13eb1c0bbd
To reduce residual fragments of secret data in memory after deallocation, this patch replaces the global delete operator with a version that zeros out previously allocated memory. It makes use of the new C++14 sized deallocation, but provides an unsized fallback with platform-specific size deductions. This change is only a minor mitigation and cannot protect against buffer reallocations by the operating system or non-C++ libraries. Thus, we still cannot guarantee all memory to be wiped after free. As a further improvement, this patch uses libgcrypt and libsodium to write long-lived master key component hashes into a secure memory area and wipe it afterwards. The patch also fixes compiler flags not being set properly on macOS. |
||
|---|---|---|
| .github | ||
| .tx | ||
| ci/trusty | ||
| cmake | ||
| docs | ||
| share | ||
| src | ||
| tests | ||
| utils | ||
| .clang-format | ||
| .gitattributes | ||
| .gitignore | ||
| CHANGELOG | ||
| CMakeLists.txt | ||
| COPYING | ||
| Dockerfile | ||
| INSTALL.md | ||
| LICENSE.BOOST-1.0 | ||
| LICENSE.BSD | ||
| LICENSE.CC0 | ||
| LICENSE.GPL-2 | ||
| LICENSE.GPL-3 | ||
| LICENSE.LGPL-2.1 | ||
| LICENSE.LGPL-3 | ||
| LICENSE.MIT | ||
| LICENSE.NOKIA-LGPL-EXCEPTION | ||
| README.md | ||
| release-tool | ||
| snapcraft.yaml | ||
| sonar-project.properties | ||
KeePassXC
About KeePassXC
KeePassXC is a cross-platform community fork of KeePassX. Our goal is to extend and improve it with new features and bugfixes to provide a feature-rich, fully cross-platform and modern open-source password manager.
Installation
The KeePassXC QuickStart gets you started using KeePassXC on your Windows, Mac, or Linux computer using pre-compiled binaries from the downloads page.
Additionally, individual Linux distributions may ship their own versions, so please check out your distribution's package list to see if KeePassXC is available.
Additional features compared to KeePassX
- Auto-Type on all three major platforms (Linux, Windows, macOS)
- Twofish encryption
- YubiKey challenge-response support
- TOTP generation
- CSV import
- Command line interface
- DEP and ASLR hardening
- Stand-alone password and passphrase generator
- Password strength meter
- Using website favicons as entry icons
- Merging of databases
- Automatic reload when the database changed on disk
- Browser integration with KeePassXC-Browser using native messaging for Mozilla Firefox and Google Chrome, Chromium, Vivaldi, or Brave
- Synchronize passwords using KeeShare. See Using Sharing for more details.
- Many bug fixes
For a full list of features and changes, read the CHANGELOG document.
Building KeePassXC
Detailed instructions are available in the Build and Install page or on the Wiki page.
Contributing
We are always looking for suggestions how to improve our application. If you find any bugs or have an idea for a new feature, please let us know by opening a report in our issue tracker on GitHub or join us on IRC on freenode channels #keepassxc or #keepassxc-dev.
You can of course also directly contribute your own code. We are happy to accept your pull requests.
Please read the CONTRIBUTING document for further information.
License
GPL-2 or GPL-3