Re:KeePassXC – Cross-Platform Password Manager
by skipnup on Friday February 18, 2022 @05:01AM
(#30383951)
If I'm not mistaken you can set KeePass (and KPXC) to show a confirmation popup before the browser extension can access a password for a website. But I haven't used this function so I'm not 100% sure.
agreed. keepassxc has much more padding/whitespace than keepass.
>Furthermore, browser integration actually wouldn't be something i want - i'd prefer to keep those pieces of software as far from one another as possible.
I'm mixed on browser integration. On one hand it's more convenient and can potentially be more secure (can protect against phishing attacks because it can check the url for you). On the other hand, having a direct link to your entire password vault is a massive attack surface. The ideal implementation for me would be an addon that can auto-fill credentials, but require explicit approval from the app to fill anything. To my knowledge no such implementation exists.
>Though using the OS clipboard could also be problematic, of course, which is my current approach when i want to log into a site.
Keepass has auto-type, which works around this.