Arviot lisäosalle KeePassXC-Browser
KeePassXC-Browser tekijä KeePassXC Team
Käyttäjän aWalker kirjoittama arvio
Arvioitu 2/5
kirjoittanut aWalker, kuusi vuotta sittenIt's really a convenience to use this add-on with KeePassXC. But, there been an issue that has been raised several months back :
In my case
Firefox 83
KeePassXC-Browser 1.7.3
Ubuntu 20.04 LTS
`keepassxc-proxy` makes tcp connections to remote servers over internet & transfers data(with 36+ KB/s speed) without user permission under Linux root privileges.
tcp 0 0 192.168.42.245:52470 117.18.237.29:80 ESTABLISHED 20559/keepassxc-pro
tcp 0 392 192.168.42.245:34738 209.216.230.240:443 ESTABLISHED 20225/keepassxc-pro
tcp 1 0 192.168.42.245:49194 172.67.146.206:443 CLOSE_WAIT 20225/keepassxc-pro
tcp 1 0 192.168.42.245:53060 104.20.214.50:443 CLOSE_WAIT 20225/keepassxc-pro
tcp 1 0 192.168.42.245:60362 172.67.153.104:443 CLOSE_WAIT 20225/keepassxc-pro
tcp 25 0 192.168.42.245:39074 151.101.113.137:443 CLOSE_WAIT 20225/keepassxc-pro
tcp 7890 0 192.168.42.245:34738 209.216.230.240:443 CLOSE_WAIT 20225/keepassxc-pro
simple ip2location domain :
104.20.214.50 .... CloudFlare Inc.
117.18.237.29 .... edgecast.com
151.101.113.137 .. fastly.com
172.67.146.206 ... CloudFlare Inc.
172.67.153.104 ... CloudFlare Inc.
209.216.230.240 .. M5 Computer Security
I tried several times, had to lock password-DB out of fear.
This bug/issue is not addressed by Firefox, claim KeePassXC team on their issue-tracker-logs.
I'm in a limbo, is Firefox breaching user privacy without their knowledge; what data is being transferred to remote servers by keepassxc-proxy?
Should I abandon Firefox; isn't it the most secure (or configurable) browser out there?
Should I change passwords of hundreds of accounts now?
I'm using AutoTyping where ever it's possible & often wished they had auto-type separately for Username & Password; you know for pages like firefox or google account logins.
cheers
In my case
Firefox 83
KeePassXC-Browser 1.7.3
Ubuntu 20.04 LTS
`keepassxc-proxy` makes tcp connections to remote servers over internet & transfers data(with 36+ KB/s speed) without user permission under Linux root privileges.
tcp 0 0 192.168.42.245:52470 117.18.237.29:80 ESTABLISHED 20559/keepassxc-pro
tcp 0 392 192.168.42.245:34738 209.216.230.240:443 ESTABLISHED 20225/keepassxc-pro
tcp 1 0 192.168.42.245:49194 172.67.146.206:443 CLOSE_WAIT 20225/keepassxc-pro
tcp 1 0 192.168.42.245:53060 104.20.214.50:443 CLOSE_WAIT 20225/keepassxc-pro
tcp 1 0 192.168.42.245:60362 172.67.153.104:443 CLOSE_WAIT 20225/keepassxc-pro
tcp 25 0 192.168.42.245:39074 151.101.113.137:443 CLOSE_WAIT 20225/keepassxc-pro
tcp 7890 0 192.168.42.245:34738 209.216.230.240:443 CLOSE_WAIT 20225/keepassxc-pro
simple ip2location domain :
104.20.214.50 .... CloudFlare Inc.
117.18.237.29 .... edgecast.com
151.101.113.137 .. fastly.com
172.67.146.206 ... CloudFlare Inc.
172.67.153.104 ... CloudFlare Inc.
209.216.230.240 .. M5 Computer Security
I tried several times, had to lock password-DB out of fear.
This bug/issue is not addressed by Firefox, claim KeePassXC team on their issue-tracker-logs.
I'm in a limbo, is Firefox breaching user privacy without their knowledge; what data is being transferred to remote servers by keepassxc-proxy?
Should I abandon Firefox; isn't it the most secure (or configurable) browser out there?
Should I change passwords of hundreds of accounts now?
I'm using AutoTyping where ever it's possible & often wished they had auto-type separately for Username & Password; you know for pages like firefox or google account logins.
cheers
Kehittäjän vastaus
lähetetty kuusi vuotta sittenThis is not the first time the issues rises its head from the depths.
Here's the KeePassXC-Browser issue: https://github.com/keepassxreboot/keepassxc-browser/issues/100
And here's the Mozilla one: https://bugzilla.mozilla.org/show_bug.cgi?id=1463873
Again: this is a Firefox bug. If you look the connections keepassxc-proxy makes with Chromium-based browsers, you'll see none.
And to clarify: keepassxc-proxy does not make any connections. These are file descriptors that are leaking from the parent process (Firefox).
Here's the KeePassXC-Browser issue: https://github.com/keepassxreboot/keepassxc-browser/issues/100
And here's the Mozilla one: https://bugzilla.mozilla.org/show_bug.cgi?id=1463873
Again: this is a Firefox bug. If you look the connections keepassxc-proxy makes with Chromium-based browsers, you'll see none.
And to clarify: keepassxc-proxy does not make any connections. These are file descriptors that are leaking from the parent process (Firefox).
759 arviota
- Arvioitu 1/5kirjoittanut Frank, kolme päivää sittenUseless. No connection to the database. KeePass 2 only needs a key/pair setup, but KeePassXC requires hours of troubleshooting and tons of tutorials just to get it working. I went back to KeePass 2.
Kehittäjän vastaus
lähetetty päivä sittenThat is what this extension also does. If something does not work directly, it's usually something with your system. And that is why the troubleshooting guide exists. - Arvioitu 1/5kirjoittanut Firefox-käyttäjä 12580101, neljä päivää sittenI couldn't get it to work. I wasted a lot of time in trying. I have a lot of experience with programming and windows. I've used keepass since 1.0 or earlier and was trying to move off 2.0 because it cannot identify window titles in win11 wild cards or not and has quirks on opning from the toolbar. But neither can this. In fact it shows the same operational failures as 2.0. I did not test toolbar with xc. Obviously some have gotten it to work but it appears the list of those that cannot get it to work is growing. Back to 2.0 for me. There is no way in this world the average user can use this extension or xc.
- Arvioitu 5/5kirjoittanut dev421, 14 päivää sittenSupports everything you'd expect - TOTP, passkeys, auto-saving credentials, SSH agent. The Free Man's Choice since 2012
- Arvioitu 5/5kirjoittanut hinoki, kuukausi sitten
- Arvioitu 1/5kirjoittanut Richard, kuukausi sittenI really love Keepass and have used it for years. I really wish that there was a way to link/connect it to a web browser. So far I have not found any working method to get passwords out of keepass other than copy/pasting from the program apart from on an iPhone.
Kehittäjän vastaus
lähetetty kuukausi sittenThere are two ways you can get credentials out from KeePassXC: using the browser extension, or using Auto-Type. Please refer to our documention for guides: https://keepassxc.org/docs/ - Arvioitu 5/5kirjoittanut Blood-Art, kuukausi sitten
- Arvioitu 3/5kirjoittanut sonofevil, kaksi kuukautta sitten"Error! Credentials cannot be saved or updated to a closed database."
Then open it. Prompt me for the database password. Why can the DB be opened on demand to retrieve passwords, but not to save them? I should not be expected to keep my database open all the time. That is an obvious security vulnerability. So I have it configured to close after 30 seconds. I do not understand why this Addon is so hostile to on-demand database access.Kehittäjän vastaus
lähetetty kaksi kuukautta sittenAlready requested: https://github.com/keepassxreboot/keepassxc-browser/issues/1541 - Arvioitu 5/5kirjoittanut Firefox-käyttäjä 19944620, kaksi kuukautta sitten
- Arvioitu 1/5kirjoittanut Firefox-käyttäjä 13120063, kaksi kuukautta sittenWill not work with current version of Firefox and Ubuntu 25.04. I have used this for years. Sad to see Mozilla can not keep up.
Kehittäjän vastaus
lähetetty kaksi kuukautta sittenJust ditch the Snap version of Firefox and everything works. - Arvioitu 5/5kirjoittanut Firefox-käyttäjä 13527928, kaksi kuukautta sitten
- Arvioitu 2/5kirjoittanut chasearoon, kaksi kuukautta sitten
- Arvioitu 5/5kirjoittanut evtldocha, kolme kuukautta sittenThanks for this extension!
One remark: though firefox now honors XDG config settings in $HOME/.config/mozilla/firefox (on Linux) the extension creates a $HOME/.mozilla/native-messaging-hosts. I'd like so see all config for an application on one single place only. - Arvioitu 5/5kirjoittanut Firefox-käyttäjä 12539057, kolme kuukautta sitten
- Arvioitu 5/5kirjoittanut pocoloco, kolme kuukautta sittenGreat plugin for my favorite password safe.
- Arvioitu 4/5kirjoittanut RD, kolme kuukautta sittenThe add-on doesn't work in the Flatpak browser. Otherwise, I like KeePassXC :)
Kehittäjän vastaus
lähetetty kolme kuukautta sittenActually there's already pull requests made for a websocket connection mode in both extension and KeePassXC. It works with Flatpak browsers. So it's coming :) - Arvioitu 5/5kirjoittanut Matthieu, kolme kuukautta sitten
- Arvioitu 1/5kirjoittanut Abdiel, kolme kuukautta sittenIt only has offline support. On Linux the configuration is a mess. Sometimes It doesn't talk with my desktop app. Remote support should also be added, so 1 star. I also noticed this while using it: not everything is handled within the browser. When the master password is requested, It switches to the KeepassXC desktop window which makes the experience less convenient. MasterPassword could instead be entered through a small pop-up inside the browser. This is what I would have preferred.
Kehittäjän vastaus
lähetetty kolme kuukautta sittenThe whole idea of the extension is that it talks to the desktop app. It has no direct connection to your database, and it will never ask your master password. - Arvioitu 5/5kirjoittanut toorootoot, kolme kuukautta sitten
- Arvioitu 5/5kirjoittanut Mark Andrew Gerads, neljä kuukautta sitten
- Arvioitu 5/5kirjoittanut SilverAmd, neljä kuukautta sitten
- Arvioitu 5/5kirjoittanut Firefox-käyttäjä 19902880, neljä kuukautta sitten
- Arvioitu 5/5kirjoittanut Craig, neljä kuukautta sitten
- Arvioitu 5/5kirjoittanut Firefox-käyttäjä 19882925, neljä kuukautta sitten
- Arvioitu 5/5kirjoittanut goqqtw, viisi kuukautta sitten
- Arvioitu 1/5kirjoittanut Firefox-käyttäjä 14868755, viisi kuukautta sittenNot able to add connected database. Nothing happens when clicking the Connect Database button. Bazzite 43 (linux) NVIDIA edition, Firefox 149, KeePassXC 2.7.12