KeePass 2.59 has been released today!$$$$$$You can get it here: Download KeePass 2.59.$$$$$$This is a stable release. It is recommended to upgrade from any previous 2.x version to 2.59.$$$$$$KeePass 2.59 mainly features user interface and integration enhancements; and various other minor new features and improvements.$$$$$$Hashes and signatures for integrity checking are available; and program binaries are digitally signed (Authenticode). New translations are available; too.$$$$$$For a comparison of the current KeePass 1.43 and 2.59; see: Edition Comparison.$$$$$$If you like KeePass; please dont forget to donate.$$$$$$$$$Note$$$If you are using the portable ZIP package and perform an update by copying the new files over the old ones; you can delete the files KeePassLibC32.dll and KeePassLibC64.dll (because they are not used by KeePass 2.x anymore). The installer deletes them when updating an existing KeePass installation.$$$$$$Changes from 2.58 to 2.59:$$$New features:$$$$$$On Windows 11 24H2 ARM64 and later; KeePass now runs natively; too (i.e. without x64 emulation).$$$Added KeePassLibN native support library; which provides native implementations of AES-KDF and Argon2 on Windows systems (x86; x64 and ARM64).$$$New C# AES-KDF implementation (about 30-50 times as fast as before; depending on the system; used when the native support library is unavailable or disabled).$$$New C# KeePass KDB import/export module; which now makes it possible to import/export KDB files on ARM64 systems and on Unix-like systems; too.$$$The KeePass KDB import/export module now supports importing and exporting the default user name and the database color.$$$When exporting a database to a KDB file; the root group is now exported; too.$$$The About KeePass dialog now displays the architecture of the current process (x86/x64/ARM64/... instead of only 32-bit/64-bit).$$$Added support for opening URLs with Maxthon; SeaMonkey and Yandex in private mode.$$$On Unix-like systems; URLs in certain views are now linkified.$$$Some development snapshots can now load DLL plugins.$$$Added framework-specific solution and project files for Visual Studio 2022.$$$Improvements:$$$$$$Encrypting/decrypting databases using the AES algorithm is now faster.$$$The option for using the native support library now also applies to Argon2.$$$Native support library settings are now respected when using KeePass as a library (e.g. KPScript or PowerShell script).$$$When clicking the [OK] button of the options dialog; volatile settings (such as the main window position/size) are now saved; too.$$$When an exception occurs while exporting data; it is now shown in the status logger dialog; if one is displayed.$$$Improved formatting of multiline messages in the status logger dialog.$$$The KeePass KDB import/export module now refuses to use a master key containing an XML key file (because KeePass 1.x does not support XML key files).$$$The KeePass KDB export module does not export unnecessary auto-type sequence definitions anymore.$$$Improved removal of dangling custom icon references.$$$KeePass is now built using Visual Studio 2022.$$$Increased target framework version.$$$Improved efficiency of some algorithms that use a set.$$$Improved creation of AES CSP objects.$$$Improved project cleanup script.$$$Removed KeePassLibC native support library (because it is not used by KeePass 2.x anymore; KeePassLibC continues to be available in the KeePass 1.x source code package); the installer deletes it when updating an existing KeePass installation.$$$Installer: updated native image (NGen) size estimation.$$$Upgraded installer.$$$Various UI text improvements.$$$Various code optimizations.$$$Minor other improvements.$$$Bugfixes:$$$$$$The Test button on the Security tab page of the database settings dialog does not ignore the option for using the native support library anymore.$$$The KeePass KDB import module does not append a new-line character to notes anymore.$$$

Changes from 2.57.1 to 2.58:$$$New Features:$$$$$$When no entry is selected in the entry list of the main window; the details view now displays information of the current group (name; expiry time; tags; notes).$$$Added option Unhide empty data (in Tools ? Options ? tab Advanced; turned off by default).$$$On the Preview/Generate tab page of the password generator dialog; the average estimated quality of the generated passwords is now displayed.$$$Added Ctrl+H keyboard shortcut for the Show/hide password using asterisks option in report dialogs.$$$Added User-Agent header for HTTP/HTTPS/WebDAV web requests.$$$If Microsoft Edge has been uninstalled; it now no longer appears in the URL(s) menu.$$$Added More Commands item in the group and entry context menus (it shows the corresponding full menu).$$$Added Status column in the triggers dialog.$$$Added support for comments in INI files.$$$Enhanced CodeWallet TXT import module.$$$Fatal error messages are now more detailed when running KeePass with the -debug command line option.$$$Added filter for duplicate MRU items (caused by an MRU item with an unsuitable database file path in an enforced configuration file).$$$Added filter for duplicate key source associations (caused by a key source association with an unsuitable database file path in an enforced configuration file).$$$Added solution and project files for Visual Studio 2022.$$$Added workaround for Monos tree view right-click and context menu handling.$$$Improvements:$$$$$$When clicking on a group in the group tree of the main window; all entries are deselected now.$$$If the currently selected entry does not have parameters for generating time-based one-time passwords; the Ctrl+T and Ctrl+Shift+T keyboard shortcuts are now ignored.$$$Improved icon handling in certain entry lists (significantly faster creation of such a list when there are many entries with custom icons; reduced memory usage; reduced number of GDI objects; ...).$$$In the master key prompt dialog; toggling the hiding of the password now does not change the state of the password check box anymore.$$$When generating passwords for the Preview/Generate tab page of the password generator dialog takes too long; it is now aborted.$$$Replaced status indicators on the Preview/Generate tab page of the password generator dialog.$$$Increased the number of preview passwords to 50.$$$UI improvements in the trigger editing dialog.$$$After showing a command/placeholder confirmation dialog (cmd:// URI; {CMD:...} placeholder; {REF:P@...} placeholder); KeePass now focuses the previously focused window.$$$Renamed entry view to details view (because it can now also display details of a group).$$$Removed the group/entry duplication commands from the context menus (they continue to be available in the main menu).$$$Various improvements in some import modules.$$$Improved UUID zero tests.$$$The revision component of the assembly version is now invariant.$$$Improved PLGX cache item identifiers.$$$Improved project cleanup script.$$$Upgraded installer.$$$Various code optimizations.$$$Minor other improvements.$$$Bugfixes:$$$$$$Fixed two image list handling bugs.$$$

Changes from 2.57.1 to 2.58:$$$New Features:$$$$$$When no entry is selected in the entry list of the main window; the details view now displays information of the current group (name; expiry time; tags; notes).$$$Added option Unhide empty data (in Tools ? Options ? tab Advanced; turned off by default).$$$On the Preview/Generate tab page of the password generator dialog; the average estimated quality of the generated passwords is now displayed.$$$Added Ctrl+H keyboard shortcut for the Show/hide password using asterisks option in report dialogs.$$$Added User-Agent header for HTTP/HTTPS/WebDAV web requests.$$$If Microsoft Edge has been uninstalled; it now no longer appears in the URL(s) menu.$$$Added More Commands item in the group and entry context menus (it shows the corresponding full menu).$$$Added Status column in the triggers dialog.$$$Added support for comments in INI files.$$$Enhanced CodeWallet TXT import module.$$$Fatal error messages are now more detailed when running KeePass with the -debug command line option.$$$Added filter for duplicate MRU items (caused by an MRU item with an unsuitable database file path in an enforced configuration file).$$$Added filter for duplicate key source associations (caused by a key source association with an unsuitable database file path in an enforced configuration file).$$$Added solution and project files for Visual Studio 2022.$$$Added workaround for Monos tree view right-click and context menu handling.$$$Improvements:$$$$$$When clicking on a group in the group tree of the main window; all entries are deselected now.$$$If the currently selected entry does not have parameters for generating time-based one-time passwords; the Ctrl+T and Ctrl+Shift+T keyboard shortcuts are now ignored.$$$Improved icon handling in certain entry lists (significantly faster creation of such a list when there are many entries with custom icons; reduced memory usage; reduced number of GDI objects; ...).$$$In the master key prompt dialog; toggling the hiding of the password now does not change the state of the password check box anymore.$$$When generating passwords for the Preview/Generate tab page of the password generator dialog takes too long; it is now aborted.$$$Replaced status indicators on the Preview/Generate tab page of the password generator dialog.$$$Increased the number of preview passwords to 50.$$$UI improvements in the trigger editing dialog.$$$After showing a command/placeholder confirmation dialog (cmd:// URI; {CMD:...} placeholder; {REF:P@...} placeholder); KeePass now focuses the previously focused window.$$$Renamed entry view to details view (because it can now also display details of a group).$$$Removed the group/entry duplication commands from the context menus (they continue to be available in the main menu).$$$Various improvements in some import modules.$$$Improved UUID zero tests.$$$The revision component of the assembly version is now invariant.$$$Improved PLGX cache item identifiers.$$$Improved project cleanup script.$$$Upgraded installer.$$$Various code optimizations.$$$Minor other improvements.$$$Bugfixes:$$$$$$Fixed two image list handling bugs.$$$

KeePass 2.57.1 Release Notes$$$Information related to KeePass version 2.57.1.$$$$$$Many thanks to the German Federal Office for Information Security (Bundesamt für Sicherheit in der Informationstechnik; BSI) and mgm security partners for sponsoring and performing a code analysis of KeePass 2.x (the BSI will publish information about it soon here: project CAOS 3.0 German).$$$$$$No security vulnerabilities classified as medium; high or critical were found. However; two minor potential security vulnerabilities and some improvable code parts were identified. As a result; various improvements have been implemented; see the KeePass 2.57.1 changelog.$$$$$$Notes on the code analysis report (which will be published on the BSI website soon):$$$$$$D. Findings with the classification Bad practice; by line number in keepass-sast.xlsx:$$$$$$97-99. For these three links; HTTP has now been replaced by HTTPS.$$$100. Unfortunately; this website does not support HTTPS (no connection possible). Therefore; the link has now been replaced by a link to Regex101 (similar website; but supports HTTPS).$$$101-103 and 105. These problems have now been fixed. All streams/readers/writers mentioned are now closed immediately; even when an exception occurs.$$$104. Fixed.$$$E1.1. For details about the security of auto-types window/sequence matching; see the section Auto-Type Window/Sequence Matching.$$$$$$In the report; it is suggested that for a global auto-type operation; an entry should match only if the title of the target window matches the title of the KeePass entry exactly. This is not an improvement in our opinion; for the following two reasons:$$$$$$Security is not really increased. If a malicious website uses exactly the same title as a legitimate website; the window title is also identical for both websites; and thus the two websites are indistinguishable for auto-type. If an exact match would be necessary; a malicious website could not specify multiple service names; but such an attack is probably rather rare. An attacker who wants to phish usually tries to create a website that looks as real as possible (including the title); multiple service names in the title would increase the likelihood that a user would recognize the website as malicious (especially when KeePass shows a selection dialog due to multiple matching entries).$$$The suggestion is not practical; because window titles often contain additional text that you do not want in an entry title. In the example in the report (website with the URL https://wiki.mgm-tp.com/confluence/dologin.action); the window title is Log In - mgm Confluence - Mozilla Firefox; and this is exactly what a user would have to enter as entry title if an exact match would be required. Prefixes such as Log In - and suffixes such as - Mozilla Firefox in the entry title would make it much more difficult for users to find and manage entries. Furthermore; a reasonable sorting of entries by title would no longer be possible (as sorting would primarily be done by prefixes).

Changes from 2.56 to 2.57:$$$New Features:$$$$$$Added option Prevent certain screen captures (in Tools ? Options ? tab Security; turned off by default); note that this may also prevent legitimate other software (remote desktop solutions; accessibility tools such as screen magnifiers; etc.) from seeing KeePass windows.$$$Added the new option Prevent certain screen captures in the Enforce Options (All Users) dialog (in Tools ? Advanced Tools ? Enforce Options).$$$Key files can be created on the secure desktop now.$$$Added shortcut keys for the Copy Group (Encrypted) (Ctrl+Shift+C) and Paste Group (Ctrl+Shift+V) commands.$$$Ctrl+Shift+V can now be used for pasting entries while the group tree has the input focus and vice versa.$$$Added More button in the icon picker dialog; which shows a menu that provides two commands: Rename and Export; the menu is also shown as context menu of the custom icons list.$$$When importing an icon; the file name without extension is now used as icon name.$$$Added option Remember password hiding setting in the main window column configuration dialog (turned off by default).$$$Added support for long paths when running on .NET 4.6.2 or higher.$$$Some error messages now contain the type and the HResult of the exception that occured.$$$Some error messages are now more detailed when running KeePass with the -debug command line option.$$$Bitwarden JSON import: two-digit years are now converted to four-digit years.$$$Added UIFlags bit for automatically adjusting weak key transformation settings to the current default values (without a confirmation dialog).$$$Added DPI detection on Unix-like systems.$$$For applications using KeePass as a library: added a new common initialization method (CommonInitialize) that allows a custom error handling/reporting.$$$Improvements:$$$$$$Databases are now always saved in the KDBX 4/4.1 file format; if you need a KDBX 3.1 file (e.g. for compatibility with an old app); perform an export: main menu File ? Export ? format KeePass KDBX (2.34; Old Format).$$$Auto-Type: improved compatibility with Remote Desktop Client (WSL).$$$In an auto-type error dialog; the sequence is now only displayed if KeePass has been started with the -debug command line option.$$$Increased maximum length of the main window title.$$$Improved handling of shortcut keys in the main window.$$$Improved entry data exchange menu update performance.$$$After moving a group; KeePass now ensures that the group is visible.$$$Improved database save confirmation dialog text.$$$When showing the master key creation/change dialog on the secure desktop; trying to perform an operation that is not supported on the secure desktop now results in a simple error message; i.e. it is not possible anymore to choose to cancel the dialog and perform the operation on the normal desktop; this avoids certain accidental data loss scenarios.$$$Various improvements in the simple file browser dialog (for the secure desktop).$$$While a hot key control of the options dialog is focused; dialog-specific keyboard shortcuts are now disabled.$$$Changed the MAC Address password generator profile such that it always generates a unicast; locally administered MAC address in the SLAP administratively assigned quadrant.$$$In the icon picker dialog: moved the Export command into the More/context menu of the custom icons list.$$$When running on .NET 4.7 or higher; KeePass now supports all TLS/SSL protocol versions that are supported/enabled by the framework/system.$$$Improved error messages for exception chains.$$$Improved serialization; deserialization and conversion of nullable booleans.$$$Improved deserialization of variant dictionaries.$$$Improved application context initialization.$$$Improved termination of the program in case of a fatal exception.$$$Various UI text improvements.$$$Various code optimizations.$$$Minor other improvements.$$$Bugfixes:$$$$$$(None).

Changes from 2.55 to 2.56:$$$New Features:$$$$$$Added search box in the options dialog (keyboard shortcut Ctrl+F).$$$When pressing the Enter key in the group tree of the main window; the entries of the group are displayed now (this can be useful for instance when the entry list is displaying search results).$$$Added More button on the History tab page of the entry dialog; which shows a menu that provides the following two new commands: Select All Historic Entries and Delete All Historic Entries; the menu is also shown as context menu of the history entries list.$$$Added Ctrl+A keyboard shortcut for the Select All Historic Entries command in the entry dialog (the history entries list must have the input focus).$$$Added workaround for Mono window size bug.$$$Added accessibility help page.$$$Improvements:$$$$$$In the main window; the entry list is now updated when right-clicking onto a group in the group tree.$$$Expanding/collapsing a group in the group tree of the main window does not select it anymore.$$$The option Remember password hiding setting in the main window is now turned off by default.$$$In the auto-type entry selection dialog; comments ({C:...} placeholders) are now removed from the values in the Sequence column if the Sequence - Comments column is displayed.$$$The view is now restored after syntax highlighting in the sequence box of the auto-type association dialog.$$$Reduced flickering in the sequence box of the auto-type association dialog.$$$Improved performance of Spr compilations of certain texts.$$$Minor process memory protection improvement for the password generator.$$$Minor process memory protection improvements for some report dialogs.$$$Improved thread safety of message box management.$$$Improved UUID object implementation.$$$Collection equality testing improvements (for plugins).$$$Various code optimizations.$$$Minor other improvements.$$$Bugfixes:$$$$$$In the main window; the entry list is now updated correctly when performing overlapping keypresses into the group tree.$$$When cancelling a group drag&drop operation; the group selection is now restored correctly.$$$Fixed background of CHM help pages.

Changes from 2.55 to 2.56:$$$New Features:$$$$$$Added search box in the options dialog (keyboard shortcut Ctrl+F).$$$When pressing the Enter key in the group tree of the main window; the entries of the group are displayed now (this can be useful for instance when the entry list is displaying search results).$$$Added More button on the History tab page of the entry dialog; which shows a menu that provides the following two new commands: Select All Historic Entries and Delete All Historic Entries; the menu is also shown as context menu of the history entries list.$$$Added Ctrl+A keyboard shortcut for the Select All Historic Entries command in the entry dialog (the history entries list must have the input focus).$$$Added workaround for Mono window size bug.$$$Added accessibility help page.$$$Improvements:$$$$$$In the main window; the entry list is now updated when right-clicking onto a group in the group tree.$$$Expanding/collapsing a group in the group tree of the main window does not select it anymore.$$$The option Remember password hiding setting in the main window is now turned off by default.$$$In the auto-type entry selection dialog; comments ({C:...} placeholders) are now removed from the values in the Sequence column if the Sequence - Comments column is displayed.$$$The view is now restored after syntax highlighting in the sequence box of the auto-type association dialog.$$$Reduced flickering in the sequence box of the auto-type association dialog.$$$Improved performance of Spr compilations of certain texts.$$$Minor process memory protection improvement for the password generator.$$$Minor process memory protection improvements for some report dialogs.$$$Improved thread safety of message box management.$$$Improved UUID object implementation.$$$Collection equality testing improvements (for plugins).$$$Various code optimizations.$$$Minor other improvements.$$$Bugfixes:$$$$$$In the main window; the entry list is now updated correctly when performing overlapping keypresses into the group tree.$$$When cancelling a group drag&drop operation; the group selection is now restored correctly.$$$Fixed background of CHM help pages.