Team KeePassXCkeepassxc@fosstodon.org
Mar 27, 2026, 6:33 PMThe website is asking for your email address to access the downloads. We never ask for your email address. Do not enter your data there, it's a phishing attempt.
Replies
Ericeroc1990@mastodon.parastor.netMar 27, 2026, 7:08 PM@keepassxc
Methinks you should go buy as many typosquat domains as are available before copycats get to them.- Team KeePassXCkeepassxc@fosstodon.orgMar 27, 2026, 7:11 PM
@eroc1990 We own several already, but it's a losing game and a pretty expensive one at that.
Daviddreua@hachyderm.ioMar 27, 2026, 8:10 PM@keepassxc @eroc1990
Yeah, that sounds like Whac-a-mole.Anything else that can be done about it?
I just reported it to DuckDuckgo, it is the third result for "keepass xc" there currently -.-
- Team KeePassXCkeepassxc@fosstodon.orgMar 27, 2026, 8:55 PM
Od-Nan Kenobiodnankenobi@fosstodon.orgApr 11, 2026, 8:25 PM@keepassxc @dreua @eroc1990 how costly is it to have a registered trademark? I imagine there are other benefits that might make it worth it depending on the cost.
Might be the only somewhat reliable way of leveraging official mechanisms to take down copycats and scam attempts- Team KeePassXCkeepassxc@fosstodon.orgApr 12, 2026, 5:54 PM
@odnankenobi @dreua @eroc1990 trademarks do not automatically protect anything. The owner is required to pursue legal action to protect the mark. That costs... a LOT of money.
- Insignificant Nagusinsignificant_nagus@mastodon.socialMar 28, 2026, 9:05 AM
I installed keepassxc yesterday in a hurry, normally I do pay a lot of attention to the URL, in hindsight not so sure...
So if I didn't have to enter an email, I should have chosen the right one? Or at least let's say, not this particular one?
Is the download malware that leaks the pw datatbase in plain text? Is the signature known to av programs? 
mikeTesteLinuxQlubmikeTesteLinuxQlub@qlub.socialMay 14, 2026, 5:26 PM@keepassxc Only trust repo from my distro now 😂