What’s new & checksums

X.509 certificates and a local PKI, on every platform: generate a TLS certificate for a NAS, router or home server inside an entry — EC P‑256 or RSA 2048 / 3072 / 4096 (RSA 2048 is what QNAP and older devices accept) — self‑signed, signed by your own local root authority, or by a mini‑PKI (root + intermediate). Also client certificates (VPN, Wi‑Fi 802.1X), certificate signing requests, PKCS#12 files (a compatible format the Apple keychain reads, or a modern one), a PKCS#8, traditional or passphrase‑encrypted key, and a certificate’s expiry copied to the entry so Kipass reminds you to renew it. The root or intermediate can be kept in another entry. All made on the device; nothing is sent anywhere.

Other generators in the entry editor: random tokens and secrets (hex, base64, UUID, API keys, JWT secrets) with their entropy, single‑use recovery codes, a Wi‑Fi key with its QR code, an htpasswd line (bcrypt), a DKIM key pair with its DNS record, an age key pair, a WireGuard key pair with a ready‑to‑import configuration and QR code, and a PKCS#12 file built from a certificate and key already in the entry.

The Safari, Chrome, Firefox and Edge extensions show a dismissible banner on a page with a password field when the address imitates another site — one typo or deceptive character from a domain in your entries or from a heavily imitated service, or a brand used as bait. Fully offline; no form value is read.

An independent review of the new code, repeated until it came back clean, led to several safeguards: a malformed certificate or key kept as an attachment is refused instead of crashing the app, a generated file never replaces an existing file of the same name, and a result is stored only in the entry and vault it was started from.

A custom field you name like a standard field (Password, Notes, UserName…) is saved as “Password (2)” instead of silently overwriting the standard field.

Updated components on the desktop: the native Argon2 library (argon2‑jvm 2.12) and JNA 5.16.

Kipass now appears in the Utility and Security categories of the application menu.

Re‑released on 2026‑10‑30 with updated components, no new feature: the Java runtime bundled in the installers is now 21.0.13 (Oracle’s October 2026 security update), Bouncy Castle 1.85 (security fixes), the Argon2 library 2.12, and the Linux packages now list Kipass in the right application menu category. The checksums below are those of the new files.

Native Windows on Arm builds (Snapdragon X and other ARM64 PCs): an installer (.msi, per user) and a portable .zip, so Kipass no longer runs through x64 emulation there.

Unlocking on the desktop is faster: the native Argon2 library is now actually used for key derivation (a code detail made it fall back to the slower pure‑Java version). Same keys, same databases — roughly 2–3× faster on the machines we measured.

Drag a media out of Kipass onto a web page’s upload area, the file manager or a mail (Mac, iPad, Windows, Linux). In the share window, JPG and PDF chips hand over the file converted to that format. The temporary copy is deleted after 20 seconds by default, adjustable in Preferences.

Every in‑app shortcut can be rebound in the settings (iPhone/iPad with a keyboard, Mac, Windows, Linux, Android). Combinations that text fields and the system own are refused, and a combination already in use tells you which action has it.

KeePassXC sequences with {TIMEOTP} are understood. On a Linux Wayland session, where the system cannot tell Kipass which window will receive the keys, Auto‑Type is now hidden with an explanation instead of silently doing nothing.

The database’s own templates now have a visible section title in the “+” menu on Desktop and Android, and the help text matches the on‑screen names in every language.

About 140 interface texts that existed only in French and English (entry templates, custom field types, document expiry, PIN lock‑out, sync‑secret protection) are now translated in all 52 languages; the AutoFill feature keeps the name each platform’s system uses.

LastPass, complete: secure notes of a type (Credit Card, Bank Account, Wi‑Fi Password, Passport, Driver’s License, Social Security, Address, SSH Key, Server, Database, Software License, Membership, Insurance…) become the matching entry template instead of plain text, with card numbers, PINs and keys stored as protected fields. Nested folders (Work\Email) are rebuilt, empty folders no longer create stray entries, passwords that begin with an apostrophe are kept as they are, and files saved by Excel (BOM, UTF‑16, Windows‑1252) import with their first column intact. Proton Pass identity, Wi‑Fi and SSH items are now imported with all their fields too.

Serbian in Cyrillic: Serbian is now offered in both alphabets on every platform — Cyrillic (« Српски ») and Latin (« Srpski (latinica) »), chosen in the language list. That makes 55 interface languages.

OpenPGP key pairs: generate a GnuPG‑compatible key pair inside an entry — Ed25519 + Curve25519 (recommended) or RSA — on every platform, alongside the SSH key generator.

Text in a PDF can be selected and copied like in an image: the page is shown with its recognised text zones (on‑device, nothing leaves your device), on every platform.

With a database open for editing, dropping a file on the Media page imports it (Mac, iPad, Windows, Linux).

The privacy veil now covers every sheet and viewer, including the PDF viewer, not only the main page. Camouflage closes all open databases.

A QR code’s text can be shared as the body of a mail, and expiry reminders appear in the Android and Desktop entry lists.

Safer saves and imports: an SFTP path that is a symbolic link keeps its link, a declined passkey no longer travels back in a merged entry’s history, Proton Pass identity / Wi‑Fi / SSH items and files exported with a BOM or in UTF‑16 import completely, and the native key‑derivation library is loaded only from a verified private copy.

Passkeys now negotiate the algorithm the website asks for — RS256 and EdDSA in addition to ES256 — instead of failing on sites that do not accept ES256.

Passkeys that arrive with an imported or merged database are no longer added silently: Kipass asks first, and declining keeps only the passwords. A local passkey is never erased by a merge.

Saving is crash-safe everywhere: WebDAV and SFTP write to a temporary file, verify its size and only then replace the database; Android keeps a recovery journal and re-reads the file after each save.

Entries can be sorted by the date their password was last changed.

Export to another password manager through the Credential Exchange format (iOS, Mac and Android, off by default on Android) — passkeys and one-time-password seeds included.

On iOS 26.2 and later, AutoFill offers strong, alphanumeric and passphrase suggestions that follow the password rules of the site you are signing up on.

Imported custom fields can no longer impersonate Kipass’s own reserved fields, and field references in entries are neutralised in the browser extension.

The media manager now shows a thumbnail for every attachment — the image itself, or a PDF’s first page — in the list and on each entry’s attachment rows.

Reduce an attachment’s size to save space: downscale an image (longest side to 2048, 1024 or 512 px) and choose format/quality, with a live estimate of the resulting dimensions and byte size before you apply.

New filters for files attached to deleted entries — Recycle bin and Recycle bin only (those that would be lost if you emptied it).

Open a deleted entry to review it before acting, then restore it or delete it for good one at a time (with confirmation); a Recently deleted tab sits beside Recently opened / modified.

The app icon now renders with proper rounded corners in the Dock on macOS Tahoe.

Hardening from an internal audit: attachment thumbnails decode downsampled (no memory blow-up on a huge image), a read-only database can no longer be changed from the recycle bin, and image resize writes exact pixel dimensions.

Argon2id is now the default key-derivation function for new databases (was Argon2d) on every platform; local vault and key files are created with owner-only permissions.

Local saves now merge instead of silently overwriting when the file changed on disk; Auto-Type re-verifies the target window continuously, not just once.

PIN lockout with an escalating delay after repeated wrong guesses; a wrong PIN now also counts toward the opt-in “erase after N failures” threshold.

TPM-backed storage for the quick-unlock PIN, with an opt-in tier gated by a genuine Windows Hello prompt; secure overwrite-then-delete panic wipe.

The master password lives in a wipeable in-memory buffer instead of an immutable string, matching Desktop — it is cleared from memory when a vault locks.

QR-code generator, background sync, in-app update check, identity-document tagging, multi-window support and cross-window drag-and-drop on macOS.

Windows installer switched to a per-user install (no admin/UAC prompt); a portable Windows build (.zip, no install) is now offered alongside it; Linux .deb packages are now built root-owned.

kipass-cli, a local command-line tool for scripting your own .kdbx files — no account, no server. 22 commands (search, edit, TOTP, history, hardware-key unlock, JSON output, run for env-var injection…), for macOS and now Desktop (Windows/Linux) too.

15 new languages — Afrikaans, Azerbaijani, Belarusian, Welsh, English (UK), Esperanto, Estonian, Galician, Latvian, Malayalam, Marathi, Burmese, Nepali, Odia and Telugu — bringing the app to 54 languages, fully translated on every platform.

Linux now also ships as .rpm (amd64 and arm64), for Fedora, RHEL and openSUSE — alongside the existing .deb.