A lot of contributions of KeePassXC are now generated by AI[1]. I feel like I can’t trust it anymore. This is security critical software for me not just a random website where it doesn’t matter if it breaks. Am I worrying too much? [1] Pull requests · keepassxreboot/keepassxc · GitHub

For now, I second this. I will not say that it is bad before CVE exactly because of AI happened, but I will keep extremely sensitive data away from it. For now I think it is time to completely move to Proton Pass or Bitwarden. For local storage encrypted volume via VeraCrypt or Cryptomator Anyway…

I think this is a very sterile topic as of now. People won’t be convinced here whatever are the arguments. I think it’s time to move on folks. :hugs:

[image] U53R: Anyways, autofill less secure than copy/paste (it even recommended here by Proton): Dangerous advice! Autofill is definitely more secure than copy-paste, because without it you lose one of the strongest security features: the protection against phishing. This whole click-jacking…

I personally disable it too and use passkeys to login into most of my websites as explained here: Password, 2fa, and their backups management, need critique! - #19 by kissu But the rest of my opsec probably needs to be taken into account too. Not sure if the most secure but I also don’t mind not h…

[image] kissu: disable it too and use passkeys This is indeed better, but unfortunately have several drawbacks: It is not widely supported. Most services still require password (even Tuta!) It requires hardware key. Yeah there is some workarounds, but try to use passkey on Linux and Android…

I usually choose my services with care and how I can login into them is quite high on my list :hugs: Yubikeys work quite well on both Linux and Android from my own personal experience. Still better than iOS at least. :joy:

If you are genuinely interested in a technical answer, here it is: Auto-fill is ALWAYS more secure than copy-paste. Why is that? Auto-fill checks the URL of a page and provides credentials only if it matches the entry in your password database (and even then only after an explicit action by the use…

Everything is kinda listed in the link. :wink:

Thanks for sharing the news here. That helps reaffirm the trust we have in KeePassXC. Congratulations to their whole team as well. :tada:

Privacy Guides Community

Is KeePassXC still trustworthy if they are allowing AI generated contributions?

Questions

kissu November 25, 2025, 1:09pm 59

Related amazing news: KeePassXC Awarded ANSSI Security Visa

So yes, looks quite trustworthy to me.

Topic		Replies	Views
Is KeePassXC accurate calculating entropy of a password? Questions	18	1583	December 4, 2025
KeePassXC added Passkeys support General	13	1253	March 12, 2024
Private online AI (Venice, Duck, etc) General	33	6419	October 5, 2025
I find the KeepassXC autotype feature pretty dangerous if you make a mistake Questions	2	618	September 30, 2025
KeePassXC Awarded ANSSI Security Visa News	4	873	November 26, 2025

Privacy Guides

Massive organizations are monitoring your online activities. Privacy Guides is your central privacy and security resource to protect yourself online.

Privacy Guides is a non-profit, socially motivated website that provides information for protecting your data security and privacy.

We do not make money from recommending certain products, and we do not use affiliate links.

Knowledge Base

Private Web Browsers

Top VPN Providers

Privacy-Respecting Services

Software Recommendations

More Resources

Is KeePassXC still trustworthy if they are allowing AI generated contributions?

Related topics