AfterDawn | News | Guides | Software downloads | Tech Support | Forums | HIGH.FI
AfterDawn

Version history for KeePass (Portable)

<<Back to software description

Changes for v2.41 - v2.42.1

  • Improved menu item state updating.
  • Improved backward compatibility with certain plugins.
  • Minor other improvements.
  • New Features:
  • Added main menu items 'Group', 'Entry' and 'Find', which contain all commands related to groups and entries (supersets of context menus); removed 'Edit' main menu item, because all of its commands are included in the three new main menu items.
  • Added support for a system-wide hot key to auto-type only the password of a matching entry; by default, the hot key is Ctrl+Alt+Shift+A, changeable in the options dialog.
  • When double-clicking the URL cell of an entry in the main entry list while holding down the Shift key, KeePass now copies the URL to the clipboard (a double-click without Shift continues to open the URL; the option 'Copy URLs to clipboard instead of opening them' reverses this behavior).
  • Added quick edit commands 'Expires: Now' and 'Expires: Never'.
  • There now are two commands for copying a whole entry to the clipboard: 'Copy Entry (Encrypted)' and 'Copy Entry (Unencrypted)'; the first one encrypts the data for the current user using the Windows DPAPI.
  • Added Ctrl+Shift+P shortcut for printing the currently selected group.
  • The creation time and the last modification time of an entry are now displayed on the 'History' tab of the entry editing dialog.
  • Added support for importing Steganos Password Manager 20 CSV files.
  • Added support for importing Bitwarden 1.12 JSON files.
  • Mozilla Bookmarks JSON import: added support for importing tags (new format, in addition to the old format) and keywords.
  • Enhanced the Enpass import module to support TXT files created by version 6.0.4.
  • The language selection dialog now also lists KeePass 1.x LNG files; when trying to select such a file, an informative error message is displayed.
  • Added 'Cancel' command in the context menu of KeePass' system tray icon, which can be used to abort opening and saving a database file.
  • Added '-cancel' command line option, which causes all other KeePass instances to cancel opening/saving a database file.
  • Added '-auto-type-password' command line option (other running KeePass instances auto-type only the password of a matching entry).
  • Added '-e1:' command line parameter, which works like '-e:', but is handled by only one other instance; '-e:' is handled by all other instances.
  • When compiling a PLGX plugin, KeePass now defines a 'KP_V_*_*_*' symbol, where the asterisks specify the KeePass version (for example, 'KP_V_2_42_0' for version 2.42).
  • Added workarounds for .NET Caps Lock warning tooltip bug.
  • Added workaround for Mono grid view default color bug.
  • Added workaround for OneDrive bug on Windows 1809.
  • Improvements:
  • Auto-Type: improved sending of characters that are realized with the AltGr key.
  • Auto-Type: improved compatibility with VirtualBox 6 and VMware Player.
  • Improved user interface behavior while opening a database file.
  • Accelerator key improvements.
  • Replaced 4 and 8 weeks expiry date search commands by 1 and 2 months (taking the number of days in the months into account).
  • Improved hot key controls (better key combination handling and display).
  • The hot key controls in the options dialog now support entering hot keys that are already registered by KeePass.
  • Improved field to standard field mapping function.
  • Improved new-line handling of several import modules.
  • When a file import fails, KeePass now shows a more detailed error message.
  • After changing the color of an entry using a quick edit command, the entries are deselected now, such that the new color is visible immediately.
  • Moved 'Print Emergency Sheet' command into 'File' → 'Print'.
  • The pattern-based password generator now supports repeating escaped characters using '{...}'.
  • The pattern-based password generator now refuses to generate a password if the pattern is (partially) invalid.
  • Turning off the 'Unhide Passwords' policy now enforces hiding passwords in a few more places/situations.
  • New-line characters at the end of the output of a {CMD:...} placeholder are now removed (analogous to $(...) and `...` shell command substitutions).
  • The {URL:SCM} and {BASE:SCM} placeholders now work with arbitrary data having a ':'-terminated prefix.
  • Improved {URL:RMVSCM} and {BASE:RMVSCM} placeholders ('//' authority prefix is removed, but not '/').
  • The '-entry-url-open' command line option is now handled by all other KeePass instances (instead of only one).
  • Path traversal with attachment names is not possible anymore.
  • Removed the option 'Show tray icon only if main window has been sent to tray' from the options dialog (due to possible denial-of-service problems); if you want to hide the icon, it is recommended to configure this in the system settings instead.
  • Improved reading of KDBX XML documents with unknown elements.
  • Improved JSON parser.
  • Various UI text improvements.
  • Various code optimizations.
  • Minor other improvements.
  • Bugfixes:
  • Fixed a crash that could occur when trying to import certain Mozilla Bookmarks JSON files.
  • Fixed a crash that could occur when trying to import certain files with very deeply nested groups.
  • Fixed handling of paths with folder/file names containing quotes (which can occur on Unix-like systems only).



Changes for v2.40 - v2.41

  • New Features:
  • Added option 'Do not store data in the Windows clipboard history and the cloud clipboard' (the option is turned on by default; for entry clipboard commands in the main window).
  • Added option 'Esc keypress in main window' (in 'Tools' → 'Options' → tab 'Interface'), which allows to specify the action of the Esc key (ignore, lock workspace, minimize, minimize to tray, exit).
  • Added option 'Ignore search settings of groups' in the 'Find' dialog.
  • Internal data viewer: added support for zooming images using the OEM + and - keys with Ctrl.
  • Added accelerator keys (especially for labels) in various dialogs.
  • Added UIFlags bit for disabling the 'Database Settings' menu item.
  • Added workarounds for Windows RTF character encoding bug.
  • Added workaround for Mono input focus restoration problem that occurs when a form gets activated.
  • Plugins: added method to provide menu items.
  • Plugins: added property to get the edit mode of an entry dialog.
  • TrlUtil: added tab 'Validation', which shows the results of all checks that TrlUtil performs.
  • TrlUtil: the tab in the preview form that contains the currently selected control is now selected automatically.
  • TrlUtil: the preview form now shows accelerator keys permanently.
  • TrlUtil: enhanced support for derived control classes.
  • TrlUtil: the current file name is now displayed in the title bar.
  • Enhanced installer (added user directory checks, added option to open the plugins web page, component/option names can be translated now, updated NGen size estimation, improved file associations update, ...).
  • Improvements:
  • In order to avoid selection/Ctrl+A problems, the user name auto-completion now does not append suggestions anymore; it only shows a list of suggestions (in which a suggestion can be selected manually).
  • Improved accelerator keys in the 'Find' dialog.
  • The history list in the entry dialog now supports showing custom icons.
  • Mass entry modifications (colors/icons) now create history entries, if necessary.
  • Improved text rendering in dialog banners.
  • In the database settings dialog, the path of the database file is now shown in the dialog banner.
  • Improved selection/view preservation of the entry view.
  • While importing/synchronizing, a status dialog is displayed now if and only if the main window is not constructed completely yet (otherwise the status is displayed in the main window).
  • Improved reliability of clipboard operations.
  • Improved error reporting for the 'Paste Entries' command.
  • Renamed the automatic clipboard clearing option and added a tooltip in order to clarify the behavior of the option.
  • The commands 'Find Similar Passwords (Pairs)', 'Find Similar Passwords (Clusters)' and 'Password Quality Report' now ignore TAN entries.
  • The report of clusters of similar passwords now shows more clusters in certain cases.
  • In the 'Plugins' dialog, the plugins are now sorted alphabetically.
  • KeePass does not try to load satellite assemblies as plugins anymore.
  • Improved configuration saving when an enforced configuration file exists, but no global one.
  • Improved reading of KDBX XML documents with unknown elements.
  • The export module 'Customizable HTML File' now works fine on Unix-like systems, too.
  • On Unix-like systems: improved support for executing KeePass while no X server is running.
  • ShInstUtil: improved NGen detection on 64-bit systems.
  • TrlUtil: the preview form does not steal the input focus anymore.
  • TrlUtil: improved accelerator key check.
  • Various code optimizations.
  • Minor other improvements.
  • Bugfixes:
  • Fixed a bug that caused KeePass to crash when trying to view certain password generator profiles.
  • The option 'Use monospace font for passwords' in the 'Print' / HTML export dialog now works for all translations.



Changes for v2.39.1 - v2.40

  • New Features:
  • Added automatic completion support for the user name box in the entry editing dialog and the auto-type sequence boxes in the entry/group editing dialogs (suggesting user names and auto-type sequences that are used in other entries/groups).
  • Added automatic completion support for the URL and user name boxes in the 'Open From URL' dialog (suggesting URLs and user names of items in the list of most recently used database files).
  • Added option 'Group path' in the 'Find' dialog (enabled by default for quick searches).
  • Added read-only mode for the entry string dialog, which is used by the entry dialog when viewing a history entry.
  • The internal data viewer now supports zooming images using Ctrl+Add, Ctrl+Subtract and the mouse wheel with Ctrl; furthermore, there are now '+' and '-' buttons right of the zoom selection box in the toolbar.
  • Added option 'Remember master password (in encrypted form) of a database while it is open' (which is the default; turning off this option prevents the usage of certain features).
  • Enhanced compatibility check for DLL plugins.
  • Added URL opening event for plugins.
  • On Unix-like systems: added support for opening the local help file with KChmViewer.
  • Added workaround for initial input focus problem in the master key prompt dialog.
  • Added workaround for Mono not always raising the FormClosed event properly.
  • TrlUtil now remembers the last translation file directory.
  • Improvements:
  • The 'Configure Columns' dialog now computes a display order for the new columns, taking the previous display order into account.
  • While importing/synchronizing, no status dialog is displayed anymore (the status is displayed in the main window).
  • Improved UI responsiveness during long operations.
  • When hiding/restoring the main window via the system tray icon fails, KeePass now shows a notification.
  • Improved Return key handling in text boxes.
  • Improved initial input focus in some dialogs.
  • Enhanced database file path unification.
  • The configuration system does not create a KeePass folder in the user's application data folder anymore when the target configuration file location is outside this folder.
  • Improved window text query method.
  • Improved Unicode environment detection.
  • Various improvements for right-to-left writing systems.
  • Improved support for case-sensitive command line parameter names (for plugins and KPScript).
  • If a plugin is available both as a DLL and as a PLGX (in the same folder), KeePass now loads either the DLL or the PLGX.
  • For plugins: most public definitions are now static.
  • KPScript: improved parsing of escape sequences.
  • Renamed native support library item in the installer.
  • Upgraded installer.
  • Various code optimizations.
  • Minor other improvements.



Changes for v2.38 - v2.39.1

  • New Features:
  • KeePass now uses Transactional NTFS (TxF) for writing database and configuration files, if possible; this improves the compatibility with other programs that are watching these files (e.g. file synchronization services).
  • Added command 'Edit' → 'Show Entries' → 'Large Entries'.
  • Added command 'Edit' → 'Show Entries' → 'Last Modified Entries'.
  • Added option 'Automatically save after modifying an entry using the entry editing dialog' (turned off by default).
  • Added option 'Minimize main window after performing auto-type' (turned off by default).
  • Added option 'Show lines between nodes in tree views' (turned off by default).
  • Added support for importing Google Chrome 66 password CSV files.
  • Added trigger event 'Time - Periodic', which is raised at user-defined intervals.
  • Links in the entry string editing dialog are clickable now.
  • Added UIFlags bit for disabling the 'XML Replace' menu item.
  • Added UIFlags bit for hiding auto-type obfuscation compatibility information dialogs.
  • Added workaround for .NET 'urtf' RTF round-trip bug.
  • Secure edit controls are now extensible by plugins.
  • KPScript: the 'AddEntry' command now supports the '-setx-Expires' and '-setx-ExpiryTime' parameters.
  • Improvements:
  • In printouts and HTML exports, expired entries now have a red 'X' icon (if the option 'Icon' is turned on).
  • Improved string normalization in the entry and string editing dialogs.
  • Improved and optimized process memory protection, especially in the entry editing dialog.
  • Secure edit control improvements.
  • Improved behavior when moving a custom string to a standard field.
  • Improved entry size calculation.
  • URL overrides are now used also for application URLs.
  • Improved input focus restoration.
  • When trying to toggle the auto-start option and creating/deleting the registry value fails, KeePass now shows a detailed error message.
  • Improved XML serialization.
  • Stream disposal improvements in exceptional situations.
  • Process object disposal improvements.
  • Extended inter-process communication (IPC) messages are compressed and encrypted now.
  • New IPC mechanism on Unix-like systems.
  • Enhanced desktop type detection on Unix-like systems.
  • On the Cinnamon desktop, the 'Always on Top' option is now disabled (because it is not supported properly by the environment).
  • KeePass now ignores hidden Git and Visual Studio directories when building a PLGX file.
  • The trigger system now ignores state-changing placeholders in most places.
  • Removed trigger event 'User interface state updated' (consider using the new event 'Time - Periodic' instead).
  • Various code optimizations.
  • Minor other improvements.
  • Bugfixes:
  • The 'View' button on the 'History' tab of the entry editing dialog is now disabled when multiple items are selected.
  • The main window state is now updated after closing an entry report dialog.
  • Changes from 2.39 to 2.39.1:
  • File transactions: improved access control list (ACL) restoration.
  • File transactions are not used anymore when attempting to write to a local file that does not exist yet (to ensure a correct default ACL).
  • The option to minimize the main window after performing auto-type is now ignored while displaying a subdialog.
  • Plugins can now implement classes derived from KeePass' custom rich text boxes.



Changes for v2.37 - v2.38

  • New Features:
  • The installers (regular and MSI) now create an empty 'Languages' folder in the application directory, and the portable package now also contains such a folder; language files should now be stored in this folder.
  • Added button 'Open Folder' in the language selection dialog, which opens the 'Languages' folder.
  • Added button 'Open Folder' in the plugins dialog, which opens the 'Plugins' folder.
  • Added a runtime activation policy setting (to improve compatibility with Microsoft User Experience Virtualization).
  • Added option 'Icon' and an option for specifying the placeholder behavior (replace or not, or both forms) in the 'Print' / HTML export dialog.
  • Printing / HTML export: the notes of a group are now displayed below the group name.
  • Enhanced the Password Exporter import module to support XML files created by version 1.3.4.
  • Added workaround for Microsoft Office breaking the 'Print' shell verb for HTML files.
  • Added workaround for Mono list view item deletion bug.
  • Added workaround for Mono command line argument encoding bug.
  • KPScript: the 'AddEntry' and 'EditEntry' commands now support the '-setx-Icon' and '-setx-CustomIcon' parameters, which set the icon of the entry.
  • KPScript: the 'ChangeMasterKey' command now supports the '-newpw-enc' parameter (for specifying the new master password in encrypted form, compatible with the {PASSWORD_ENC} placeholder).
  • KPScript: the 'ListEntries' command now supports all '-ref-*' and '-refx-*' parameters.
  • Improvements:
  • Password quality estimation: improved compatibility with process memory protection.
  • Improved UI scaling when using KeePass on multiple systems with different DPI values.
  • Printing / HTML export: improved embedding of CSS.
  • Printing / HTML export: spaces in passwords are now encoded as non-breaking spaces.
  • Improved UI updating in the 'Print' / HTML export dialog.
  • Enhanced KDE system font detection.
  • Improved fatal error handling.
  • Various improvements in the language selection dialog.
  • KPScript: improved behavior of '-ref-*' parameters when combined with the '-refx-All' option.
  • Various code optimizations.
  • Minor other improvements.
  • Bugfixes:
  • Fixed HTML generation bug: when the option 'Use monospace font for passwords' was turned off, a generated HTML file in 'Details' mode could contain invalid end tags.



Changes for v2.36 - v2.37

  • New Features:
  • When creating a new database, KeePass now offers to print a KeePass emergency sheet (which can then be filled out and stored in a secure location, where only the user and possibly a few other people that the user trusts have access to); an emergency sheet can also be created via 'Tools' -> 'Database Tools' -> 'Print Emergency Sheet'.
  • Added database file information dialog that is displayed when creating a new database.
  • Added function to search similar password clusters ('Edit' -> 'Show Entries' -> 'Find Similar Passwords (Clusters)').
  • On Unix-like systems: if the library 'libgcrypt.so.20' is available, KeePass uses it for AES-KDF transformations.
  • Enhanced PrepMonoDev.sh script to upgrade a DTD processing definition.
  • Added workaround for .NET/Windows column header drawing bug when switching to TAN-only entry list mode.
  • Added workaround for Mono tab switching bug.
  • Added workaround for Mono '}' character RTF encoding bug.
  • TrlUtil: added support for .NET 4.*.
  • Improvements:
  • Improved dialog for changing the master key (key file and user account are now expert options, added more information and links to help page sections).
  • KeePass now directly offers to save the database after changing the master key, and it asks whether to print a new emergency sheet.
  • Various improvements in the translation selection dialog (the selected translation can now be activated by pressing Return, the list view now uses the Explorer style, ...).
  • KeePass now refuses to attach files that are larger than 512 MB (as larger files can result in serialization problems).
  • Increased default number of AES-KDF rounds.
  • On Unix-like systems, KeePass now uses the CSP implementation of the AES algorithm for encrypting data, which is a bit faster.
  • Improved tool strip checkmark rendering on Unix-like systems.
  • Updated links (to the website, help pages, etc.).
  • The MSI file is now built using Visual Studio 2017.
  • Various code optimizations.
  • Minor other improvements.



Changes for v2.35 - v2.36

  • New Features:
  • Added commands 'Find Duplicate Passwords' and 'Find Similar Passwords' (in 'Edit' -> 'Show Entries'), which show entries that are using the same or similar passwords.
  • Added command 'Password Quality Report' (in 'Edit' -> 'Show Entries'), which shows all entries and the estimated quality of their passwords.
  • Added option 'String name' in the 'Edit' -> 'Find' dialog (for searching entries that have a specific custom string field).
  • Added option for using a gray tray icon.
  • Added {CMD:/.../} placeholder, which runs a command line.
  • Added {T-CONV:/.../Raw/} placeholder, which inserts a text without encoding it for the current context.
  • Added optional 'Last Password Modification Time (Based on History)' entry list column.
  • The internal text editor now supports editing PS1 files.
  • The position and size of the internal data viewer is now remembered and restored.
  • For various dialogs, the maximized state is now remembered and restored.
  • Added configuration option for specifying an expiry date for master keys.
  • Added configuration option for specifying disallowed auto-type target windows.
  • Added workaround for Edge throwing away all keyboard input for a short time after its activation.
  • Added workaround for Mono not properly rendering bold and italic text in rich text boxes.
  • TrlUtil now performs a case-sensitive word validation.
  • Improvements:
  • The password input controls in the IO connection dialog and the proxy dialog now are secure edit controls.
  • The icon of the 'Save' command in the main menu is now grayed out when there are no database changes (like the toolbar button).
  • Auto-Type: improved support for target applications that redirect the focus immediately.
  • Auto-Type: improved compatibility with VMware vSphere client.
  • When an error occurs during auto-type, KeePass is now brought to the foreground before showing an error message box.
  • Entries in groups where searching is disabled (e.g. the recycle bin group) are now ignored by the commands that show expired entries.
  • Improved scrolling when moving entries while grouping in the entry list is on.
  • Improved support for right-to-left writing systems.
  • Improved application and system tray icon handling.
  • Updated low resolution ICO files (for Mono development).
  • Moved single-click tray icon action option from the 'Integration' tab to the 'Interface' tab of the options dialog.
  • Synchronization file path comparisons are case-insensitive now.
  • Improved workaround for Mono clipboard bug (improved performance and window detection; the workaround is now applied only if 'xsel' and 'xdotool' are installed).
  • Enhanced PrepMonoDev.sh script.
  • KPScript: times in group and entry lists now contain a time zone identifier (typically 'Z' for UTC).
  • Various code optimizations.
  • Minor other improvements.
  • Bugfixes:
  • The drop-down menu commands in the entry editing dialog for setting the expiry date now work as expected.



Changes for v2.34 - v2.35

  • New Features:
  • New KDBX 4 file format, which supports various new features (listed below; e.g. Argon2).
  • Added Argon2 key derivation function (it can be activated in the database settings dialog).
  • Improved header and data authentication in KDBX 4 files (using HMAC-SHA-256, Encrypt-then-MAC scheme).
  • Added ChaCha20 (RFC 7539) encryption algorithm (it can be activated as KDBX file encryption algorithm in the database settings dialog; furthermore, it supersedes Salsa20 as default for generating the inner random stream of KDBX 4 files).
  • Added support for opening entry URLs with Firefox or Opera in private mode via the context menu -> 'URL(s)' -> 'Open with ... (Private)'.
  • Added URL override suggestions for Firefox and Opera in private mode in the URL override suggestions drop-down list in the entry dialog.
  • Added optional built-in global URL overrides for opening HTTP/HTTPS URLs with Firefox or Opera in private mode.
  • Added {PICKFIELD} placeholder, which shows a dialog to pick a field whose value will be inserted.
  • Added option 'Hide "Close Database" toolbar button when at most one database is opened' (turned on by default).
  • Added option 'Show additional auto-type menu commands', which can be turned on to show menu commands for performing entry auto-type with some specific sequences.
  • Added menu command 'Selected Entry's Group' (with keyboard shortcut Ctrl+G) in 'Edit' -> 'Show Entries' (and a context menu equivalent 'Show Parent Group' in 'Selected Entries'), which opens the parent group of the currently selected entry and selects the entry again.
  • Added menu commands in 'Edit' -> 'Show Entries' to show entries that expire in a specific number of days (1, 2, 3) or weeks (1, 2, 4, 8) or in the future.
  • Added configuration option that specifies the number of days within which entries are considered to expire 'soon' (the default is 7).
  • Added option for changing the alternate item background color.
  • When the option 'Remember key sources' is enabled, KeePass now also remembers whether a master password has been used.
  • Added option 'Force changing the master key the next time (once)' (in 'File' -> 'Database Settings' -> tab 'Advanced').
  • Added parameters 'Window style' and 'Verb' for the 'Execute command line / URL' trigger action.
  • Added support for importing mSecure 3.5.5 CSV files.
  • Added support for importing Password Saver 4.1.2 XML files.
  • Added support for importing Enpass 5.3.0.1 TXT files.
  • Enhanced SplashID CSV import (added support for the old version 3.4, added mappings for types of the latest version, groups are now created only for categories, and types are imported as tags).
  • LastPass import: added support for CSV files exported by the LastPass Chrome extension, which encodes some special characters as XML entities.
  • Added 'KeePass KDBX (2.34, Old Format)' export module.
  • Export using XSL transformation: added support for the 'xsl:output' element in XSL files.
  • If the global auto-type hot key is Ctrl+Alt+A and the current input locale is Polish, KeePass now shows a warning dialog (telling the user that Ctrl+Alt+A is in conflict with a system key combination producing a character).
  • Added Alt+X Unicode character conversion support in rich text boxes on Unix-like systems.
  • For development snapshots, the 'About' dialog now shows the snapshot version (in the form 'YYMMDD').
  • Plugins can provide other key derivation functions now.
  • The header of KDBX 4 files is extensible by plugins.
  • Enhanced support for developing encryption algorithm plugins.
  • Plugins can now store custom data in groups and entries.
  • Plugin data stored in the database, a group or an entry can now be inspected (and deleted) in the database maintenance dialog, the group dialog and the entry dialog, respectively.
  • For plugins: file closing events now contain information about whether KeePass is exiting, locking or performing a trigger action.
  • Added workaround for .NET handle cast overflow bug in InputLanguage.Culture.
  • Added workaround for Mono ignoring the Ctrl+I shortcut.
  • Added workaround for Mono clipboard bug.
  • Added workaround for Mono not focusing the default control in the entry editing dialog.
  • Added workaround for a Mono timer bug that caused high CPU load while showing a file save confirmation dialog.
  • Added Mono workaround: when running on Mac OS X, KeePass now does not try to instantiate a tray icon anymore.
  • Added workaround for XDoTool sending diacritic characters in incorrect case.
  • TrlUtil now recommends to clear the 'Unused Text' tab.
  • Improvements:
  • Improved behavior when searching entries with exclusions (terms prefixed with '-').
  • Improved support for auto-typing into target windows using different keyboard layouts.
  • Auto-Type: improved support for keyboard layouts with keys where Shift, Caps Lock and no modifier result in 3 different characters.
  • Auto-Type: improved support for spacing modifier letters (U+02B0 to U+02FF).
  • Global auto-type now works with target windows having empty titles.
  • When copying entries to the clipboard, the data package now includes custom icons used by the entries.
  • Unified behavior when drag&dropping a field containing a placeholder.
  • Improved entry edit confirmation dialog.
  • If the screen height is insufficient to display a dialog, the dialog's banner (if the dialog has one) is now removed to save some space.
  • Some tooltips are now displayed for a longer time.
  • A new entry created using a template now does not include the history of the template anymore.
  • For empty RTF attachments, the internal data editor now by default uses the font that is specified for TXT files.
  • Internal data editor: added support for changing the format of mixed-format selections.
  • Internal data viewer and editor: null characters ('\0', not '0') in texts are now automatically replaced by spaces (like Notepad on Windows 10).
  • Improved encoding signature handling for conversions during text attachment imports (via the 'Text Encoding' dialog).
  • File transactions are not used anymore for files that have a reparse point (e.g. symbolic links).
  • Improved XSL stylesheets for KDBX XML files.
  • The internal window manager is now thread-safe.
  • Improved date/time handling.
  • Improved button image disposal.
  • When synchronizing two databases, custom data (by plugins) is now merged.
  • When opening a database file, corrupted icon indices are now automatically replaced by default values.
  • Added some more entropy sources for the seed of the cryptographically secure pseudo-random number generator (environment variables, command line, full operating system version, current culture).
  • ChaCha20 is now used during password generation (instead of Salsa20).
  • ChaCha20 is now used as fallback process memory encryption algorithm (instead of Salsa20).
  • When the encryption algorithm for a database file is unknown, the error message now shows the UUID of the algorithm.
  • In KDBX 4, header field lengths are now 4 bytes wide.
  • In KDBX 4, entry attachments are now stored in an inner, binary header (encrypted, possibly compressed), before the XML part; this reduces the database file size and improves the loading/saving performance.
  • In KDBX 4, the inner random stream cipher ID and key (to support process memory protection) are now stored in the inner header instead of in the outer header.
  • KPScript: the 'ChangeMasterKey' command now also updates the master key change date.
  • TrlUtil: improved validation warning dialogs.
  • The MSI file now requires any .NET Framework version, not a specific one.
  • The MSI file is now built using Visual Studio 2015.
  • Various code optimizations.
  • Minor other improvements.
  • Bugfixes:
  • When executing a {HMACOTP} placeholder, the last modification time of the corresponding entry is now updated.
  • Key files containing exactly 64 alphanumeric characters are now loaded as intended.



Changes for v2.33 - v2.34

  • New Features:
  • The version information file (which the optional update check downloads to see if there exists a newer version) is now digitally signed (using RSA-4096 / SHA-512); furthermore, it is downloaded over HTTPS.
  • Added option 'Lock workspace when minimizing main window to tray'.
  • Added option 'Esc minimizes to tray instead of locking the workspace'.
  • Added Ctrl+Q shortcut for closing KeePass (as alternative to Alt+F4).
  • Added UIFlags bit for disabling the 'Check for Updates' menu item.
  • The installers (regular and MSI) now create an empty 'Plugins' folder in the application directory, and the portable package now also contains such a folder.
  • Plugins: added support for digitally signed version information files.
  • Improvements:
  • Plugins are now loaded only directly from the application directory and from any subdirectory of the 'Plugins' folder in the application directory.
  • Improved startup performance (by filtering plugin candidates).
  • When closing a database, KeePass now searches and deletes any temporary files that may have been created and forgotten by MSHTML when printing failed.
  • CHM help file: improved high DPI support.
  • Various code optimizations.
  • Minor other improvements.



Changes for v2.32 - v2.33

  • New Features:
  • Added commands in the group context menu (under 'Rearrange'): 'Expand Recursively' and 'Collapse Recursively'.
  • Added option 'When selecting an entry, automatically select its parent group, too' (turned on by default).
  • Added placeholders for data of the group that is currently selected in the main window: {GROUP_SEL}, {GROUP_SEL_PATH} and {GROUP_SEL_NOTES}.
  • While importing/synchronizing, indeterminate progress is now displayed on the taskbar button (on Windows 7 and higher).
  • Added optional parameters 'Filter - Group' and 'Filter - Tag' for the 'Export active database' trigger action.
  • Pressing the Escape key in the main window now locks the workspace (independent of the current database locking state, in contrast to Ctrl+L).
  • Added option 'Extra-safe file transactions' in 'Tools' -> 'Options' -> tab 'Advanced'.
  • Added customization option to specify how often the master key dialog appears when entering incorrect master keys.
  • Plugins: added event 'FormLoadPost' for the main window.
  • KPScript: the 'GetEntryString' command now supports the '-Spr' option, which causes KPScript to Spr-compile the field value (i.e. placeholders are replaced, field references are resolved, environment variables are inserted, etc.).
  • Improvements:
  • Improved database synchronization performance.
  • Improved object reordering during a database synchronization for new and relocated groups/entries.
  • Improved synchronization of deleted objects information.
  • Improved database synchronization to prevent implicit object deletions.
  • HTML export/printing: the notes column now is twice as wide as the other columns.
  • When entering a Spr-variant password in the entry dialog, the quality estimation is now disabled.
  • Group tooltips are now displayed for about 30 seconds.
  • The root group is now always expanded when opening a database.
  • Improved private mode browser detection.
  • Improved DPI awareness declaration (on Windows 10 and higher).
  • Improved regular expression searching performance in usual use cases.
  • Improved natural string comparison performance (on Unix-like systems).
  • Improved mnemonic characters in the 'Rearrange' menus.
  • Upgraded installer.
  • Various UI text improvements.
  • Various code optimizations.
  • Minor other improvements.



Changes for v2.31 - v2.32

  • New Features:
  • The quick search box (in the toolbar of the main window) now supports searching using a regular expression; in order to indicate that the search text is a regular expression, enclose it in '//'; for example, performing a quick search for '//Michael|Adam//' shows all entries containing 'Michael' or 'Adam'.
  • Added 'Advanced' tab in the 'Open From URL' dialog (easily extensible by plugins); added options: timeout, pre-authenticate, HTTP/HTTPS/WebDAV user agent and 100-Continue behavior, FTP passive mode.
  • Added per-user Start Menu Internet Application detection.
  • When selecting an entry in the main entry list, its parent group is now selected automatically in the group tree view.
  • Auto-Type matching: added option 'Expired entries can match' (turned off by default, i.e. expired entries are ignored).
  • Added option 'Always show global auto-type entry selection dialog' (to show the dialog even when no or one entry is found for the currently active target window; turned off by default).
  • Added {GROUP_NOTES} placeholder.
  • Added support for importing nPassword 1.0.2.41 NPW files.
  • In triggers and KPScript, an import/export module can now be specified both using its display name and its format name.
  • When running under .NET 4.5 or higher, secure connections (e.g. for WebDAV) now support TLS 1.1 and TLS 1.2 (in addition to SSL 3 and TLS 1.0).
  • Added Mono workaround: when running on the Unity or Pantheon desktop, KeePass now does not try to instantiate a tray icon anymore; if you want a tray icon on Unity/Pantheon, use the application indicator plugin.
  • Added workaround for Mono not implementing the property SystemInformation.SmallIconSize for Mac OS X systems.
  • Added command line parameter '-wa-disable:' for disabling specific Mono workarounds (IDs separated by commas).
  • KPScript: if the value of a '-ref-*:' parameter is enclosed in '//', it is now treated as a regular expression, which must occur in the entry field for an entry to match.
  • KPScript: .NET 4.0/4.5 is now preferred, if installed.
  • KPScript: enhanced high DPI support.
  • Improvements:
  • Auto-Type: improved compatibility with target windows that handle activation slowly and ignore any input until being ready (like Microsoft Edge).
  • Auto-Type: improved sending of characters that are typically realized with the AltGr key.
  • When editing a custom entry string, the value text box now has the initial focus.
  • Improved image/icon shrinking.
  • Improved icon recoloring on high DPI resolutions.
  • Changed some ICO files such that higher resolution images are used.
  • Changed some PNG files to workaround the image DPI scaling behavior on Windows XP.
  • Improved new-line filtering in the main entry view.
  • When trying to use the Windows user account as part of a composite master key fails, a more detailed error message is displayed now.
  • The 'About' dialog now indicates whether the current build is a development snapshot.
  • Changed code signing certificate.
  • Upgraded installer.
  • Various code optimizations.
  • Minor other improvements.
  • Bugfixes:
  • After an incomplete drag&drop operation over the group tree view, the previous group selection is now restored.



Changes for v2.30 - v2.31

  • New Features:
  • Added menu/toolbar styles, freely selectable in 'Tools' -> 'Options' -> tab 'Interface'; available styles are 'Windows 10', 'Windows 8.1', 'KeePass - Gradient', '.NET/Office - Professional' and 'System - Classic'; by default KeePass uses the style most similar to the one of the current operating system.
  • Refined application icons (thanks to Victor Andreyenkov).
  • Auto-Type: new target window classification method, which improves compatibility with target windows hosted within other windows (e.g. a PuTTY window within SuperPuTTY/MTPuTTY).
  • Auto-Type: added workaround for the default Ctrl+Alt behavior of KiTTY variants (which differs from Windows' behavior).
  • Before clearing the clipboard, KeePass now first copies a non-sensitive text into it; this ensures that no sensitive information remains in the clipboard even when clearing is prevented by the environment (e.g. when running in a virtual machine, when using a clipboard extension utility, ...).
  • Added support for opening entry URLs with Internet Explorer or Google Chrome in private mode via the context menu -> 'URL(s)' -> 'Open with ... (Private)'.
  • Added URL override suggestions for Internet Explorer and Google Chrome in private mode in the URL override suggestions drop-down list in the entry dialog.
  • Added optional built-in global URL overrides for opening HTTP/HTTPS URLs with Internet Explorer or Google Chrome in private mode.
  • Added Ctrl+K shortcut for the 'Duplicate Entry' command.
  • Mozilla Bookmarks HTML import: added support for importing tags.
  • Added support for exporting to Mozilla Bookmarks HTML files.
  • Windows/IE favorites export: entry fields are Spr-compiled now, and entries with cmd:// URLs are now exported as LNK files.
  • HTML export/printing: added support for UUIDs, added horizontal lines between entries in details mode, added background color for group headings, long field names are hyphenated now, and long field data now breaks and wraps onto the next line.
  • Plugins: added possibility to configure file transactions for each URI scheme.
  • Plugins: added possibility to provide custom 'Save As' dialogs more easily.
  • Converted some PNG images as a workaround for a problem in Cairo/LibPNG on Unix-like systems.
  • As a workaround for a weakness in Mono's FileDialog, before showing such a dialog on Unix-like systems KeePass now tries to load the file '~/.recently-used' and deletes it, if it is not a valid XML file.
  • KPScript: added support for specifying the master password in encrypted form using the '-pw-enc:' command line parameter (exactly like in KeePass, compatible with the {PASSWORD_ENC} placeholder).
  • KPScript: the 'Export' command now supports the optional '-GroupPath:' parameter (to export a specific group instead of the whole database).
  • KPScript: the 'GetEntryString' command now supports the '-FailIfNoEntry' option.
  • KPScript: added '-refx-Expires' and '-refx-Expired' entry identification parameters.
  • KPScript: the 'Import' command now prints more specific error messages.
  • All KeePass program binaries are now dual signed using SHA-1 and SHA-256.
  • Improvements / Changes:
  • Auto-Type: improved keyboard layout handling when the target window changes during an auto-type process.
  • Auto-Type: improved compatibility with Remote Desktop Connection client and VirtualBox.
  • Improved icon recoloring.
  • Improved printing of dates/times and tags.
  • The password generator based on a character set now ensures that the generated password is Spr-invariant.
  • Password generator based on a pattern or a custom algorithm: when a Spr-variant password is generated, a confirmation dialog for accepting this password is displayed.
  • If the 'Save Database' policy prevents saving, the auto-save option is now ignored.
  • Improved .NET Framework version detection.
  • PLGX debugging: when the command line option '-debug' is passed and a PLGX plugin fails to compile, the output of all tried compilers is saved to a temporary file.
  • Improved file transaction creation time handling on Unix-like systems.
  • Improved compatibility with Mono on BSD systems.
  • Enhanced PrepMonoDev.sh script for compatibility with Mono 4.x.
  • Removed KeePassLibSD sub-project (a KeePass library for Pocket PC / Windows Mobile) from the main solution.
  • Upgraded installer.
  • Various code optimizations.
  • Minor other improvements.
  • Bugfixes:
  • When running under Mono (Linux, Mac OS X, ...), two options related to window minimization are disabled now (because they do not work properly due to a Mono bug).



Changes for v2.29 - v2.30

  • New Features:
  • When opening a database via an URL fails, the error message dialog now has a button 'Specify different server credentials' (on Windows Vista and higher).
  • Added support for opening entry URLs with Microsoft Edge via the context menu -> 'URL(s)' -> 'Open with Edge'.
  • Added URL override suggestion for Microsoft Edge in the URL override suggestions drop-down list in the entry dialog.
  • Added optional built-in global URL overrides for opening HTTP/HTTPS URLs with Microsoft Edge.
  • When clicking on a group link in the entry view, KeePass now ensures that the group is visible in the group tree.
  • The main window is now moved onto the primary screen when it is restored outside all screens.
  • KDBX loader: added support for non-empty protected binary value reference elements.
  • Plugins: added two auto-type sequence query events.
  • Added workaround for Mono drawing bug when scrolling a rich text box.
  • When running under Mono, some automatic locking options are now disabled (because Mono doesn't implement the required events).
  • The installer now prevents running the installer while it is already running.
  • KPScript: added '-GroupPath:' parameter (for specifying the full path of a group).
  • KPScript: the 'MoveEntry' command now also supports the '-GroupName:' parameter (as alternative to '-GroupPath:').
  • KPScript: added support for specifying the path of an XSL stylesheet file using the command line parameter '-XslFile:'.
  • KPScript: the 'ListGroups' command now also outputs the parent group UUID for each group.
  • KPScript: the parameters for specifying new field data (for the 'AddEntry' and the 'EditEntry' command) now support escape sequences (e.g. '\n' is replaced by a new-line character).
  • Improvements / Changes:
  • The 'Synchronize' file dialog now shows only KDBX files by default.
  • In the 'Attachments (Count)' column, only non-zero counts are shown now.
  • Improved MRU item refreshes.
  • The entry string dialog now supports changing the case of a string name.
  • The entry string dialog now does not allow adding a string whose name differs from another existing string name in this entry only by case.
  • The entry view in the main window is now updated immediately after pressing Ctrl+H or Ctrl+J.
  • The KDB import module now tries to round any invalid date/time to the nearest valid date/time.
  • XML serializers are now loaded/created at KeePass startup in order to avoid a problem when shutting down Windows and KeePass.XmlSerializers.dll not being present.
  • Changed tab bar behavior in the options dialog to avoid a tab content cropping issue caused by plugins.
  • Improved workaround for Mono splitter bug.
  • Upgraded installer.
  • Various performance improvements.
  • Various code optimizations.
  • Minor other improvements.



Changes for v2.28 - v2.29

  • New Features:
  • Added high resolution icons.
  • Added support for high resolution custom icons.
  • Added option in the proxy configuration dialog to use the user's default credentials (provided by the system).
  • {FIREFOX} placeholder: if no regular Firefox is installed, KeePass now looks for Firefox ESR.
  • {PICKCHARS} placeholder: the Conv-Fmt option now supports all combinations of '0', 'A', 'a' and '?'; '?' skips a combobox item.
  • Added {BEEP X Y} auto-type command (where X is the frequency in hertz and Y the duration in milliseconds).
  • Added optional 'Attachments (Count)' entry list column.
  • Added Ctrl+Insert shortcut as alternative for Ctrl+C in the entry list of the main window.
  • Added shortcut keys for 'Copy Entries' (Ctrl+Shift+C) and 'Paste Entries' (Ctrl+Shift+V).
  • Added some access keys in various dialogs.
  • In the field reference dialog, the field in which the reference will be inserted is now selected as source field by default.
  • Added UUID uniqueness check.
  • Added support for importing Passphrase Keeper 2.60 HTML files (in addition to the already supported 2.50 and 2.70 formats).
  • The path of the local configuration file can now be changed using the '-cfg-local:' command line parameter.
  • Plugins can now access the KeePass resources (images, icons, etc.) through the IPluginHost interface.
  • Added a few workarounds for external window manipulations before the main window has been fully constructed.
  • Added workaround for .NET gradient drawing bug; 'Blue Carbon' dialog banners are now drawn correctly on high DPI.
  • Added workaround for Mono file version information block generation bug.
  • KPScript: added 'EstimateQuality' command (to estimate the quality of a specified password).
  • All KeePass program binaries are now digitally signed (thanks to Certum/Unizeto).
  • Improvements / Changes:
  • In the master key creation dialog, the 'Create' and 'Browse' buttons are now disabled when a key provider is selected.
  • Changed behavior of the 'Use system proxy settings' option (KeePass now directly gets the system proxy settings, not the .NET default proxy settings).
  • Improved focus restoration after closing the character picking dialog.
  • Removed 'O' and 'C' access keys from 'OK' and 'Cancel' buttons (instead, press Enter for 'OK' and Esc for 'Cancel').
  • Improved remembering of splitter positions.
  • Improved assignments of check mark images to menu items.
  • Improved behavior when synchronizing a local EFS-encrypted database file with a local database file.
  • On Unix-like systems, hot key boxes now show 'External' instead of 'None'.
  • Various code optimizations.
  • Minor other improvements.
  • Bugfixes:
  • AltGr+E (i.e. Ctrl+Alt+E) does not focus the quick search box anymore.



Changes for v2.27 - v2.28

  • New Features:
  • Enhanced high DPI support.
  • Added trigger action 'Show message box' (which can abort the current trigger execution or execute a command line / URL).
  • The 'Database has unsaved changes' trigger condition now supports choosing between the active database and the database that triggered the event.
  • Added parameter for the trigger action 'Activate database (select tab)' that allows activating the database that triggered the event.
  • Auto-Type: added workaround for KiTTY's default Ctrl+Alt behavior (which differs from Windows' behavior).
  • Auto-Type: added workaround for PuTTYjp's default Ctrl+Alt behavior (which differs from Windows' behavior).
  • Added up/down arrow buttons for reordering auto-type associations in the entry editing dialog.
  • While entering the master key on a secure desktop, dimmed screenshots are now also displayed on all non-primary screens.
  • Added support for importing VisKeeper 3.3.0 TXT files.
  • The group tree view is now saved and restored during most group tree updates.
  • In the main entry list, multiple entries can now be moved by one step up/down at once.
  • If Caps Lock is on, a balloon tip indicating this is now also displayed for password text boxes immediately after opening a dialog (where the password text box is the initially focused control).
  • In the cases where Windows would display outdated thumbnail and peek preview images for the main window, KeePass now requests Windows to use a static bitmap instead (showing only the KeePass logo).
  • Added fallback method for parsing dates/times (the default parser fails for some custom formats specified in the Control Panel).
  • Added workaround for .NET ToolStrip height bug.
  • Added own process memory protection for Unix-like systems (as Mono doesn't provide any effective memory protection method).
  • On Unix-like systems, Shift+F10 (and Ctrl+Alt+5 and Ctrl+NumPad5 on Mac OS X) now shows the context menu in most list/tree view controls and rich text boxes (like on Windows).
  • KPScript: for the 'Import' command, a different master key can now be specified using the standard master key command line parameters with the prefix 'imp_' (e.g. -imp_pw:Secret).
  • KPScript: added option '-FailIfNotExists' for the 'GetEntryString' command.
  • KPScript: added '-refx-Group' and '-refx-GroupPath' entry identification parameters.
  • Improvements / Changes:
  • Improved compatibility with ClearType.
  • Improved support for high contrast themes.
  • When duplicating a group/entry, the creation time and the last access time of the copy are now set to the current time.
  • Character picker dialog: initially the text box is now focused, improved tab order, and picked characters are now inserted at the current insertion point (instead of the end).
  • Ctrl+Tab is now handled only once when the database tab bar has the focus.
  • When exporting to a KeePass 1.x KDB file, a warning/error is now shown if the master key contains/is a Windows User Account.
  • Unknown trigger events/conditions/actions are now ignored by the trigger dialog.
  • Reduced group tree view flickering.
  • Improved default value for the entry history size limit.
  • Improved menu check mark and radio images.
  • Improved list view column resizing.
  • Improved list view scrolling.
  • Secure edit control performance improvements.
  • In some cases, double-clicking the tray icon now brings KeePass to the foreground.
  • Improved concurrent UI behavior during auto-type.
  • Auto-Type: improved compatibility with keyboard layouts with combining apostrophes, quotation marks and tildes.
  • Auto-Type: improved virtual key translation on Unix-like systems.
  • KPScript: the 'EditEntry' command now also updates the time fields of all affected entries.
  • KPScript: the 'DeleteEntry' and 'DeleteAllEntries' commands now create deleted object information (improving synchronization behavior).
  • Upgraded installer.
  • Various code optimizations.
  • Minor other improvements.
  • Bugfixes:
  • When auto-typing a sequence containing a {NEWPASSWORD} placeholder, the raw new password is now stored (in the password field of the entry), not its corresponding auto-type sequence.
  • Synchronizing two unrelated databases now always works as expected.



Changes for v2.26 - v2.27

  • New Features:
  • The estimated password quality (in bits) is now displayed on the quality progress bar, and right of the quality progress bar the length of the password is displayed.
  • Auto-Type: before sending a character using a key combination involving at least two modifiers, KeePass now first tests whether this key combination is a registered system-wide hot key, and, if so, tries to send the character as a Unicode packet instead.
  • Auto-Type: added workaround for Cygwin's default Ctrl+Alt behavior (which differs from Windows' behavior).
  • Auto-Type: added {APPACTIVATE ...} command.
  • {HMACOTP} placeholder: added support for specifying the shared secret using the entry strings 'HmacOtp-Secret-Hex' (secret as hex string), 'HmacOtp-Secret-Base32' (secret as Base32 string) and 'HmacOtp-Secret-Base64' (secret as Base64 string).
  • {T-CONV:...} placeholder: added 'Uri-Dec' type (for converting the string to its URI-unescaped representation).
  • Added placeholders: {URL:USERINFO}, {URL:USERNAME} and {URL:PASSWORD}.
  • Added placeholders: {BASE}, {BASE:RMVSCM}, {BASE:SCM}, {BASE:HOST}, {BASE:PORT}, {BASE:PATH}, {BASE:QUERY}, {BASE:USERINFO}, {BASE:USERNAME}, {BASE:PASSWORD} (within an URL override, each of these placeholders is replaced by the specified part of the string that is being overridden).
  • Added {NEWPASSWORD:/Profile/} placeholder, which generates a new password for the current entry using the specified password generator profile.
  • Pattern-based password generator: the '^' character now removes the next character from the current custom character set (for example, [a^y] contains all lower-case alphanumeric characters except 'y').
  • Enhanced syntax highlighting in the sequence field of the 'Edit Auto-Type Item' dialog.
  • Added option 'Do not ask whether to synchronize or overwrite; force synchronization'.
  • Added synchronization support for the group behavior properties 'Auto-Type for entries in this group' and 'Searching entries in this group'.
  • Root group properties are now synchronized based on the last modification time.
  • While saving a database, a shutdown block reason is now specified.
  • Added 'Move to Group' menu in the 'Selected Entries' popup of the main entry list context menu.
  • Items of dynamic menus (tags, strings, attachments, password generator profiles, ...) now have auto-assigned accelerator keys.
  • As alternative to Ctrl+F, pressing F3 in the main window now displays the 'Find' dialog.
  • Added UIFlags bit for hiding password quality progress bars and information labels.
  • Enhanced system font detection on Unix-like systems.
  • When using 'xsel' for clipboard operations on Unix-like systems, text is now copied into both the primary selection and the clipboard.
  • Added '--version' command line option (for Unix-like systems).
  • Plugins can now subscribe to an IPC event that is raised when running KeePass with the '-e:' command line parameter.
  • Added workaround for .NET AutoWordSelection bug.
  • Added workaround for Mono bug 10163; saving files using WebDAV now also works under Mono 2.11 and higher.
  • Added workaround for Mono image tabs bug.
  • Added workaround for Mono NumericUpDown drawing bug.
  • Improvements / Changes:
  • Merged the URL scheme overrides and the 'Override all URLs' option into a new dialog 'URL Overrides'.
  • Improved autocompletion of IO connection parameters using the MRU list (now treating the user name as filter).
  • Improved interaction of IO connection trigger parameters and the MRU list.
  • The master key prompt dialog now validates key files only when clicking [OK], and invalid ones are not removed automatically from the list anymore.
  • Improved support for managing columns leftover from uninstalled plugins in the 'Configure Columns' dialog.
  • If the 'Unhide Passwords' policy is turned off, the passwords column in the auto-type entry selection dialog is now unavailable.
  • The entry list in the main window is now updated immediately after performing auto-type or copying data to the clipboard.
  • Various list view performance improvements.
  • The 'Searching entries in this group' group behavior properties are now ignored during resolving field references.
  • Improved behavior in case of syntax errors in placeholders with parameters.
  • Two-channel auto-type obfuscation: improved realization of clipboard paste commands.
  • General main window keyboard shortcuts now also work within the quick search box and the database tab bar.
  • Pressing Ctrl+Shift+Tab in the main window now always selects the previous database tab (independent of which control has the focus).
  • Changed shortcut keys for moving entries/groups on Unix-like systems, due to Mono's incorrect handling of Alt (preventing key events) and navigation keys (selection updated at the wrong time).
  • Auto-Type: improved modifier key releasing on Unix-like systems.
  • Various code optimizations.
  • Minor other improvements.
  • Bugfixes:
  • A key-up event to the groups tree in the main window without a corresponding key-down event does not change the entry list anymore.



Changes for v2.25 - v2.26

  • New Features:
  • Added option to show a confirmation dialog when moving entries/groups to the recycle bin.
  • Auto-Type: added workaround for applications with broken time-dependent message processing.
  • Auto-Type: added workaround for PuTTY's default Ctrl+Alt behavior (which differs from Windows' behavior).
  • Auto-Type: added configuration option to specify the default delay between two keypresses.
  • Added optional sequence comments column in the auto-type entry selection dialog (in this column, only {C:...} comments in the sequence are displayed; if a comment starts with '!', only this comment is shown).
  • If the option 'Automatically search key files' is activated, all drives are now scanned in parallel and any key files are added asynchronously (this avoids issues caused by slow network drives).
  • Added trigger action 'Show entries by tag'.
  • {OPERA} placeholder: updated detection code to also support the latest versions of Opera.
  • {T-CONV:...} placeholder: added 'Uri' type (for converting the string to its URI-escaped representation).
  • Synchronization functions are now available for remote databases, too.
  • Enhanced RoboForm importer to additionally support the new file format.
  • Summary lists are now also available in delete confirmation dialogs on Unix-like systems and Windows XP and earlier.
  • Added workaround for Mono Process StdIn BOM bug.
  • KPScript: added 'refx-All' option (matches all entries).
  • KPScript: added optional parameters 'setx-Expires' and 'setx-ExpiryTime' for the 'EditEntry' command.
  • Improvements / Changes:
  • Improved database tab selection after closing an inactive database.
  • New just-in-time MRU files list.
  • Improved selection of entries created by the password generator.
  • The internal text editor now determines the newline sequence that the data is using the most when opening it, and converts all newline sequences to the initial sequence when saving the data.
  • Improved realization of the {CLEARFIELD} command (now using Bksp instead of Del, in order to avoid Ctrl+Alt+Del issues on newer Windows systems).
  • The note that deleting a group will also delete all subgroups and entries within this group is now only displayed if the group is not empty.
  • Improved GUI thread safety of the update check dialog.
  • Improved HTML generation.
  • Improved version formatting.
  • On Unix-like systems, window state automations are now disabled during initial auto-type target window switches.
  • On Unix-like systems, the button to choose a password font is disabled now (because this is unsupported due to Mono bug 5795).
  • Various files (e.g. 'History.txt') are now encoded using UTF-8.
  • Improved build system.
  • Various code optimizations.
  • Minor other improvements.
  • Bugfixes:
  • In the 'Configure Columns' dialog, the activation states of plugin-provided columns are now preset correctly.



Changes for v2.24 - v2.25

  • New Features:
  • New auto-type key sending engine (improved support for sending Unicode characters and for sending keypresses into virtual machine/emulator windows; now largely compatible with the Neo keyboard layout; sequence parsing is faster, more flexible and optimizes the sequence; improved behavior for invalid sequences; differential delays, making the auto-type process less susceptible to externally caused delays; automatic cancelling is now more precise up to at most one keypress and also works on Unix-like systems; improved message processing during auto-type).
  • When trying to open an entry attachment that the built-in editor/viewer cannot handle, KeePass now extracts the attachment to a (EFS-encrypted) temporary file and opens it using the default application associated with this file; afterwards the user can choose between importing/discarding changes and KeePass deletes the temporary file securely.
  • On Windows Vista and higher, the button in the entry editing dialog to open attachments is now a split button; the drop-down menu allows to choose between the built-in viewer, the built-in editor and an external application.
  • Added 'XML Replace' functionality.
  • Generic CSV importer: added option to merge imported groups with groups already existing in the database.
  • Added support for importing Dashlane 2.3.2 CSV files.
  • On Windows 8 and higher, some running Metro apps are now listed in the 'Edit Auto-Type Item' dialog.
  • Added {T-CONV:/T/C/} placeholder (to convert text to upper-case, lower-case, or its UTF-8 representation to Base64 or Hex).
  • Added {SPACE} special key code (as alternative for the ' ' character, for improved readability of auto-type sequences).
  • XML merge (used e.g. when an enforced configuration file is present): added support for comments in inner nodes.
  • Added UIFlags bit for showing last access times.
  • Improvements / Changes:
  • In the history entry viewing dialog, the 'Open' and 'Save' commands are now available for attachments.
  • When replacing the {PASSWORD_ENC} placeholder, KeePass now first Spr-compiles the entry password (i.e. placeholders, environment variables, etc. can be used).
  • Improved configuration loading performance.
  • Improved displaying of fatal exceptions.
  • Various code optimizations.
  • Minor other improvements.
  • Bugfixes:
  • Data inserted by entry URL component placeholders is now encoded correctly.



Changes for v2.23 - v2.24

  • The URL override field in the entry editing dialog is now an editable combo box, where the drop-down list contains suggestions for browser overrides.
  • Password quality estimations are now computed in separate threads to improve the UI responsiveness.
  • The password generator profile 'Automatically generated passwords for new entries' is now available in the password generator context menu of the entry editing dialog.
  • Added UIFlags bit for hiding built-in profiles in the password generator context menu of the entry editing dialog.
  • Tags can be included in printouts now.
  • Generic CSV importer: added support for importing tags.
  • Added support for importing Norton Identity Safe 2013 CSV files.
  • Mozilla Bookmarks JSON import: added support for importing tags.
  • RoboForm import: URLs are now terminated using a '/', added support for the new file format and for the new note fields.
  • Added support for showing modern task dialogs even when no form exists (requiring a theming activation context).
  • KeePass now terminates CtfMon child processes started by .NET/Windows, if they are not terminated automatically.
  • Added workarounds for '#', '{', '}', '[', ']', '~' and diaeresis .NET SendKeys issues.
  • Added workaround for 'xsel' hanging on Unix-like systems.
  • Converted some PNG images as a workaround for a problem in Cairo/LibPNG on Unix-like systems.
  • Installer: the version is now shown in the 'Version' field of the item in the Windows 'Programs and Features' dialog.
  • TrlUtil: added 'Go to Next Untranslated' command.
  • TrlUtil: added shortcut keys.
  • Improvements / Changes:
  • The 'Open From URL' dialog is now brought to the foreground when trying to perform global auto-type while the database is locked and the main window is minimized to tray.
  • Profiles are now shown directly in the password generator context menu of the entry editing dialog.
  • After duplicating entries, KeePass now ensures that the copies are visible.
  • User names of TAN entries are now dereferenced, if the option for showing dereferenced data in the main window is enabled.
  • When creating an entry from a template, the new entry is now selected and focused.
  • Empty fields are not included in detailed printouts anymore.
  • Enhanced Internet Explorer detection.
  • The '-preselect' command line option now works together with relative database file paths.
  • Improved quoted app paths parsing.
  • Extended culture invariance.
  • Improved synchronization performance.
  • Improved internal keypress routing.
  • Last access times by default are not shown in the UI anymore.
  • TrlUtil: improved dialog focusing when showing message boxes.
  • KeePassLib/KPScript: improved support for running on systems without any GUI.
  • Various code optimizations.
  • Minor other improvements.
  • Bugfixes:
  • Fixed a crash that could occur if the option 'Show expired entries (if any)' is enabled and a trigger switches to a different locked database when unlocking a database.
  • The tab bar is now updated correctly after closing an inactive database by middle-clicking its tab.
  • Column display orders that are unstable with respect to linear auto-adjusting assignment are now restored correctly.



Changes for v2.22 - v2.23

  • New Features:
  • New password quality estimation algorithm.
  • Added toolbar buttons: 'Open URL(s)', 'Copy URL(s) to Clipboard' and 'Perform Auto-Type'.
  • Added 'Generate Password' command in the context menu of the KeePass system tray icon.
  • Added 'Copy history' option in the entry duplication dialog (enabled by default).
  • Added 'Duplicate Group' context menu command.
  • In the MRU list, currently opened files now have an '[Opened]' suffix and are blue.
  • When a dialog is displayed, (double) clicking the KeePass system tray icon now activates the dialog.
  • Added {T-REPLACE-RX:...} placeholder, which replaces text using a regular expression.
  • Added {VKEY-NX X} and {VKEY-EX X} special key codes.
  • Added 'Perform auto-type with selected entry' trigger action.
  • Added 'Import into active database' trigger action.
  • Mozilla Bookmarks HTML import: added support for groups, bookmark descriptions and icons.
  • Mozilla Bookmarks JSON import: bookmark descriptions are now imported into the note fields of entries.
  • RoboForm import: added support for the new file format.
  • Added support for importing Network Password Manager 4.0 CSV files.
  • Enhanced SafeWallet XML importer to additionally support importing web entries and groups from very old export file versions (for newer versions this was already supported).
  • Added database repair mode warning.
  • Added option to accept invalid SSL certificates (turned off by default).
  • Added user activity notification event for plugins.
  • File transactions for FTP URLs are now always disabled when running under .NET 4.0 in order to workaround .NET bug 621450.
  • Added workaround for Mono list view item selection bug.
  • Added workaround for Mono bug 649266; minimizing to tray now removes the task bar item and restoring does not result in a broken window anymore.
  • Added workaround for Mono bug 5795; text and selections in password boxes are now drawn properly (a monospace font can only be used on Windows due to the bug).
  • Added workaround for Mono bug 12525; dialog banners are now drawn correctly again.
  • Added workaround for Mono form loading bug.
  • KPScript: added 'Import' command.
  • KPScript: the 'ListEntries' command now also outputs date/time fields of entries.
  • Improvements / Changes:
  • When the option for remembering the last used database is enabled, KeePass now remembers the last active database (instead of the last opened or saved database).
  • The 'Add Group' command and the F2 key in the groups tree view now open the group editing dialog; in-place tree node label editing is disabled.
  • Custom string and plugin-provided columns in the 'Configure Columns' dialog are sorted alphabetically now.
  • Improved behavior when closing inactive databases.
  • Improved support for trigger actions during database closing.
  • The 'Special' GUI character set now includes '|' and '~'.
  • The 'High ANSI' character set now consists of the range [U+0080, U+00FF] except control and non-printable characters.
  • The options dialog is now listed in the task bar when it is opened while KeePass is minimized to the system tray.
  • A remembered user account usage state can now be preset even when the user account option is disabled using key prompt configuration flags.
  • Improved initial input focus in key creation/prompt dialogs when key creation/prompt configuration flags are specified.
  • During synchronization, the status dialog is now closed after all files have been saved.
  • Improved behavior of the global KeePass activation hot key when a dialog is displayed.
  • Changed auto-type command icon.
  • Shortened product name in main window title.
  • Improved data URI validation.
  • Custom clipboard data is now encoded as data URI (with a vendor-specific MIME type).
  • Improved configuration loading performance.
  • Enhanced IO connection problem diagnostics.
  • Improved single instance checking on Unix-like systems.
  • KeePassLibC DLLs and ShInstUtil are now explicitly marked as DEP- and ASLR-compatible (like the executable file).
  • Various UI improvements.
  • Various code optimizations.
  • Minor other improvements.
  • Bugfixes:
  • The suffixes to the 'Inherit setting from parent' options on the 'Behavior' tab of the group editing dialog now correctly show the inherited settings of the current group's parent.
  • When locked, the main window's title doesn't show the full path of the database anymore when the option 'Show full path in title bar (instead of file name only)' is turned off.
  • The status bar is now updated correctly after sorting by a column.



Changes for v2.21 - v2.22

  • New Features:
  • When the option for remembering key sources is enabled, KeePass now also remembers whether the user account is required.
  • Added 'View' -> 'Grouping in Entry List' menu.
  • Added 'Close active database' trigger action.
  • Added '-ioiscomplete' command line option, which tells KeePass that the path and file system credentials are complete (the 'Open URL' dialog will not be displayed then).
  • Added support for importing SafeWallet XML files (3.0.4 and 3.0.5).
  • Added support for importing TurboPasswords 5.0.1 CSV files.
  • LastPass CSV importer: added support for group trees.
  • Alle meine Passworte XML importer: added support for custom fields and group names with special characters.
  • Password Safe XML importer: added support for the e-mail field.
  • Added 'Help' button in the generic CSV importer dialog.
  • Added workaround for .NET bug 642188; top visible list view items are now remembered in details view with groups enabled.
  • Added workaround for Mono form title bar text update bug (which e.g. caused bug 801414).
  • Improvements / Changes:
  • After closing a character picking dialog, KeePass now explicitly activates the previous window.
  • Improved behavior when cancelling the icon picker dialog.
  • Main window activation redirection now works with all KeePass dialogs automatically.
  • The window state of the current database is now remembered before opening another database.
  • Previous parameters are now discarded when switching between different trigger event/condition/action types.
  • Unified separators in group paths.
  • The UI state is now updated after adding an entry and clicking an entry reference link in the entry view.
  • The '-entry-url-open' command line option now searches for matching entries in all open databases.
  • Improved database context determination when opening an URL.
  • Added support for special values in date/time fields imported from KeePass 1.x.
  • Improved HTML entity decoding (support for more entities and CDATA sections, improved performance, ...).
  • RoboForm HTML importer: URLs are converted to lower-case now and support for a special order rotation of attributes has been added.
  • Removed Password Gorilla CSV importer; users should use the generic CSV importer (which can import more data than the old specialized CSV importer).
  • Improved file discoveries.
  • Improved test form entry auto-type window definition.
  • In the MSI package, the version is now included in the product name.
  • Native key transformation library: replaced Boost threads by Windows API threads (because Boost threads can result in crashes on restricted Windows 7 x64 systems).
  • Various UI improvements.
  • Various code optimizations.
  • Minor other improvements.



Changes for v2.20.1 - v2.21

  • Mainly features auto-type enhancements, support for more character encodings in various areas, many user interface improvements, and various other minor new features and improvements.



Changes for v2.20 - v2.20.1

  • Improved support for images with DPI resolutions different from the DPI resolution of the display device.
  • {GOOGLECHROME} placeholder: updated detection code to also support the latest versions of Chrome.
  • The option to lock on remote control mode changes now additionally watches for remote connects and disconnects.
  • Improved Windows registry accesses.
  • Improved behavior when the user deletes the system temporary directory.
  • On Unix-like systems, KeePass now stores most of its temporary files in a private temporary directory (preferably in $XDG_RUNTIME_DIR).
  • Added detection support for the following web browsers on Unix-like systems: Rekonq, Midori and Dooble.
  • KeePass does not try to set the WM_CLASS property on Mac OS X systems anymore.
  • Modified some icons to work around unsupported PNG transparency keys in Mono.
  • Various code optimizations.
  • Minor other improvements.



Changes for v1.24 - v2.20

  • New Features:
  • Header data in KDBX files is now authenticated (to prevent silent data corruption attacks; thanks to P. Gasti and K. B. Rasmussen).
  • Added management of working directories (a separate working directory is remembered for each file dialog context; working directories are remembered relatively to KeePass.exe; the management can be deactivated by turning off the new option 'Remember working directories').
  • Added option to cancel auto-type when the target window title changes.
  • Added quick search box in the toolbar of the internal text editor.
  • Files can now be attached to entries by using drag&drop from Windows Explorer to the attachments list in the entry editing dialog.
  • Added '-pw-stdin' command line option to make KeePass read the master password from the StdIn stream.
  • Added placeholders to get parts of the entry URL: {URL:SCM}, {URL:HOST}, {URL:PORT}, {URL:PATH} and {URL:QUERY}.
  • Added a 'Details' button in the plugin load failure message box (when clicked, detailed error information for developers is shown).
  • Added warning icon left of the Windows user account option description in the master key creation dialog.
  • Added support for more image file formats (e.g. when importing custom client icons).
  • Added support for importing DesktopKnox 3.2 XML files.
  • The generic CSV importer now guesses whether the option to ignore the first row should be enabled or not (the user of course can still specify it manually, too).
  • Added support for exporting to KeePass 1.x CSV files.
  • Added support for moving the PLGX cache to a different remote drive.
  • The Spr engine is now extensible, i.e. plugins can provide additional transformations/placeholders.
  • On Unix-like systems, KeePass now uses the 'xsel' utility for clipboard operations, if 'xsel' is installed (in order to work around Mono clipboard bugs).
  • Added Mono workaround to set the WM_CLASS property.
  • Added workaround for Mono splitter bug.
  • The 'PrepMonoDev.sh' script now removes the serialization assembly generating post build event.
  • TrlUtil: added support for importing PO files.
  • Improvements / Changes:
  • Improved FTP file existence checking.
  • High DPI UI improvements.
  • The database is not marked as modified anymore when using in-place label editing to fake-edit a group's name (i.e. when the final new name is the same as the previous one).
  • Password is not auto-repeated anymore when trying to unhide it fails due to the policy 'Unhide Passwords' being disabled.
  • Improved menu accelerator and shortcut keys.
  • Changed IO connection name display format.
  • Improved browser detection on Mac OS X.
  • Task dialog thread safety improvements.
  • Added UI check during import for KPScript.
  • Upgraded and improved installer (now uses Unicode, LZMA2 compression, ...).
  • Various UI improvements.
  • Various code optimizations.
  • Minor other improvements.
  • Bugfixes:
  • On Windows systems, new line sequences in text to be shown in a standard multiline text box are now converted to Windows format.



Changes for v2.17 - v2.18

  • The update check now also checks for plugin updates (if plugin developers provide version information files).
  • When starting KeePass 2.18 for the first time, it asks whether to enable the automatic update check or not (if not enabled already).
  • When closing the entry editing dialog by closing the window (using [X], Esc, ...) and there are unsaved changes, KeePass now asks whether to save or discard the changes; only when explicitly clicking the 'Cancel' button, KeePass doesn't prompt.
  • When not hiding passwords using asterisks, they don't need to be repeated anymore.
  • Password repetition boxes now provide instant visual feedback whether the password has been repeated correctly (if incorrect, the background color is changed to light red).
  • When clicking an '***' button to change the visibility of the entered password, KeePass now automatically transfers the input focus into the password box.
  • Visibility of columns in the auto-type entry selection dialog can now be customized using the new 'Options' button.
  • Added auto-type option 'An entry matches if the host component of its URL is contained in the target window title'.
  • Added shortcut keys: Ctrl+Shift+O for 'Open URL', Ctrl+Shift+U for copying URLs to the clipboard, Ctrl+I for 'Add Entry', Ctrl+R for synchronizing with a file, Ctrl+Shift+R for synchronizing with a URL.
  • Ensuring same keyboard layouts during auto-type is now optional (option enabled by default).
  • Plain text KDB4 XML exports now store the memory protection flag of strings in an attribute 'ProtectInMemory'.
  • Added option to use database lock files (intended for storage providers that don't lock files while writing to them, like e.g. some FTP servers); the option is turned off by default (and especially for local files and files on a network share it's recommended to leave it turned off).
  • Added UIFlags bit for disabling the controls to specify after how many days the master key should/must be changed.
  • Added support for in-memory protecting strings that are longer than 65536 characters.
  • Added workaround for '@' .NET SendKeys issue.
  • Improvements / Changes:
  • NET 4.0 is now preferred, if installed.
  • PLGX plugins are now preferably compiled using the .NET 4.0 compiler, if KeePass is currently running under the 4.0 CLR.
  • Automatic update checks are now performed at maximum once per day (you can still check manually as often as you wish).
  • Auto-Type: entry titles and URLs are now Spr-compiled before being compared with the target window title.
  • Decoupled the options 'Show expired entries' and 'Show entries that will expire soon'.
  • Specifying the data hiding setting (using asterisks) in the column configuration dialog is now done using a checkbox.
  • The entry view now preferably uses the hiding settings (asterisks) of the entry list columns.
  • Improved entry expiry date calculation.
  • Enhanced Password Agent importer to support version 2.6.2.
  • Enhanced SplashID importer to import last modification dates.
  • Improved locating of system executables.
  • Password generator profiles are now sorted by name.
  • Separated built-in and user-defined password generator profiles (built-in profiles aren't stored in the configuration file anymore).
  • Improved naming of shortcut keys, and shortcut keys are now displayed in tooltips.
  • Internal window manager can now close windows opened in other threads.
  • Improved entry touching when closing the entry editing dialog by closing the window (using [X], Esc, ...).
  • Improved behavior when entering an invalid URL in the 'Open URL' dialog.
  • Improved workaround for Mono tab bar height bug.
  • ShInstUtil: improved Native Image Generator version detection.
  • Unified in-memory protection.
  • In-memory protection performance improvements.
  • Developers: in-memory protected objects are now immutable and thread-safe.
  • Various UI text improvements.
  • Various code optimizations.
  • Minor other improvements.
  • Bugfixes:
  • The cached/temporary custom icons image list is now updated correctly after running the 'Delete unused custom icons' command.



Changes for v2.16 - v2.17

  • New Features:
  • Multiple auto-type sequences can now be defined for a window in one entry.
  • The auto-type entry selection dialog now displays the sequence that will be typed.
  • The auto-type entry selection dialog is now resizable; KeePass remembers the dialog's position, size and the list view column widths.
  • Added auto-type option 'An entry matches if its URL is contained in the target window title'.
  • Added two options to show dereferenced data in the main entry list (synchronously or asynchronously).
  • Dereferenced data fields are now shown in the entry view of the main window and the auto-type entry selection dialog (additionally to the references).
  • Field references in the entry view are now clickable; when clicking one, KeePass jumps to the data source entry.
  • Added option in the 'Find' dialog to search in dereferenced data fields.
  • Added option to search in dereferenced data fields when performing a quick search (toolbar in main window).
  • The 'Find' dialog now shows a status dialog while searching for entries.
  • The main window now shows a status bar and the UI is disabled while performing a quick search.
  • Added context menu commands to open the URL of an entry in a specific browser.
  • Added {SAFARI} browser path placeholder.
  • Added {C:...} comment placeholder.
  • Added entry duplication options dialog (appending "- Copy" to entry titles, and/or replacing user names and passwords by field references to the original entries).
  • Added option to focus the quick search box when restoring from taskbar (disabled by default).
  • Added tray context menu command to show the options dialog.
  • Source fields are now compiled before using them in a {PICKCHARS} dialog.
  • Added 'Copy Link' rich text box context menu command.
  • Before printing, the data/format dialog now shows a print dialog, in which the printer can be selected.
  • Added application policy to ask for the current master key before printing.
  • Added support for importing Passphrase Keeper 2.50 HTML files (in addition to the already supported 2.70 format).
  • KeePass now removes zone identifiers from itself, ShInstUtil and the CHM help file.
  • Listing currently opened windows works under Unix-like systems now, too.
  • Alternating item background colors are now also supported in list views with item groups.
  • IOConnection now supports reading from data URIs (RFC 2397).
  • Group headers are now skipped when navigating in single selection list views using the arrow keys.
  • Added detection support for the following web browsers on Unix-like systems: Firefox, Opera, Chromium, Epiphany, Arora, Galeon and Konqueror.
  • Added documentation of the synchronization feature.
  • Key provider plugins can now declare that they're compatible with the secure desktop mode, and a new property in the query context specifies whether the user currently is on the secure desktop.
  • Added workaround for a list view sorting bug under Windows XP.
  • Added workaround for a .NET bug where a cached window state gets out of sync with the real window state.
  • Added workaround for a Mono WebRequest bug affecting WebDAV support.
  • Improvements / Changes:
  • Items in the auto-type entry selection dialog can now be selected using a single click.
  • When performing global auto-type, the Spr engine now uses the entry container database instead of the current database as data source.
  • The generated passwords list in the password generator dialog now uses the password font (monospace by default).
  • The last modification time of an entry is now updated when a new password is generated using the {NEWPASSWORD} placeholder.
  • The overlay icon for the taskbar button (on Windows 7) is now restored when Windows Explorer crashes and when starting in minimized and locked mode.
  • Improved opening of CHM help file.
  • The buttons in file save dialogs now have accelerator keys.
  • Separated URL scheme overrides into built-in and custom ones.
  • Improved tray command state updating.
  • The default tray command is now rendered using a bold font.
  • The main window is now disabled while searching and removing duplicate entries.
  • Improved banner handling/updating in resizable dialogs.
  • The 'Ctrl+U' shortcut hint is now moved either to the open or to the copy command, depending on whether the option 'Copy URLs to clipboard instead of opening them' is enabled or not.
  • Improved command availability updating of rich text context menus.
  • Quick searches are now invoked asynchronously.
  • Improved quick search performance.
  • The option to minimize the main window after locking the KeePass workspace is now enabled by default.
  • When performing auto-type, newline characters are now converted to Enter keypresses.
  • Auto-type on Unix-like systems: improved sending of backslash characters.
  • On Unix-like systems, the default delay between auto-typed keystrokes is now 3 ms.
  • Spr engine performance improvements.
  • Changing the in-memory protection state of a custom entry string is now treated as a database change.
  • Some options in the options dialog are now linked (e.g. the option 'Automatically search key files also on removable media' can only be enabled when 'Automatically search key files' is enabled).
  • Most items with default values aren't written to the configuration file anymore (resulting in a smaller file and making it possible to change defaults in future versions).
  • Path separators in the configuration file are now updated for the current operating system.
  • Improved 'xdotool' version detection.
  • Improved IO response handling when deleting/renaming files.
  • Various UI text improvements.
  • Various code optimizations.
  • Minor other improvements.
  • Bugfixes:
  • Status bar text is now correctly updated to 'Ready' after an unsuccessful/cancelled database opening attempt.
  • Password generation based on patterns: escaped curly brackets are now parsed correctly.



Changes for v2.15 - v2.16

  • KeePass 2.16 mainly features search enhancements, proxy support, many improvements for Mono / Unix-like systems, and various other minor new features and improvements



Changes for v2.14 - v2.15

  • New Features:
  • Added option to show the master key dialog on a secure desktop (similar to Windows' UAC; almost no keylogger works on a secure desktop; the option is disabled by default for compatibility reasons).
  • Added option to limit the number of history items per entry (the default is 10).
  • Added option to limit the history size per entry (the default is 6 MB).
  • Added {PICKCHARS} placeholder, which shows a dialog to pick certain characters from an entry string; various options like specifying the number of characters to pick and conversion to down arrow keypresses are supported; see the one page long documentation on the auto-type help page; the less powerful {PICKPASSWORDCHARS} is now obsolete (but still supported for backward compatibility).
  • The character picking dialog now remembers and restores its last position and size.
  • KDBX file format: attachments are now stored in a pool within the file and entries reference these items; this reduces the file size a lot when there are history items of entries having attachments.
  • KDBX file format: attachments are now compressed (if the compression option is enabled) before being Base64-encoded, compressed and encrypted; this results in a smaller file, because the compression algorithm works better on the raw data than on its encoded form.
  • PLGX plugins can now be loaded on Unix-like systems, too.
  • Added option to specify a database color; by specifying a color, the main window icon and the tray icon are recolored and the database tab (shown when multiple databases are opened in one window) gets a colored rectangle icon.
  • New rich text builder, which supports using multiple languages in one text (e.g. different Chinese variants).
  • Added 'Sort By' popup menu in the 'View' menu.
  • Added context menu commands to sort subgroups of a group.
  • Added option to clear master key command line parameters after using them once (enabled by default).
  • Added application policies to ask for the current master key before changing the master key and/or exporting.
  • Added option to also unhide source characters when unhiding the selected characters in the character picking dialog.
  • Added ability to export custom icons.
  • Added 'String' trigger condition.
  • Added support for importing DataViz Passwords Plus 1.007 CSV files.
  • Enhanced 1Password Pro importer to also support 1PW CSV files.
  • Enhanced FlexWallet importer to also support version 2006 XML files (in addition to version 1.7 XML files).
  • Enabled auto-suggest for editable drop-down combo boxes (and auto-append where it makes sense).
  • Pressing Ctrl+Enter in the rich text boxes of the entry dialog and the custom string dialog now closes with OK (if possible).
  • Added option to cancel auto-type when the target window changes.
  • Auto-type on Unix-like systems: added support for key modifiers.
  • Added '--saveplgxcr' command line option to save compiler results in case the compilation of a PLGX plugin fails.
  • Added workaround for % .NET SendKeys issue.
  • Added workaround for Mono bug 620618 in the main entry list.
  • Improvements / Changes:
  • Improved key file suggestion performance.
  • When the master key change application policy is disabled and the master key expires (forced change), KeePass now shows the two information dialogs only once per opening.
  • After removing the password column, hiding behind asterisks is suggested by default now when showing the column again.
  • TAN entries now expire on auto-type, if the option for expiring TANs on use is enabled.
  • Auto-type now sends acute and grave accents as separate characters.
  • Auto-type now explicitly skips the taskbar window when searching for the target window.
  • Multiple lines are now separated in the entry list and in the custom string list of the entry dialog by a space.
  • RoboForm importer: improved multiline value support.
  • Improved UNC path support.
  • Improved entry list refresh performance.
  • Improved UI state update performance.
  • Entry list context menus are now configured instantly.
  • Inapplicable group commands are now disabled.
  • Improved control focusing.
  • Improved clipboard handling.
  • Copying and pasting whole entries is now also supported on Windows 98 and ME.
  • Improved releasing of dialog resources.
  • Improved keys/placeholders box in auto-type editing dialog.
  • Improved user-friendliness in UAC dialogs.
  • Tooltips of the tab close button and the password repeat box can be translated now.
  • Improved help (moved placeholders to separate page, ...).
  • KeePassLibSD now uses the SHA-256 implementation of Bouncy Castle.
  • Upgraded installer.
  • Various code optimizations.
  • Minor other improvements.
  • Bugfixes:
  • Window titles are now trimmed, such that auto-type also works with windows whose titles have leading or trailing whitespace characters.
  • Detection of XSL files works under Linux / Mac OS X now, too.



Changes for v2.13 - v2.14

  • New Features:
  • Added option to lock after some time of global user inactivity.
  • Added option to lock when the remote control status changes.
  • Auto-type on Unix-like systems: added special key code support (translation to X KeySyms) and support for {DELAY X} and {DELAY=X}.
  • Added window activation support on Unix-like systems.
  • Auto-type on Windows: added {VKEY X} special key code (sends virtual key X).
  • Added support for importing DataVault 4.7 CSV files.
  • Added support for importing Revelation 0.4 XML files.
  • Added 'Auto-Type - Without Context' application policy to disable the 'Perform Auto-Type' command (Ctrl+V), but still leave global auto-type available.
  • Added option to collapse newly-created recycle bin tree nodes.
  • Added 'Size' column in the history list of the entry dialog.
  • Added trigger action to remove custom toolbar buttons.
  • Added kdbx:// URL scheme overrides (for Windows and Unix-like systems; disabled by default).
  • Added KeePass.exe.config file to redirect old assemblies to the latest one, and explicitly declare .NET 4.0 runtime support.
  • Added documentation for the '-pw-enc' command line parameter, the {PASSWORD_ENC} placeholder and URL overrides.
  • Added workaround for ^/& .NET SendKeys issue.
  • Improvements / Changes:
  • New locking timer (using a timeout instead of a countdown).
  • Improved locking when the Windows session is being ended or switched.
  • Improved multi-database locking.
  • Separated the options for locking when the computer is locked and the computer is about to be suspended.
  • {FIREFOX} placeholder: added support for registry-redirected 32-bit Firefox installations on 64-bit Windows systems.
  • File transactions: the NTFS/EFS encryption flag is now also preserved when the containing directory isn't encrypted.
  • The IPC channel name on Unix-like systems is now dependent on the current user and machine name.
  • KeePass now selects the parent group after deleting a group.
  • Entries are now marked as modified when mass-changing their colors or icons.
  • Key states are now queried on interrupt level.
  • A {DELAY=X} global delay now affects all characters of a keystroke sequence when TCATO is enabled, too.
  • Improved dialog closing when exiting automatically.
  • Plugin-provided entry list columns can now be right-aligned at KeePass startup already.
  • Removed KDBX DOM code.
  • Installer: the KeePass start menu shortcut is now created directly in the programs folder; the other shortcuts have been removed (use the Control Panel for uninstalling and the 'Help' menu in KeePass to access the help).
  • Various code optimizations.
  • Minor other improvements.
  • Bugfixes:
  • Quotes in parameters for the 'Execute command line / URL' trigger action are now escaped correctly.
  • Auto-type on Unix-like systems: window filters without wildcards now match correctly.



Changes for v2.12 - v2.13

  • New Features:
  • Password quality estimation algorithm: added check for about 1500 most common passwords (these are rated down to 1/8th of their statistical rating; Bloom filter-based implementation).
  • Global auto-type (using a system-wide hot key) is now possible on Unix-like systems (see the documentation for setup instructions, section 'Installation / Portability' in the 'KeePass 2.x' group; thanks to Jordan Sissel for enhancing 'xdotool').
  • Added IPC functionality for Unix-like systems.
  • Added possibility to write export plugins that don't require an output file.
  • Tag lists are sorted alphabetically now.
  • Password text boxes now use a monospace font by default.
  • Added option to select a different font for password text boxes (menu 'Tools' -> 'Options' -> tab 'Interface').
  • Added support for importing Password Prompter 1.2 DAT files.
  • Added ability to export to Windows/IE favorites.
  • Added ability to specify IO credentials in the 'Synchronize' trigger action.
  • Added ability to specify IO credentials and a master key in the 'Open database file' trigger action.
  • If IO credentials are stored, they are now obfuscated.
  • Custom colors in the Windows color selection dialog are now remembered.
  • Added high resolution version of the KeePass application icon.
  • Improved lock overlay icon (higher resolution).
  • PLGX loader: added support for unversioned KeePass assembly references.
  • Improvements / Changes:
  • Added workaround to avoid alpha transparency corruption when adding images to an image list.
  • Improved image list generation performance.
  • Added workaround to display the lock overlay icon when having enabled the option to start minimized and locked.
  • Improved group and entries deletion confirmation dialogs (with preview; only Windows Vista and higher).
  • The password character picking dialog now offers the raw password characters instead of an auto-type encoded sequence.
  • PINs importer: improved importing of expiry dates.
  • Some button icons are now resized to 16x15 when the 16x16 icon is too large.
  • Renamed character repetition option in the password generator for improved clarity.
  • Improved workspace locking.
  • Locking timer is now thread-safe.
  • Added code to prevent loading libraries from the current working directory (to avoid binary planting attacks).
  • Removed Tomboy references (on Unix-like systems).
  • Various code optimizations.
  • Minor other improvements.
  • Bugfixes:
  • {NEWPASSWORD} placeholder: special characters in generated passwords are now transformed correctly based on context (auto-type, command line, etc.).



Changes for v2.11 - v2.12

  • New Features:
  • Auto-type window definitions in custom window-sequence pairs are now Spr-compiled (i.e. placeholders, environment variables, etc. can be used).
  • Global auto-type delay: added support for multi-modified keys and special keys.
  • Added 'New Database' application policy flag.
  • Added 'Copy Whole Entries' application policy flag.
  • Multi-monitor support: at startup, KeePass now ensures that the main window's normal area at least partially overlaps the virtual screen rectangle of at least one monitor.
  • RoboForm importer: URLs without protocol prefix are now prefixed automatically (HTTP).
  • Entry-dependent placeholders can now be used in most trigger events, conditions and actions (the currently focused entry is used).
  • Auto-type on Unix-like systems: KeePass now shows an informative error message when trying to invoke auto-type without having installed the 'xdotool' package.
  • Improvements / Changes:
  • New column engine: drag&dropping hidden fields works as expected again (the field data is transferred, not asterisks).
  • Improved restoration of a maximized main window.
  • Improved error message when trying to import/export data from/to a KDB file on a non-Windows operating system.
  • Minor other improvements.
  • Bugfixes:
  • (None).



Changes for v2.10 - v2.11

  • New Features:
  • Added entry tags (you can assign tags to entries in the entry editing window or by using the 'Selected Entries' context menu; to list all entries having a specific tag, choose the tag either in the 'Edit' main menu or in the 'Show Entries' toolbar drop-down button).
  • Completely new entry list column engine; the columns are dynamic now, custom entry strings can be shown in the list, to configure go 'View' -> 'Configure Columns...'; the column engine is also extensible now, i.e. plugins can provide new columns.
  • Added 'Size' entry list column (shows the approximate memory required for the entry).
  • Added 'History (Count)' entry list column (double-clicking a cell of this column opens the entry editing window and automatically switches to the 'History' tab).
  • Added 'Expiry Time (Date Only)' entry list column.
  • Added options to specify the number of days until the master key of a database is recommended to and/or must be changed.
  • Added support for exporting selected entries to KDB.
  • Added 'FileSaveAsDirectory' configuration key to specify the default directory for 'Save As' database file dialogs.
  • Double-clicking a history entry in the entry editing dialog now opens/views the entry.
  • It's now possible to tab from menus and toolbars to dialog controls.
  • Added option to turn off hiding in-memory protected custom strings using asterisks in the entry view.
  • Added workaround for FTP servers sending a 550 error after opening and closing a file without downloading data.
  • Added 'Unhide Passwords' application policy flag.
  • Password Depot importer: some icons are converted now.
  • {GOOGLECHROME} placeholder: updated detection code to also support the latest versions of Chrome.
  • The main window now uses the shell font by default.
  • On Windows Vista and higher, Explorer-themed tree and list views are now used in the main window.
  • On Windows 7 and higher, the main window peek preview is now disabled when the KeePass workspace is locked.
  • Installer: added option to optimize the on-demand start-up performance of KeePass.
  • TrlUtil: added 3 dots string validation.
  • Improvements / Changes:
  • Improved entry list item selection performance (defer UI state update on selection change burst).
  • Improved special key code conversion in KDB importer.
  • Icon picker dialog now has a 'Close' button.
  • When sorting is enabled, the entry list view now doesn't get destroyed anymore when trying to move entries.
  • Main window is now brought to the foreground when untraying.
  • Removed grid lines option.
  • Reduced size of MSI file.
  • Various performance improvements.
  • Various code optimizations.
  • Minor other improvements.
  • Bugfixes:
  • No file path is requested anymore when double-clicking an import source that doesn't require a file.



Changes for v2.09 - v2.10

  • New Features:
  • Translation system: added support for right-to-left scripts.
  • Added {HMACOTP} placeholder to generate HMAC-based one-time passwords as specified in RFC 4226 (the shared secret is the UTF-8 representation of the value of the 'HmacOtp-Secret' custom entry string field, and the counter is stored in decimal form in the 'HmacOtp-Counter' field).
  • On Windows 7, KeePass now shows a 'locked' overlay icon on the taskbar button when the database is locked.
  • On Windows 7, the database loading/saving progress is now shown on the taskbar button.
  • Added option to disable automatic searching for key files.
  • Added KDBX database repair functionality (in File -> Import).
  • Added support for expired root groups.
  • Added global delay support for shifted special keys.
  • Added 'Change Master Key' application policy flag.
  • Added 'Edit Triggers' application policy flag.
  • Added trigger action to activate a database (select tab).
  • Added configuration options to allow enforcing states (enabled, disabled, checked, unchecked) of key source controls in the master key creation and prompt dialogs (see 'Composite Master Key' documentation page).
  • Added option to disable the 'Save' command (instead of graying it out) if the database hasn't been modified.
  • Added support for importing KeePassX 0.4.1 XML files.
  • Added support for importing Handy Safe 5.12 TXT files.
  • Added support for importing Handy Safe Pro 1.2 XML files.
  • Added support for importing ZDNet's Password Pro 3.1.4 TXT files.
  • Added dialog for selecting the encoding of text files to be attached to an entry.
  • Added option to search for passwords in quick finds (disabled by default).
  • Added Ctrl+S shortcut in the internal data editor.
  • Internal data editor window can now be maximized.
  • Document tabs can now be closed by middle-clicking on them.
  • Most strings in the trigger system are now Spr-compiled (i.e. placeholders, environment variables, etc. can be used).
  • Added '--lock-all' and '--unlock-all' command line options to lock/unlock the workspaces of all other KeePass instances.
  • Added 'pw-enc' command line option and {PASSWORD_ENC} placeholder.
  • Added preliminary auto-type support for Linux (right-click on an entry and select 'Perform Auto-Type'; the 'xdotool' package is required).
  • Added option to enforce using the system font when running under KDE and Gnome (option enabled by default).
  • HTML exports are now XHTML 1.0 compliant.
  • Printing: added option to sort entries.
  • Printing: group names are now shown as headings.
  • KPScript: added '-CreateBackup' option for the EditEntry command (to create backups of entries before modifying them).
  • The PLGX plugin cache root path can now be specified in the configuration file (Application/PluginCachePath).
  • Plugin developers: added ability to write entropy providers that can update the internal pool of the cryptographically strong random number generator.
  • Plugin developers: added some public PwEntryForm properties, events and methods.
  • Plugin developers: added entry template events.
  • Plugin developers: added group and entry touching events.
  • Plugin developers: added main window focus changing event.
  • Plugin developers: added support for writing format providers for the internal attachments viewer.
  • Improvements / Changes:
  • Expired icons of groups are non-permanent now.
  • Improved search performance and in-memory protection compatibility.
  • The SendKeys class now always uses the SendInput method (not JournalHook anymore).
  • Improved auto-type delay handling.
  • Two-channel auto-type obfuscation: added support for default delays.
  • The default auto-type delay is now 10 ms.
  • Improved top-most window auto-type support.
  • Improved high DPI support (text rendering, banners, ...).
  • Temporary file transaction files are now deleted before writing to them.
  • Broadcasted file IPC notification messages do not wait infinitely for hanging applications anymore.
  • On Windows XP and higher, KeePass now uses alpha-transparent icons in the main entry list.
  • In the entry editing dialog, when moving a custom string to a standard field, the string is now appended to the field (instead of overwriting the previous contents of the field).
  • Improved UTF-8 encoding (don't emit byte order marks).
  • Improved field to standard field mapping function.
  • HTML exports do not contain byte-order marks anymore.
  • For improved clarity, some controls are now renamed/changed dynamically when using the password generator without having a database open.
  • Improved auto-type definition conversion for KDB exports.
  • Standard field placeholders are now correctly removed when auto-typing, if the standard field doesn't exist.
  • Improved icon picker cancel blocking when removing an icon.
  • The default workspace locking time is now 300 seconds (but the option is still disabled by default).
  • Modern task dialogs are now displayed on 64-bit Windows systems, too.
  • Improved file corruption error messages.
  • Improved entry attachments renaming method.
  • Double-clicking an attachment in the entry editing dialog now opens it in the internal viewer (the internal editor can only be invoked in the main window).
  • When attachments are edited using the internal editor, the entry's last modification time is now updated.
  • Improved plugin loading (detect PLGX cache files).
  • If the application policy disallows clipboard operations, KeePass doesn't unnecessarily decrypt sensitive data anymore.
  • Added tooltip for the 'View' toolbar drop-down button.
  • Improved menu accelerator and shortcut keys.
  • Upgraded installer.
  • Installer: various minor improvements.
  • Various performance improvements.
  • Various code optimizations.
  • Minor other improvements.
  • Bugfixes:
  • No exception is thrown anymore when lowering the clipboard auto-clear time in the options below the value of a currently running clearing countdown.
  • The 'Show expired entries' functionality now also works when there's exactly one matching entry.



Changes for v2.08 - v2.09

  • New Features:
  • Added option to use file transactions when writing databases (enabled by default; writing to a temporary file and replacing the actual file afterwards avoids data loss when KeePass is prevented from saving the database completely).
  • Added PLGX plugin file format.
  • Enhanced database synchronization by structure merging (relocation/moving and reordering groups and entries).
  • Added synchronization 'Recent Files' list (in 'File' menu).
  • Synchronization / import: added merging of entry histories.
  • Synchronization / import: backups of current entries are created automatically, if their data would be lost in the merging process.
  • Database name, description, default user name, entry templates group and the recycle bin settings are now synchronized.
  • Added {NEWPASSWORD} placeholder, which generates a new password for the current entry, based on the "Automatically generated passwords for new entries" generator profile; this placeholder is replaced once in an auto-type process, i.e. for a typical 'Old Password'-'New Password'-'Repeat New Password' dialog you can use {PASSWORD}{TAB}{NEWPASSWORD}{TAB}{NEWPASSWORD}{ENTER}.
  • Added scheme-specific URL overrides (this way you can for example tell KeePass to open all http- and https-URLs with Firefox or Opera instead of the system default browser; PuTTY is set as handler for ssh-URLs by default; see Options -> Integration).
  • Added option to drop to the background when copying data to the clipboard.
  • Added option to use alternating item background colors in the main entry list (option enabled by default).
  • The Ctrl+E shortcut key now jumps to the quick search box.
  • Added auto-type sequence conversion routine to convert key codes between 1.x and 2.x format.
  • Added workaround for internal queue issue in SendKeys.Flush.
  • Added more simple clipboard backup routine to workaround clipboard issues when special formats are present.
  • Added native clipboard clearing method to avoid empty data objects being left in the clipboard.
  • Added import support for custom icons.
  • Added {GOOGLECHROME} placeholder, which is replaced by the executable path of Google Chrome, if installed.
  • Added {URL:RMVSCM} placeholder, which inserts the URL of the current entry without the scheme specifier.
  • Added ability to search for UUIDs and group names.
  • Toolbar searches now also search in UUIDs and group names.
  • Added {DELAY=X} placeholder to specify a default delay of X milliseconds between standard keypresses in this sequence.
  • Added option to disable verifying written database files.
  • Attachment names in the entry view are now clickable (to open the attachments in the internal editor or viewer).
  • Added Unicode support in entry details view.
  • Added option to render menus and toolbars with gradient backgrounds (enabled by default).
  • MRU lists now have numeric access keys.
  • Added '--entry-url-open' command line option (specify the UUID of the entry as '--uuid:' command line parameter).
  • Added 'Application initialized' trigger event.
  • Added 'User interface state updated' trigger event.
  • Added host reachability trigger condition.
  • Added 'Active database has unsaved changes' trigger condition.
  • Added 'Save active database' trigger action.
  • Added database file synchronization trigger action.
  • Added database file export trigger action.
  • KeePass now restores the last view when opening databases.
  • Added system-wide hot key to execute auto-type for the currently selected entry (configurable in the options).
  • Added option to disable auto-type entry matching based on title (by default an entry matches if its title is contained in the target window title).
  • Added option to disable marking TAN entries as expired when using them.
  • Added option to focus the quick search box when restoring from tray (disabled by default).
  • Added entry context menu commands to sort by UUID and file attachments.
  • Custom string fields are now appended to the notes when exporting to KeePass 1.x KDB files.
  • Enforced configuration files are now item-based (items not defined in the enforced configuration file are now loaded from the global/local configuration files instead of being set to defaults).
  • File transactions are used when writing configuration files.
  • KPScript: added 'ChangeMasterKey' command.
  • ShInstUtil: added check for the presence of .NET.
  • TrlUtil: added command under 'Import' that loads 2.x LNGX files without checking base hashes.
  • TrlUtil: added control docking support.
  • Plugin developers: added static window addition and removal events to the GlobalWindowManager class.
  • Plugin developers: added ability to write custom dialog banner generators (CustomGenerator of BannerFactory).
  • Plugin developers: the IOConnectionInfo of the database is now accessible through the key provider query context.
  • Plugin developers: added static auto-type filter events (plugins can provide own placeholders, do sequence customizations like inserting delays, and provide alternative key sending methods).
  • Plugin developers: added UIStateUpdated main window event.
  • Improvements / Changes:
  • Simple text boxes now convert rich text immediately.
  • Improved entry change detection (avoid unnecessary backups when closing the entry dialog with [OK] but without any changes; detect by content instead of change events).
  • Header in entry selection dialog is now non-clickable.
  • Entry list header now uses native sorting icons.
  • Key providers are now remembered separately from key files.
  • The main window is now the owner of the import method dialog.
  • The global URL override is now also applied for main entry URLs in the entry details view.
  • Improved grouping behavior when disabling entry sorting.
  • Improved field mapping in RoboForm import.
  • Root groups now support custom icons.
  • In the entry dialog, string values are now copied to the clipboard instead of asterisks.
  • Improved import/synchronization status dialog.
  • Improved import/synchronization error message dialogs.
  • Entry history items are now identified by the last modification time instead of last access time.
  • The trigger system can now be accessed directly through 'Tools' -> 'Triggers...', not the options anymore.
  • Changed order of commands in the 'Tools' menu.
  • Improved auto-type target window validity checking.
  • Ctrl-V does not make the main window lose the focus anymore if auto-type is disabled for the currently selected entry.
  • When restoring from tray, the main window is now brought to the foreground.
  • Double-clicking an icon in the icon picker dialog now chooses the icon and closes the dialog.
  • When adding a custom icon to the database, the new icon is selected automatically.
  • When opening a database by running KeePass.exe with the database file path as parameter (and single instance option enabled), the existing KeePass instance will not prompt for keys of previously locked databases anymore when restoring (they are just left in locked state).
  • Unlocking routine doesn't display multiple dialogs anymore.
  • Improved shortcut key handling in main window.
  • Master key change success message now has a distinguishable window title.
  • Improved start position and focus of the URL dialog.
  • Improved layout in options dialog.
  • Improved UUID and UI updates when removing custom icons.
  • Improved window deconstruction when closing with [X].
  • Improved user activity detection.
  • Improved state updating of sorting context menu commands.
  • Improved sorting by UUIDs.
  • Improved naming of options to clarify their meaning.
  • Converted ShInstUtil to a native application (in order to be able to show a warning in case .NET is not installed).
  • Plugins: improved IOConnection to allow using registered custom WebRequest descendants (WebRequest.RegisterPrefix).
  • TrlUtil: improved XML comments generation.
  • Various code optimizations.
  • Minor other improvements.
  • Bugfixes:
  • Password profile derivation function doesn't incorrectly always add standard character ranges anymore.
  • In-memory protection for the title field of new entries can be enabled now.



Changes for v2.07 Beta - v2.08

  • New Features:
  • Key transformation library: KeePass can now use Windows' CNG/BCrypt API for key transformations (about 50% faster than the KeePass built-in key transformation code; by increasing the amount of rounds by 50%, you'll get the same waiting time as in 2.07, but the protection against dictionary and guessing attacks is raised by a factor of 1.5; only Windows Vista and higher).
  • Added support for sending keystrokes (auto-type) to windows that are using different keyboard layouts.
  • Added option to remember key file paths (enabled by default).
  • Added internal editor for text files (text only and RTF formatted text; editor can edit entry attachments).
  • Internal data viewer: added support for showing rich text (text with formatting).
  • Added inheritable group settings for disabling auto-type and searching for all entries in this group (see tab 'Behavior'); for new recycle bins, both properties are set to disabled.
  • Added new placeholders: {DB_PATH}, {DB_DIR}, {DB_NAME}, {DB_BASENAME}, {DB_EXT}, {ENV_DIRSEP}, {DT_SIMPLE}, {DT_YEAR}, {DT_MONTH}, {DT_DAY}, {DT_HOUR}, {DT_MINUTE}, {DT_SECOND}, {DT_UTC_SIMPLE}, {DT_UTC_YEAR}, {DT_UTC_MONTH}, {DT_UTC_DAY}, {DT_UTC_HOUR}, {DT_UTC_MINUTE}, {DT_UTC_SECOND}.
  • The password character picking dialog now supports pre-defining the number of characters to pick; append :k in the placeholder to specify a length of k (for example, {PICKPASSWORDCHARS3:5} would be a placeholder with ID 3 and would pick 5 characters from the password); advantage: when having picked k characters, the dialog closes automatically, i.e. saves you to click [OK].
  • IDs in {PICKPASSWORDCHARSn} do not need to be consecutive anymore.
  • The password character picking dialog now first dereferences passwords (i.e. placeholders can be used here, too).
  • Added '-minimize' command line option.
  • Added '-iousername', '-iopassword' and '-iocredfromrecent' command line options.
  • Added '--auto-type' command line option.
  • Added support for importing FlexWallet 1.7 XML files.
  • Added option to disable protecting the clipboard using the CF_CLIPBOARD_VIEWER_IGNORE clipboard format.
  • Added support for WebDAV URLs (thanks to Ryan Press).
  • Added shortcut keys in master key prompt dialog.
  • Added entry templates functionality (first specify an entry templates group in the database settings dialog, then use the 'Add Entry' toolbar drop-down button).
  • Added AceCustomConfig class (accessible through host interface), that allows plugins to store their configuration data in the KeePass configuration file.
  • Added ability for plugins to store custom data in KDBX database files (PwDatabase.CustomData).
  • Added interface for custom password generation algorithm plugins.
  • URLs in the entry preview window are now always clickable (especially including cmd:// URLs).
  • Added option to copy URLs to the clipboard instead of opening them (Options -> Interface, turned off by default).
  • Added option to automatically resize entry list columns when resizing the main window (turned off by default).
  • Added 'Sync' command in KPScript scripting tool.
  • Added FIPS compliance problems self-test (see FAQ for details about FIPS compliance).
  • Added Rijndael/AES block size validation and configuration.
  • Added NotifyIcon workaround for Mono under Mac OS X.
  • Added confirmation box for empty master passwords.
  • Added radio buttons in auto-type sequence editing dialog to choose between the default entry sequence and a custom one.
  • Added hint that group notes are shown in group tooltips.
  • Added test for KeePass 1.x plugins and an appropriate error message.
  • Added interface for writing master password requirements validation plugins.
  • Key provider plugin API: enhanced key query method by a context information object.
  • Key provider plugin API: added 'DirectKey' property to key provider base class that allows returning keys that are directly written to the user key data stream.
  • Key provider plugin API: added support for exclusive plugins.
  • The '-keyfile' command line option now supports selecting key providers (plugins).
  • Auto-Type: added option to send an Alt keypress when only the Alt modifier is active (option enabled by default).
  • Added warning when trying to use only Alt or Alt-Shift as global hot key modifier.
  • TrlUtil: added search functionality and toolbar.
  • TrlUtil: version is now shown in the window title.
  • Improvements / Changes:
  • Improved database file versioning and changed KDBX file signature in order to prevent older versions from corrupting newer files.
  • ShInstUtil now first tries to uninstall a previous native image before creating a new one.
  • Improved file corruption error messages (instead of index out of array bounds exception text, ...).
  • The 'Open in Browser' command now opens all selected entries instead of just the focused one.
  • Data-editing commands in the 'Tools' menu in the entry dialog are now disabled when being in history viewing mode.
  • Right arrow key now works correctly in group tree view.
  • Entry list is now updated when selecting a group by pressing a A-Z, 0-9 or numpad key.
  • Improved entry list performance and sorting behavior.
  • Improved splitter distance remembering.
  • Improved self-tests (KeePass now correctly terminates when a self-test fails).
  • The attachment column in the main window now shows the names of the attached files instead of the attachments count.
  • Double-clicking an attachment field in the main window now edits (if possible) or shows the first attachment of the entry.
  • Group modification times are now updated after editing groups.
  • Improved scrolling of the entry list in item grouping mode.
  • Changed history view to show last modification times, titles and user names of history entries.
  • KeePass now also automatically prompts to unlock when restoring to a maximized window.
  • Improved file system root directory support.
  • Improved generic CSV importer preview performance.
  • When saving a file, its path is not remembered anymore, if the option for opening the recently used file at startup is disabled.
  • Improved auto-type input blocking.
  • Instead of a blank text, the entry dialog now shows "(Default)" if the default auto-type sequence is used in a window-sequence association.
  • Most broadcasted Windows messages do not wait for hanging applications anymore.
  • Improved main window hiding at startup when the options to minimize after opening a database and to tray are enabled.
  • Default tray action is now dependent on mouse button.
  • New entries can now inherit custom icons from their parent groups.
  • Improved maximized state handling when exiting while the main window is minimized.
  • Improved state updating in key creation form.
  • Improved MRU list updating performance.
  • Improved plugin incompatibility error message.
  • Deprecated {DOCDIR}, use {DB_DIR} instead ({DOCDIR} is still supported for backward compatibility though).
  • Last modification times of TAN entries are now updated.
  • F12 cannot be registered as global hot key anymore, because it is reserved for kernel-mode / JIT debuggers.
  • Improved auto-type statement conversion routine in KeePass 1.x KDB file importer.
  • Improved column width calculation in file/data format dialog.
  • Improved synchronization status bar messages.
  • TrlUtil: base hash for forms is now computed using the form's client rectangle instead of its window size.
  • Various code optimizations.
  • Minor other improvements.
  • Bugfixes:
  • Recycle bin is now cleared correctly when clearing the database.



Changes for v2.06 Beta - v2.07 Beta

  • Added powerful trigger system (when events occur, check some conditions and execute a list of actions; see options dialog in 'Advanced'; more events / conditions / actions can be added later based on user requests, and can also be provided by plugins).
  • Native master key transformations (rounds) are now computed by the native KeePassLibC support library (which contains the new, highly optimized transformation code used by KeePass 1.15, in two threads); on dual/multi core processors this results in almost triple the performance as before (by tripling the amount of rounds you'll get the same waiting time as in 2.06, but the protection against dictionary and guessing attacks is tripled).
  • Added recycle bin (enabled by default, it can be disabled in the database settings dialog).
  • Added Salsa20 stream cipher for CryptoRandomStream (this algorithm is not only more secure than ArcFour, but also achieves a higher performance; CryptoRandomStream defaults to Salsa20 now; port developers: KeePass uses Salsa20 for the inner random stream in KDBX files).
  • KeePass is now storing file paths (last used file, MRU list) in relative form in the configuration file.
  • Added support for importing 1Password Pro CSV files.
  • Added support for importing KeePass 1.x XML files.
  • Windows XP and higher: added support for double-buffering in all list views (including entry lists).
  • Windows Vista and higher: added support for alpha-blended marquee selection in all list views (including entry lists).
  • Added 'EditEntry', 'DeleteEntry', 'AddEntries' and 'DeleteAllEntries' commands in KPScript scripting tool.
  • Added support for importing special ICO files.
  • Added option to exit instead of locking the workspace after the specified time of inactivity.
  • Added option to minimize the main window after locking the KeePass workspace.
  • Added option to minimize the main window after opening a database.
  • Added support for exporting to KDBX files.
  • Added command to remove deleted objects information.
  • TrlUtil now checks for duplicate accelerator keys in dialogs.
  • Added controls in the entry editing dialog to specify a custom text foreground color for entries.
  • KeePass now retrieves the default auto-type sequence from parent groups when adding new entries.
  • The password character picking dialog can now be invoked multiple times when auto-typing (use {PICKPASSWORDCHARS}, {PICKPASSWORDCHARS2}, {PICKPASSWORDCHARS3}, etc.).
  • Added '-set-urloverride', '-clear-urloverride' and '-get-urloverride' command line options.
  • Added '-set-translation' command line option.
  • Added option to print custom string fields in details mode.
  • Various entry listings now support custom foreground and background colors for entry items.
  • Added 'click through' behavior for menus and toolbars.
  • File association methods are now UAC aware.
  • Improvements / Changes:
  • User interface is now blocked while saving to a file (in order to prevent accidental user actions that might interfere with the saving process).
  • Improved native modifier keys handling on 64-bit systems.
  • Improved application startup performance.
  • Added image list processing workaround for Windows 7.
  • OK button is now reenabled after manually activating the key file checkbox and selecting a file in the master key dialog.
  • The master key dialog now appears in the task bar.
  • When KeePass is minimized to tray and locked, pressing the global auto-type hot key doesn't restore the main window anymore.
  • The installer now by default installs KeePass 1.x and 2.x into separate directories in the program files folder.
  • The optional autorun registry keys of KeePass 1.x and 2.x do not collide anymore.
  • File type association identifiers of KeePass 1.x and 2.x do not collide anymore.
  • File MRU list now uses case-insensitive comparisons.
  • Improved preview updates in Print and Data Viewer dialogs.
  • Message service provider is thread safe now.
  • Threading safety improvements in KPScript scripting plugin.
  • Improved control state updates in password generator dialog.
  • Improved master password validation in 'New Database' dialog.
  • Times are now stored as UTC in KDBX files (ISO 8601 format).
  • Last access time fields are now updated when auto-typing, copying fields to the clipboard and drag&drop operations.
  • KPScript scripting tool now supports in-memory protection.
  • Database is not marked as modified anymore when closing the import dialog with Cancel.
  • Added asterisks in application policy editing dialog to make clearer that changing the policy requires a KeePass restart.
  • Double-clicking a format in the import/export dialog now automatically shows the file browsing dialog.
  • Improved permanent entry deletion confirmation prompt.
  • Improved font objects handling.
  • Expired groups are now rendered using a striked out font.
  • Improved auto-type statement conversion routine in KeePass 1.x KDB file importer.
  • Clipboard clearing countdown is not started anymore when copying data fails (e.g. policy disabled).
  • Improved synchronization with URLs.
  • The database maintenance dialog now only marks the database as modified when it actually has removed something.
  • KeePass now broadcasts a shell notification after changing the KDBX file association.
  • Improved warning message when trying to directly open KeePass 1.x KDB files.
  • Improved Linux / Mac OS X compatibility.
  • Improved MSI package (removed unnecessary dependency).
  • TrlUtil: improved NumericUpDown and RichTextBox handling.
  • Installer now checks for minimum operating system version.
  • Installer: file association is now a task, not a component.
  • Installer: various other improvements.
  • Various code optimizations.
  • Minor other improvements.
  • Bugfixes:
  • When cloning a group tree using drag&drop, KeePass now assigns correct parent group references to cloned groups and entries.
  • Fixed crash when clicking 'Cancel' in the settings dialog when creating a new database.



Changes for v1.27 - v1.28

  • New Features:
  • The estimated password quality (in bits) is now displayed on the quality progress bar, and right of the quality progress bar the length of the password is displayed.
  • Pattern-based password generator: the '^' character now removes the next character from the current custom character set (for example, [a^y] contains all lower-case alphanumeric characters except 'y').
  • In the cases where Windows would display outdated thumbnail and peek preview images for the main window, KeePass now requests Windows to use a static bitmap instead (showing only the KeePass logo).
  • While saving a database, a shutdown block reason is now specified.
  • Improvements:
  • Improved input control focusing in the master key dialog after displaying a validation error message.
  • When duplicating an entry, the last modification time is now copied from the source entry.
  • Improved window message relaying when KeePass is minimized to tray.
  • Upgraded installer.
  • Upgraded to Boost libraries version 1.56.0.
  • Various code optimizations.
  • Minor other improvements.
  • Bugfixes:
  • Key provider plugins are now remembered correctly (if the option 'Remember key sources' is enabled).



Changes for v1.26 - v1.27

  • New Features:
  • Password text boxes now use a monospace font.
  • The 'Find in this Group' function now also searches in subgroups of the selected group.
  • {OPERA} placeholder: updated detection code to also support the latest versions of Opera.
  • Enhanced Internet Explorer detection.
  • Added high resolution version of the KeePass application icon.
  • Improvements:
  • Improved realization of the {CLEARFIELD} command (now using Bksp instead of Del, in order to avoid Ctrl+Alt+Del issues on newer Windows systems).
  • When the option 'Enable auto-type features' is deactivated, the global auto-type hot key is not registered anymore.
  • Improved quoted app paths parsing.
  • Font handling improvements.
  • Various files (e.g. 'History.txt') are now encoded using UTF-8.
  • Improved build system.
  • Upgraded to Boost libraries version 1.55.0.
  • Various UI text improvements.
  • Various code optimizations.
  • Minor other improvements.
  • Bugfixes:
  • (None).



Changes for v1.23 - v1.24

  • New Features:
  • Header data in KDB files is now authenticated (to prevent silent data removal attacks; thanks to P. Gasti and K. B. Rasmussen).
  • The content part of a KDB file now contains 32 random bytes (generated each time the file is saved, by a cryptographically secure pseudo-random number generator using system entropy) to prevent content guessing attacks using the content hash.
  • When closing the entry editing dialog by closing the window (using [X], Esc, ...) and there are unsaved changes, KeePass now asks whether to save or discard the changes; only when explicitly clicking the 'Cancel' button, KeePass doesn't prompt.
  • Added '-pw-stdin' command line option to make KeePass read the master password from the StdIn stream.
  • Improvements:
  • Improved update check.
  • Upgraded and improved installer (now uses Unicode, LZMA2 compression, ...).
  • Upgraded to Boost libraries version 1.51.0.
  • Various code optimizations.
  • Minor other improvements.



Changes for v1.22 - v1.23

  • New Features:
  • When trying to delete entries, the confirmation dialog now shows a short summary of the entries that will be deleted.
  • Added date/time placeholders: {DT_SIMPLE}, {DT_YEAR}, {DT_MONTH}, {DT_DAY}, {DT_HOUR}, {DT_MINUTE}, {DT_SECOND}, {DT_UTC_SIMPLE}, {DT_UTC_YEAR}, {DT_UTC_MONTH}, {DT_UTC_DAY}, {DT_UTC_HOUR}, {DT_UTC_MINUTE}, {DT_UTC_SECOND}.
  • Improvements:
  • Improved UI update when using a TAN entry.
  • The last modification time of a TAN entry is now updated when using it.
  • Improved behavior when trying to shutdown the system while KeePass is running.
  • KeePass does not block the system shutdown anymore when a dialog is displayed but no database is opened.
  • LNGX files aren't shown in the translation selection dialog anymore.
  • Improved KDB data validation.
  • Improved multi-byte to Unicode and Unicode to multi-byte string conversions (less memory is required now).
  • Changed versioning scheme in file version information blocks from digit- to component-based.
  • Upgraded installer.
  • Various code optimizations.
  • Minor other improvements.
  • Bugfixes:
  • HTML export: XML special characters in URL links and attachment names are now encoded.
  • HTML export: group trees are not encoded twice anymore.



Changes for v2.18 - v1.22

  • New Features:
  • Auto-Type window definitions in custom window-sequence pairs are now Spr-compiled (i.e. placeholders, environment variables, field references, etc. can be used).
  • Auto-Type: entry titles are now Spr-compiled before being compared with the target window title.
  • Added support for 's' HTML tag in the notes field (in the entry view of the main window the marked text is striked out).
  • Supported HTML tags (b, i, u, s) are now removed from notes before showing them in the main entry list.
  • Regular expression replacements can now be applied to the notes before showing them in the main entry list (the KeeNotesRegex# items in the configuration file specify the regular expressions and KeeNotesFormat# the replacements).
  • Added option to select a different font for notes ('Tools' -> 'Options' -> tab 'Interface' -> button 'Select Notes Font').
  • Ensuring same keyboard layouts during auto-type is now optional (option enabled by default).
  • Added regular expression support in x64 builds.
  • Master key transformations are now computed in two threads in x64 builds, too; on dual/multi core processors this results in almost twice the performance as before (by doubling the amount of rounds you'll get the same waiting time as in 1.21, but the protection against dictionary and guessing attacks is doubled).
  • Improvements:
  • Improved key transformation delay calculation.
  • The program options are now also accessible while the database is locked.
  • Column headers in a search results list are now unclickable (search results cannot be sorted anyway).
  • Improved string translation in task dialogs.
  • Improved dialog display state handling.
  • Added '@' and '`' to the printable 7-bit ASCII character set.
  • Merged simple and extended special character spaces to one special character space.
  • Reduced control character space from 60 to 32.
  • Upgraded to Boost libraries version 1.49.0.
  • Various code optimizations.
  • Minor other improvements.
  • Bugfixes:
  • The 'Add Entry' tray context menu command is now disabled when a dialog is displayed.
  • The toolbar state is now updated after clicking a group link in the entry details view.



Changes for v1.19b - v1.20

  • New Features:
  • Added option to specify a database color; by specifying a color, the main window icon and the tray icon are recolored.
  • When searching for a string containing a whitespace character, KeePass now splits the terms and reports all entries containing all of the terms (e.g. when you search for "Forum KeePass" without the quotes, all entries containing both "Forum" and "KeePass" are reported); the order of the terms is arbitrary; if you want to search for a term containing whitespace, enclose the term in quotes.
  • Added support for sending keystrokes (auto-type) to windows that are using different keyboard layouts.
  • Improvements:
  • Improved version formatting in update dialog.
  • On Windows Vista and higher, the restart dialog after changing the language is now shown as modern task dialog.
  • KeePassLibC can now be compiled in debug x64 and release Unicode x64 mode.
  • Various code optimizations.
  • Minor other improvements.
  • Bugfixes:
  • (None).



Changes for v1.19 - v1.19b

  • Command line options provided by plugins work correctly again.



Changes for v1.18 - v1.19

  • New Features & Improvements:
  • Added option to remember key sources (key file paths, provider names, ...); it's enabled by default.
  • New locking timer (using a timeout instead of a countdown).
  • Lock files are now hidden.
  • On Windows 7 and higher, the main window peek preview is now disabled when the KeePass workspace is locked.
  • File transactions: the NTFS/EFS encryption flag is now also preserved when the containing directory isn't encrypted.
  • {FIREFOX} placeholder: added support for registry-redirected 32-bit Firefox installations on 64-bit Windows systems.
  • Relative database paths on the command line are now evaluated relatively to the initial working directory (specified by the parent process) instead of the last used directory.
  • Improved user-friendliness in UAC dialogs.
  • Improved help (moved placeholders to separate page, ...).
  • Installer: the KeePass start menu shortcut is now created directly in the programs folder; the other shortcuts have been removed (use the Control Panel for uninstalling and the 'Help' menu in KeePass to access the help).
  • Upgraded installer.
  • Various code optimizations.
  • Minor other improvements.
  • Bugfixes:
  • (None).



Changes for v1.17 - v1.18

  • Password quality estimation algorithm: added check for about 1500 most common passwords (these are rated down to 1/8th of their statistical rating; Bloom filter-based implementation).
  • {GOOGLECHROME} placeholder: updated detection code to also support the latest versions of Chrome.
  • KeePass now enables data execution prevention (DEP).
  • Improved lock overlay icon (higher resolution).
  • Improvements:
  • Improved character classification in password quality estimation algorithm.
  • Improved group and entries deletion confirmation dialogs (only Windows Vista and higher).
  • Items in the update checking, plugin and icon picker dialogs aren't underlined anymore when hovering over them.
  • The default expiry interval for new entries is now limited to a maximum of 8 years.
  • Renamed character repetition option in the password generator for improved clarity.
  • Added code to prevent loading libraries from the current working directory (to avoid binary planting attacks).
  • Installer: various minor improvements.
  • Various code optimizations.
  • Minor other improvements.



Changes for v1.16 - v1.17

  • New Features:
  • Added option to use file transactions when writing databases (enabled by default; writing to a temporary file and replacing the actual file afterwards avoids data loss when KeePass is prevented from saving the database completely).
  • Added high DPI support.
  • The Ctrl+E shortcut key now jumps to the quick search box.
  • In the main entry list, backup entries are now rendered with green text color.
  • Menus are now rendered with gradient item backgrounds.
  • Added support for detecting KeePass 2.08 and higher KDBX database files.
  • Added {GOOGLECHROME} placeholder, which is replaced by the executable path of Google Chrome, if installed.
  • Added '--auto-type' command line option.
  • Added '--lock-all' and '--unlock-all' command line options to lock/unlock the workspaces of all other KeePass instances.
  • Added 'KeeConfigFileOverrideGlobal' and 'KeeConfigFileOverrideUser' configuration options to change the locations of the configuration files.
  • On Windows 7, KeePass now shows a 'locked' overlay icon on the taskbar button when the database is locked.
  • On Windows 7, when opening/saving a database, the taskbar button is now animated using an indeterminate progress bar.
  • Improvements:
  • Most broadcasted Windows messages do not wait for hanging applications anymore.
  • Improved multi-byte characters support in entry details view.
  • Improved toolbar updating after restoring from tray.
  • Improved naming of options to clarify their meaning.
  • Improved tray icon updating.
  • Improved behavior on KDBX error.
  • Upgraded installer.
  • Various performance improvements.
  • Various code optimizations.
  • Minor other improvements.
  • Bugfixes:
  • (None).



Changes for v1.15 - v1.16

  • New Features:
  • Added option to use Windows' CNG/BCrypt API for key transformations (about 50% faster than the KeePass built-in key transformation code; by increasing the amount of rounds by 50%, you'll get the same waiting time as in 1.15, but the protection against dictionary and guessing attacks is raised by a factor of 1.5; option enabled by default; only Windows Vista and higher).
  • Completely new update checking system that now also supports checking for new plugin versions.
  • Added warning when trying to open a KDBX file created by KeePass 2.x (with hint about how to migrate from 2.x to 1.x).
  • Added 'KeeAutoNewDbBasePath' and 'KeeAutoNewDbBaseName' configuration options (to specify the default location where the database file will be stored in mini mode).
  • Added advanced option to immediately delete TAN entries after using them.
  • Added '-minimize' command line option.
  • Added '-registerfileext' and '-unregisterfileext' command line options to register/unregister the KDB file association.
  • File association methods are now UAC aware.
  • Added check for reserved group names (like 'Backup').
  • On Windows Vista and higher, core database manager error / warning messages are displayed using modern task dialogs.
  • The number of days below which entries are treated as soon to expire can now be configured (see help -> customize).
  • Plugins: added new COM interface (IKpAPI2) for the main API that allows querying whether the database is the one initially specified on the command line.
  • Key provider plugin API: new key query method that supports context information.
  • Improvements:
  • Image list handling improvements.
  • When auto-locking after the specified number of seconds of inactivity, KeePass minimizes to taskbar or to tray, depending on the 'Minimize to tray instead of taskbar' option.
  • Plugin versions are now displayed in a separate column in the plugins dialog.
  • When trying to open a second master key dialog or auto-type entry selection dialog for a window, KeePass brings itself to the foreground instead of showing a second dialog.
  • Calculation of soon to expire entries is now more precise.
  • Various improvements to status bar messages.
  • Improved workspace locking toolbar button tooltips.
  • Installer: various minor improvements.
  • Various code optimizations.
  • Minor other improvements.
  • Bugfixes:
  • Newlines of the notes field are now encoded correctly in exports when Unix mode is enabled.
  • New databases do not inherit file names of previous locked databases anymore.



Changes for v1.14 - v1.15

  • Completely new plugin architecture (exposing a lot more functionality to plugins, faster, requires less memory, safer memory management / cross-module calls, more secure, and allows independent development of KeePass and plugins, i.e. starting with 1.15 KeePass can be updated without requiring plugins to be updated and vice versa)
  • Added option to use advanced in-memory protection (DPAPI, only Windows Vista and higher; the key is stored in a secure, non-swappable memory area managed by Windows; option enabled by default)
  • The hash of the master key and its transformed version are now in-memory protected
  • Added help source selection dialog (by default the online help center is used)
  • Added '-set-urloverride', '-clear-urloverride' and '-get-urloverride' command line options
  • Focused disabled menu items are now drawn with a transparent selection rectangle
  • Windows XP and higher: added support for double-buffering in the entry list
  • Windows Vista and higher: added support for alpha-blended marquee selection in the entry list
  • Added KeeForceAllowChangeMasterKey, KeeForceAllowPrinting, KeeForceAllowImport and KeeForceAllowExport configuration options (these override the option to disable unsafe operations and the mini mode setting; they are only loaded from the enforced and global INI files, not the local one)
  • Added KeeDisallowPrintingPasswords configuration option to disallow printing passwords and viewing them in the print preview
  • Added multi-user documentation
  • Improved plugin loading performance
  • Plugins don't need to be manually enabled anymore (just copy the plugin files into the KeePass application directory)
  • Improved main menu items order
  • Improved main menu accelerators
  • Improved group main menu item texts
  • Improved performance of various entry list operations
  • Hash of master key is now cleared when closing a database
  • Hash of file key is now cleared after opening/saving files
  • Various code optimizations
  • Minor other improvements
  • Fixed cursor navigation problem in secure edit controls
  • Fixed random access violation in OnScreenKeyboard plugin



Changes for v1.13 - v1.14

  • KeePass is now also available as MSI package.
  • Entry field references are now dereferenced in drag&drop operations.
  • Added support for writing databases to hidden files.
  • Added '-lock' command line option.



Changes for v1.1.2 - v1.13

  • New Features:
  • Completely new auto-type/URL placeholder replacement and field reference engine.
  • Added internal field reference cache (highly improves performance of multiple-cyclic/recursive field references).
  • Added support for Uniform Naming Convention (UNC) paths (Windows) in the URL field (without cmd:// prefix).
  • Added command in the 'Tools' menu in the entry editing dialog to insert the default auto-type sequence into the notes.
  • On Windows Vista and higher, the read-only mode message box is displayed as a modern task dialog.
  • Added option to exclude expired entries in the 'Find' dialog.
  • Added advanced option to include expired entries in quick searches (toolbar; enabled by default).
  • Added advanced option to automatically sort items in the auto-type entry selection dialog (enabled by default).
  • Added advanced option to disable automatic clearing of the clipboard when closing/locking the database (default: clear).
  • Added Ctrl-Shift-F accelerator for the 'Find in this Group' main menu command.
  • Added {NUMPAD0} to {NUMPAD9} to documentation.
  • The RmvDup plugin now supports removing empty groups.
  • Improvements:
  • The current working directory is now restored after manually browsing for a key file.
  • Duplicating entries now doesn't clear the search results list anymore.
  • Improved performance of high ANSI and special character encoding for auto-type sequences.
  • When using PuTTY for ssh:// URLs, references within the user name field are now dereferenced.
  • Auto-type definition lines and field references generated by commands in the 'Tools' menu of the entry editing dialog are now appended to the notes instead of being inserted at top.
  • Improved UUID string parsing.
  • Improved cmd:// URL handling.
  • {VKEY xxx} now doesn't need to be initialized anymore using other auto-type special key codes.
  • Updated auto-type global hot key hint when registering fails.
  • Various code optimizations.
  • Minor other improvements.
  • Minor installer improvements.
  • Bugfixes:
  • Cyclic password field references now work correctly.
  • KeePass does not crash anymore when being in mini mode and clicking Cancel in the initial database creation dialog.



<<Back to software description