Today, we are releasing KeePassXC 2.7.11 with many bug fixes and enhancements. We are also very happy to announce that a previous version (2.7.9) has received a security Visa for passing the First-level Security Certification (CSPN) by the French National Cybersecurity Agency (ANSSI).
ANSSI Security Visa for KeePassXC 2.7.9
On 17 November 2025, KeePassXC (Version 2.7.9 for Windows 10) has been awarded a security Visa by the French National Cybersecurity Agency (ANSSI) for a First-level Security Certification (CSPN) with report No. ANSSI-CSPN-2025/16. The certification was sponsored by the agency and is valid for three years.
The CSPN security Visa certifies that the product was tested to comply with ANSSI first-level security standards. The certification is recognised by French authorities and internationally by the German Federal Office for Information Security (BSI). The certificate and more information about the CSPN programme can be found on the ANSSI website. We have also created a dedicated page listing all previous security reviews of KeePassXC where you can download the full technical audit report. We will keep the page updated with any future audits and certifications.
KeePassXC 2.7.9 can be downloaded from GitHub. However, if you want to enjoy the latest features, we recommend you read on and download our new release: KeePassXC 2.7.11! ;-)
New Release: KeePassXC 2.7.11
The new KeePassXC 2.7.11 release contains a large number of bug fixes and enhancements. The most notable new features are: support for more file types in the inline attachment viewer (images, HTML, and Markdown), the ability to edit text file attachments, a new database merge confirmation dialog, support for groups in KeeShare, and an option for automatically generating passwords in new entries. We also fixed longstanding issues where the main window would not restore its previous geometry when starting in the tray, or KeePassXC not releasing secure input mode on macOS. The new version also comes with a brand-new Liquid Glass icon and new platform-specific Window and Help menus on macOS.
Changelog
Following is a list of changes in this release. You can view the entire list of changes also on the 2.7.11 Release Page.
Changes
- Add image, HTML, Markdown preview, and text editing support to inline attachment viewer [#12085, #12244, #12654]
- Add database merge confirmation dialog [#10173]
- Add option to auto-generate a password for new entries [#12593]
- Add support for group sync in KeeShare [#11593]
- Add {UUID} placeholder for use in references [#12511]
- Add “Wait for Enter” search option [#12263]
- Add keyboard shortcut to “Jump to Group” from search results [#12225]
- Add predefined search for TOTP entries [#12199]
- Add confirmation when closing database via ESC key [#11963]
- Add support for escaping placeholder expressions [#11904]
- Reduce tab indentation width in notes fields [#11919]
- Cap default Argon2 parallelism when creating a new database [#11853]
- Database lock after inactivity now enabled by default and set to 900 seconds [#12689, #12609]
- Copying TOTP now opens setup dialog if none is configured for entry [#12584]
- Make double click action configurable [#12322]
- Remove unused “Last Accessed” from GUI [#12602]
- Auto-Type: Add more granular confirmation settings [#12370]
- Auto-Type: Add URL typing preset and add copy options to menu [#12341]
- Browser: Do not allow sites automatically if entry added from browser extension [#12413]
- Browser: Add options to restrict exposed groups [#9852, #12119]
- Bitwarden Import: Add support for timestamps and password history [#12588]
- macOS: Add Liquid Glass icon [#12642]
- macOS: Remove theme-based menubar icon toggle [#12685]
- macOS: Add Window and Help menus [#12357]
- Windows: Add option to add KeePassXC to PATH during installation [#12171]
Fixes
- Fix window geometry not being restored properly when KeePassXC starts in tray [#12683]
- Fix potential database truncation when using direct write save method with YubiKeys [#11841]
- Fix issue with database backup saving [#11874]
- Fix UI lockups during startup with multiple tabs [#12053]
- Fix keyboard shortcuts when menubar is hidden [#12431]
- Fix clipboard being cleared on exit even if no password was copied [#12603]
- Fix single-instance detection when username contains invalid filename characters [#12559]
- Fix “Search Wait for Enter” setting not being save [#12614]
- Fix hotkey accelerators not being escaped properly on database tabs [#12630]
- Fix confusing error if user cancels out of key file edit dialog [#12639]
- Fix issues with saved searches and “Press Enter to Search” option [#12314]
- Fix URL wildcard matching [#12257]
- Fix TOTP visibility on unlock and settings change [#12220]
- Fix KeeShare entries with reference attributes not updating [#11809]
- Fix sort order not being maintained when toggling filters in database reports [#11849]
- Fix several UI font and layout issues [#11967, #12102]
- Prevent mouse wheel scroll on edit username field [#12398]
- Improve base translation consistency [#12432]
- Improve inactivity timer [#12246]
- Documentation improvements [#12373, #12506]
- Browser: Fix ordering of clientDataJSON in Passkey response object [#12120]
- Browser: Fix URL matching for additional URLs [#12196]
- Browser: Fix group settings inheritance [#12368]
- Browser: Allow read-only native messaging config files [#12236]
- Browser: Optimise entry iteration in browser access control dialog [#11817]
- Browser: Fix “Do not ask permission for HTTP Basic Auth” option [#11871]
- Browser: Fix native messaging path for Tor Browser launcher on Linux [#12005]
- Auto-Type: Fix empty window behaviour [#12622]
- Auto-Type: Take delays into account when typing TOTP [#12691]
- SSH Agent: Fix out-of-memory crash with malformed SSH keys [#12606]
- CSV Import: Fix modified and creation time import [#12379]
- CSV Import: Fix duplication of root groups on import [#12240]
- Proton Pass Import: Fix email addresses not being imported when no username set [#11888]
- macOS: Fix secure input getting stuck [#11928]
- Windows: Prevent launch as SYSTEM user from MSI installer [#12705]
- Windows: Remove broken check for MSVC Redistributable from MSI installer [#11950]
- Linux: Fix startup delay due to StartupNotify setting in desktop file [#12306]
- Linux: Fix memory initialisation when –pw-stdin is used with a pipe [#12050]
Download
The new release can be downloaded from our downloads page, the Microsoft Store, our Ubuntu PPA, and Flathub.
Feedback
Please report any bugs you encounter at our GitHub issue tracker. We are also available on Matrix for real-time feedback and discussions. See our contact page for further options.