49:32

Re: Opinions about keypassXC

#32 2025-09-05 04:39:15

Re: Opinions about keypassXC

#33 2025-09-05 07:58:04

Re: Opinions about keypassXC

#34 2025-09-05 14:57:02

Re: Opinions about keypassXC

#35 2025-09-05 15:29:21

Re: Opinions about keypassXC

#36 2025-09-05 15:30:17

Re: Opinions about keypassXC

#37 2025-09-06 18:39:51

Re: Opinions about keypassXC

#38 2025-09-07 09:28:37

Re: Opinions about keypassXC

#39 2025-09-15 01:11:16

Re: Opinions about keypassXC

#40 2025-09-16 02:06:06

Re: Opinions about keypassXC

#41 2025-09-16 02:11:55

Re: Opinions about keypassXC

#42 2025-09-16 05:01:27

Re: Opinions about keypassXC

#43 2025-09-16 12:35:33

Re: Opinions about keypassXC

#44 2025-10-07 18:47:45

Re: Opinions about keypassXC

#45 2026-02-20 22:54:23

Re: Opinions about keypassXC

#46 Yesterday 02:07:53

Re: Opinions about keypassXC

#47 Yesterday 05:00:58

Re: Opinions about keypassXC

#48 Yesterday 10:11:18

Re: Opinions about keypassXC

#49 Yesterday 15:05:35

Re: Opinions about keypassXC

#50 Yesterday 17:51:44

Re: Opinions about keypassXC

Board footer