Although passwords are safer at 128-bit than in plain text, if you’re investing in specialist software you may as well go for the best security possible.įor a couple of pounds more, Sticky Password offers plenty of encryption choices as standard, including Twofish, Ghost, Sapphire II and FROG. These include AES 128-bit encryption rather than 256-bit. I still use keepass and love Dominik, he is very transparent and all, he replied several times to people in sourceforge pointing this issue, but I'd like this issue to be more known and not hidden by the community.TK8 Safe is at the budget end of the password-management market, which means sacrifices are made. Now, I know that technically It isn't really keepass fault but windows, that's why I'm not blaming Dominik for it, but in my opinion this is still an issue that is definitely worth mentioning on his 'Security issues' web page. Even, If windows doesn't cache these passwords, It's still annoying because an attacker can AT THE VERY LEAST, access it a few hours after closing your database. It is kind of dangerous, because windows can cache these passwords somewhere else, allowing an attacker to access your passwords a long time after closing it. Unfortunately, keepass fails to prevent windows from making a copy of your passwords in memory. Preventing a thief or someone seizing your computer from accessing your passwords, when the database is locked/closed. Preventing people from accessing your passwords without compromising your computer (NOT sending your passwords over the internet without your consent, NOT autofilling your passwords in malicious hidden forms, no security flaw allowing to easily decrypt. From a security point of view, keepass only has two duties:

Keepass password safe