In this article we will talk about KeePassXC, a simple multi-platform open source software that uses a local file as a database.

These tools are very interesting and suitable for a cloud installation. If the page URL changes, or the tab is switched to another, all login info is cleared.īy default, sites with just a single username fields are not handled by default because there's no standard way to identify a plain username field from a general search field etc.A previous article discussed password management tools that use server-side technology. Login and password information is never written elsewhere, and is only stored briefly in the extension's memory (which the web page cannot access). Only after this the actual filling happens. This combination is then tied to the form that includes the input fields. When valid input fields are recognized they are handled as a 'combination' which can include an username field, a password field, or both. Even after this you'll have to separately allow or deny access to each login information you have.Īs some more technical info, any input field on a web page that is hidden by code, too small or not visible are ignored. KeePassXC must be opened and the extension must be connected to your database before the extension has any access to your credentials. There's no dialog or field that ever asks your master password, so you don't write it to your browser at all.

If you are concerned if your master password is exposed in any way, it isn't even used. By default, the extension suggests using an user interaction when filling anything.

In the case of KeePassXC's browser extension, the highest chance to get your credentials exposed is to use auto-fill.

Keepassxc browser extension