KeePassXC is a modern, secure, and open-source password manager that stores and manages your most sensitive information. You can run KeePassXC on Windows, macOS, and Linux systems. KeePassXC is for people with extremely high demands of secure personal data management. It saves many different types of information, such as usernames, passwords, URLs, attachments, and notes in an offline, encrypted file that can be stored in any location, including private and public cloud solutions. For easy identification and management, user-defined titles and icons can be specified for entries. In addition, entries are sorted into customizable groups. An integrated search function allows you to use advanced patterns to easily find any entry in your database. A customizable, fast, and easy-to-use password generator utility allows you to create passwords with any combination of characters or easy to remember passphrases.
What's new in 2.8.0
New Features - Add remote database synchronization and import using external tools [#7222, #10896, #11271] - Allow configuring keyboard shortcuts [#9643] - SSH Agent: Add support for generating RSA, ECDSA, and Ed25519 keys [#7215] - Linux: Add Wayland Auto-Type support using XDG Desktop Portals [#13359, #13449, #13579, #13770, #13810] - Linux: Add Quick Unlock using Polkit (adds a UUID to public metadata, marking database as modified on first launch) [#8983] - Linux Add AArch64 AppImage [#13816] - macOS: Allow Quick Unlock using the device password when Touch ID is unavailable [#11410] - Windows: Allow administrators to enforce certain user settings via global Group Policy overrides [#11223] - Windows: Add native Arm64 builds [#13678, #13727] Major Changes - Migrate to Qt 6 [#11651, #7783, #13456, #13473, #13684, #13784] - Linux: Store application state in XDG_STATE_HOME instead of XDG_CACHE_HOME [#9755] - Build: Bundle build features under a single KPXC_MINIMAL CMake option [#11003] Security Fixes - Fix use-after-free when importing crafted KDB files (CVE-2026-69150; Credits: A. Ramos (@aramosf)) [#13500] - Browser: Prevent entry reference injection when creating or updating entries via browser extension (CVE-PENDING; Credits: Davonte (@BadPingHere)) [#13580, #13670, #13688] - Browser: Fix out-of-bounds writes when encrypting and decrypting native messaging messages (CVE-PENDING; Credits: @sigure21) [#13679] - Windows: Randomize shared memory mapping names when sending SSH keys to Pageant (CVE-PENDING; Credits: NATO Cyber Security Centre (NCSC), Viktor Markopoulos NCIA/NCSC) [#13680] - Fix integer overflow and out-of-bounds read in legacy KDB importer (CVE-PENDING; Credits: NATO Cyber Security Centre (NCSC), Viktor Markopoulos NCIA/NCSC) [#13682] - Secret Service: Exclude protected attributes from attribute listings (Credits: Koda Reef (@kodareef5)) [#13674] - Windows: Fix clipboard exclusion format name (Credits: @ByeWhiteLists) [#13352] - Improve clearing of decrypted database fragments from memory used by zlib [#13677] Changes - Change Clone Entry shortcut to Ctrl+D [#10903] - Show suggestions when adding or renaming additional attributes [#13633] - Add passkey and TOTP entry counts to database statistics in GUI and CLI [#13632] - Remove legacy KeePassHTTP attribute conversion [#8007] - Browser: Support get-database-entries request to list entry titles, URLs, and UUIDs [#7292] …
