You're viewing the discuss.systems public feed.

Federated feed Local feed

Team KeePassXCkeepassxc@fosstodon.org
Dec 9, 2025, 8:49 PM
Earlier this year, the German BSI together with the Consumer Advice Centre NRW performed a review of 10 popular password managers. What can we say? We're happy to be one of only few to receive a very positive review without major security concerns. 🥳 We're also mentioned explicitly for being particularly privacy-friendly.
The full report (in German) can be found at https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Publikationen/DVS-Berichte/passwortmanager_sicherheit_datenschutz.html and https://www.verbraucherzentrale.nrw/wissen/digitale-welt/apps-und-software/10-passwortmanager-im-vergleich-113439
💬 9🔄 6⭐ 0

Replies

Team KeePassXCkeepassxc@fosstodon.org
Dec 9, 2025, 8:59 PM
Based on early feedback provided from the BSI (and similar requests in the past), KeePassXC version 2.7.11 (released two weeks ago) changed the default auto-lock setting after inactivity to "on" with a timeout of 15 minutes. Go to Settings -> Security in case you want to restore the previous behaviour.
💬 2🔄 1⭐ 3
Alansourcejedi@mastodon.social
Dec 9, 2025, 10:54 PM
@keepassxc
Good feedback IMO! Thanks, saves me changing it each time I install :-).
💬 1🔄 0⭐ 0
Team KeePassXCkeepassxc@fosstodon.org
Dec 10, 2025, 8:41 AM
@sourcejedi Funny. We also got exactly the opposite feedback. ^^
💬 0🔄 0⭐ 0
Nabornabor@troet.cafe
Dec 9, 2025, 10:59 PM
@keepassxc Yeah, that was exactly my problem since the release, and I kept wondering why on earth I had to unlock the DB again and again.
I then found the setting and turned it off.
Good solution, but I don't like this.
The DB can remain unlocked as long as I'm working on the device, and when I walk away, I lock the device and the DB is locked.
💬 0🔄 1⭐ 0
Helga Numberger 🐧HNumberger@mastodon.social
Dec 9, 2025, 9:28 PM
@keepassxc Well deserved! Congrats!
💬 0🔄 0⭐ 0
Mad Alexmadalex@fosstodon.org
Dec 9, 2025, 9:36 PM
@keepassxc The review doesn't provide any criteria based on which the password managers were chosen to be reviewed, it only states.
💬 0🔄 0⭐ 0
cosmictioncosmiction@mastodon.social
Dec 9, 2025, 10:12 PM
@keepassxc
They state that "Wenige Anbieter (z.B. 1Password, SecureSafe, Avira) nutzen Daten... zu Marketingzwecken...
1Password ist der einzige unter den geprüften Passwortmanagern, der nur kostenpflichtig nutzbar ist und laut den Datenschutzhinweisen zusätzlich personenbezogene Daten auch für Marketingzwecke nutzt."
Which is interesting, I wonder why 1Password a paid service would use users personal data for marketing purposes.
💬 0🔄 0⭐ 0
grmongrmon@chaos.social
Dec 9, 2025, 10:50 PM
@keepassxc aren’t you the one adding ai?
💬 0🔄 0⭐ 0
Serge Matveenko ♻️☮️ Ⓐlig@fosstodon.org
Dec 10, 2025, 6:59 AM
@keepassxc
There's no Bitwarden in the list. One of the few it is.
💬 0🔄 0⭐ 0
Thoralf Will 🇺🇦🇹🇼thoralf@soc.umrath.net
Dec 14, 2025, 5:53 AM
@keepassxc The test is flawed because the password managers where chosen randomly.
It makes no sense to exclude widely used solutions like Bitwarden.
It is great that you good good marks.
Sadly, the results are meaningless if large parts of the competition were excluded.
💬 0🔄 0⭐ 0