It's been audited many times without any glaring issues found. It's fully open source so it can be audited. I'd advise against using this feature because it defeats the purpose of MFA KeePassXC also has support for TOTP so it can generate one time passcodes for you My other favourite KeePass feature is the auto type sequences that you can program, so if a site requires a string here, then a tab, then the password, then another tab then enter, you can make KeePass do that for you If someone managed to get my KeePass password, they'd still have to get my KeePass database file before they could do anything with itĬompare that to LastPass, hosted Bitwarden or 1Password where all of them are online, so if an attacker got your email and password, they're in KeePass is truly offline so there's no online web facing front end for an attacker to use 
Personal bias: I've been using KeePass since about 2015
KeePassXC is a cross platform fork of KeePass, but for all intents and purposes, they're extremely similar
0 kommentar(er)
