KeePassPasskeyKeyProvider 1.0.1

Changes

• A damaged or tampered device record now reports that the records are not authentic and offers the recovery phrase instead of an unexpected error.
• The owner key pair of a key wrap is checked explicitly: some Windows versions do not check it on import.
• Unit tests, CodeQL analysis, threat model in the README, security policy (SECURITY.md).

Opens a KeePass 2.x database with a passkey (FIDO2 security key, phone, Windows Hello) through the Windows WebAuthn API and hmac-secret/PRF. See the README for usage and the security model.

Requirements: Windows 11 22H2 or later (WebAuthn API v4+), KeePass 2.52 or later, an authenticator with hmac-secret/PRF support.

Installation: put KeePassPasskeyKeyProvider.dll into KeePass\Plugins\KeePassPasskeyKeyProvider\ and restart KeePass.

SHA-256: f6939e6e8e516b542802c85d6be7834eb4250efb64f21d47a62d8845823ce343

Built by GitHub Actions from this tag. Verify the origin: gh attestation verify KeePassPasskeyKeyProvider.dll --repo brlumen/KeePassPasskeyKeyProvider

KeePassPasskeyKeyProvider 1.0.0

Opens a KeePass 2.x database with a passkey (FIDO2 security key, phone, Windows Hello) through the Windows WebAuthn API and hmac-secret/PRF. See the README for usage and the security model.

Requirements: Windows 11 22H2 or later (WebAuthn API v4+), KeePass 2.52 or later, an authenticator with hmac-secret/PRF support.

Installation: put KeePassPasskeyKeyProvider.dll into KeePass\Plugins\KeePassPasskeyKeyProvider\ and restart KeePass.

SHA-256: 05888de91eb492c9d618986f5a230e5bbade55fbeefa3f3e2e2abc202a1a2040

Built by GitHub Actions from this tag. Verify the origin: gh attestation verify KeePassPasskeyKeyProvider.dll --repo brlumen/KeePassPasskeyKeyProvider