onsec-fr / keepass-enhanced-security-configuration Goto Github PK

Thanks for the guide!

The URL in this sentence has changed: "On the other hand its popularity leads to a risk since there are many ways to attack Keepass nowadays. Furthermore the large number of features increases the potential attack surface."

The correct URL is: https://blog.harmj0y.net/redteaming/keethief-a-case-study-in-attacking-keepass-part-2/

I'm interested why you recommend using 1.x and not 2.x.

Some feature of 2.x seems to improve the security of the database, such as all TOTP way to log into your vault and the presence of Argon2. I could of course understand that you consider less feature = less possible vulnerabilities or that if no vulnerabilities for all those years it means that it should be more secure

I was just curious about it. 🙂