KeePassXC, the popular open-source, cross-platform password manager, has released version 2.8, the first stable release in the new series, about a month after the initial beta.
As covered when the beta arrived, one of the biggest changes is the migration from Qt 5 to Qt 6. Linux users also gain long-awaited Auto-Type support on Wayland through XDG Desktop Portals and a new Quick Unlock feature using Polkit.
Another useful addition is remote database synchronization and importing via external tools. Keyboard shortcuts are now customizable, and the integrated SSH Agent can generate RSA, ECDSA, and Ed25519 keys directly.
The stable release also introduces an experimental AArch64 AppImage for Linux, expanding support to ARM64 systems. AppImage users will encounter fewer TLS-related errors when downloading website favicons or checking for updates, thanks to improvements since the beta.
Other last-minute fixes address a clipboard-clearing issue under Wayland, and problems affecting native Windows ARM64 builds. Windows administrators can now enforce certain application settings through Group Policy overrides.
On the security side, KeePassXC 2.8 includes fixes for five vulnerabilities affecting versions 2.7.x and earlier. These cover memory safety issues when importing legacy KDB databases, two browser-integration problems, and a Windows-specific issue related to sharing SSH keys with Pageant.
One of the vulnerabilities is tracked as CVE-2026-69150, while the remaining four are still awaiting CVE identifiers. According to the developers, all five are rated low to moderate severity, and none compromises KeePassXC’s core cryptography or password management functionality. Nevertheless, users are strongly encouraged to upgrade.
Interestingly, the project also clarified that none of the vulnerabilities originated from AI-generated code, although AI-assisted analysis helped identify them.
Apart from these changes, the release includes several smaller improvements, such as better AppImage desktop integration, expanded database statistics showing passkey and TOTP entry counts, and more comprehensive Proton Pass importing.
It also fixes application freezes on systems with one or two CPU cores and various corrections to browser integration, password generation, and Secret Service functionality.
For more information, see the official announcement or the complete changelog.
KeePassXC 2.8 is available for download from the project’s website, with Linux packages also distributed through Flathub and the official Ubuntu PPA.
