KeePassXC
by KeePassXC Team
Secure and Full-featured Password Manager
Support the creators
Flatsonar is just the shop window. The people below made KeePassXC.
About
KeePassXC is a modern, secure, and open-source password manager for your most sensitive information. Designed for people with extremely high demands of secure personal data management. You can store many different types of information, such as usernames, passwords, URLs, attachments, and notes in an offline, encrypted file. Major features include: Auto-Type into any window, browser integration, password generator, advanced search, comprehensive reports, FDO Secret Service integration, SSH agent key management, and many more!
Permissions
7 permissions weaken the sandbox. Flatsonar asks before installing.
- all devices (/dev): webcams, disks, raw hardware
--device=all - full access to your entire file system
--filesystem=host - owns freedesktop name org.freedesktop.secrets: can impersonate a system service
--own-name=org.freedesktop.secrets - X11 display: X11 lets apps read input and windows of other apps
--socket=x11 - your SSH agent (can sign with your SSH keys)
--socket=ssh-auth - smart card readers
--socket=pcsc - session management (logout, suspend)
--system-talk-name=org.freedesktop.login1 - network
--share=network - inter-process communication (needed for X11)
--share=ipc - Wayland display
--socket=wayland - access to /tmp
--filesystem=/tmp - access to xdg-config/kdeglobals
--filesystem=xdg-config/kdeglobals:ro - access to xdg-run/gvfs
--filesystem=xdg-run/gvfs - talks to com.canonical.Unity.Session
--talk-name=com.canonical.Unity.Session - notifications
--talk-name=org.freedesktop.Notifications - talks to org.gnome.SessionManager.Presence
--talk-name=org.gnome.SessionManager.Presence - system tray
--talk-name=org.kde.StatusNotifierWatcher - talks to org.kde.KGlobalSettings
--talk-name=org.kde.KGlobalSettings - screensaver inhibit
--talk-name=org.freedesktop.ScreenSaver - talks to com.canonical.AppMenu.Registrar
--talk-name=com.canonical.AppMenu.Registrar - talks to org.kde.kconfig.notify
--talk-name=org.kde.kconfig.notify - talks to org.gnome.ScreenSaver
--talk-name=org.gnome.ScreenSaver - session inhibit
--talk-name=org.gnome.SessionManager
Who publishes this
The creator demonstrably controls this app id: Flathub verification, the hosting account owns the namespace, or a well-known file on their domain.
- verified on Flathub: the developer proved they control this app id
publisher:flathub
Maintenance
Recent activity on the upstream repository, or built and reviewed by Flathub.
No staleness signals: recent activity, or built and reviewed by Flathub.