Passbolt 5.3 release introduces custom fields (beta), a clipboard auto-flush feature, significant performance improvements and several bug fixes.

Explore the full details of the 5.3 release in this blog -> https://hubs.li/Q03xr0MR0

Read about the 5.3.2 release in this changelog page -> https://hubs.li/Q03x_ScW0

#PassboltV5 #PasswordManager #OpenSource #Cybersecurity

1/6

Guess what cybersecurity expert Alexandre Blanc appreciates most about passbolt?
It's all about owning your stack! Alexandre loves open source solutions, advocating for data ownership and transparency for decades. Being a Linux enthusiast and security advocate, he's keen on maintaining full control through self-hosting.

Check out his insights in this post: https://www.linkedin.com/posts/alexandre-blanc-cyber-security-88569022_privacy-cybersecurity-security-activity-7348012489659281408-ijnU/

Passbolt 5 series introduced encrypted metadata, the foundation on which the new resource types and capabilities like multiple URIs, custom icons, custom fields, etc. are built.

Ready to test-drive the beta? The latest blog post walks through enabling the feature set, migrating safely and more: https://hubs.li/Q03xCMwG0

Passbolt 5.3 is now available, introducing custom fields that allow users to attach additional key–value pairs to a password entry or even create standalone entries. This release also includes performance enhancements and bug fixes.

Check out the details in this blog post and see what's coming in the next releases: https://hubs.li/Q03xr0MR0

Ich überlege, auf einen »Familien-Passwort-Manager« umzusteigen – also mit separaten Zugängen für alle, aber der Möglichkeit, Zugriffe gezielt zu teilen. Hintergrund ist auch das Thema digitaler Nachlass. Wie regelt ihr das in der Familie? Welche Dienste nutzt ihr, was hat sich bewährt?

#security #password #passwort #sicherheit #passwordmanager #passwortmanager

/kuk

Sicurezza digitale: È Proton la soluzione 360°?

Leggi articolo: https://www.tantilink.net/2025/07/Sicurezza-digitale-Proton-la-soluzione-360-gradi.html

Passbolt docs now cover clear admin guidance on resource metadata encryption. This section includes how to generate a shared key, enabling encrypted and legacy formats, and migrating existing resources. The section is a work in progress and will expand as the feature matures.

Read the admin steps here → https://www.passbolt.com/docs/admin/metadata-encryption/

Having just recently switched my password manager to @keepassxc, this is a very helpful blog post from @markpitblado

How to backup your password vault with KeePassXC

https://www.markpitblado.me/blog/how-to-backup-your-password-vault-with-keypassxc/

#passwordmanager #opensource

Does pass by Jason A. Donenfeld of zx2c4 and wireguard fame support passkeys or have an extension that supports passkeys? And does anyone have experience using a non-internet addressable private git server (local host served from a desktop) to sync to a pass mobile phone client?

I am thinking passkeys are a dead end but the I definitely need a copy of the passwords on my phone.

#Apple erweitert Passwörter-App-Unterstützung für Windows | Mac & i https://www.heise.de/news/Apple-erweitert-Passwoerter-App-Unterstuetzung-fuer-Windows-10483159.html #password #passwords #Passwortmanager #PasswordManager #Passkey #Passkeys

Oh good night. My #passwordManager is the last place I want anyone's AI.

https://nerds.xyz/2025/07/bitwarden-mcp-server-secure-ai/

Well, great. Now @bitwarden is going to ad AI bullshit to their services. I left Bitwarden a few months back for different reasons but I'm kind of glad that I did. I switched to @1password@1password.social. If they add AI to their services (are they already?), I'm just going to call it quits on all of them and just move completely to @keepassxc@fosstodon.org. I can simply just host my own with Keepassxc and not have to worry about any AI crap. I'm using Keepassxc now but not for everything. That might change in the very near future.

https://nerds.xyz/2025/07/bitwarden-mcp-server-secure-ai/

#passwordmanager #privacy #security

Researchers in the article “ShieldFlow: A Security Framework for OT Systems” (International Journal of Information Security, Springer 2025) highlight passbolt’s role in helping industries securely manage credentials, demonstrating the relevance of open source tools in operational technology (p. 18).

Check out the book here: https://link.springer.com/article/10.1007/s10207-025-01083-3

Apparently it is utterly impossible to program an app to automatically fill in a password based on subdomain or port.

example.com vs site1.example.com vs example.com:9993

Would love a password manager that recognize those as having different logins. People have been asking for this from 1Password since at least 2013, and their reply is basically, you don’t really want that. Apple Passwords, same issue.

Anyone know of an app that can do this on macOS?

Interested in automating Passbolt deployment through Ansible? There's detailed documentation for installation via Ansible playbook.

This installation method is recommended for experienced users proficient with Ansible and requires a clean Debian 12 or Red Hat 9 server.

Documentation: https://www.passbolt.com/docs/hosting/install/pro/ansible/
GitHub repo: https://github.com/passbolt/passbolt-ansible-playbooks

#Bitwarden: “Hey #Siri, make my #password security smarter”

https://bitwarden.com/blog/bitwarden-ios-app-intents-integration/

Cybersecurity expert Alexandre Blanc recently highlighted Passbolt Android 2.1.0's recent update. He covers performance enhancements and expanded translations, now accommodating users in 13 new languages. Open source as always.

Check out his insights in this post: https://www.linkedin.com/posts/alexandre-blanc-cyber-security-88569022_passbolt-release-note-210-passbolt-android-activity-7345833463536607232-tzvp

Paypal stopping me from using a high entropy 32 character password. Cool and Normal for a company that handles money

Is there a term for the class of "credential storage confusion" #security issues, where the user accidentally saves a password or passkey in a vault they don't actively use (browser, #SSO IdP, #passwordManager, OS)?

One thing that made me think of this is having to go through a separate step (like "use a different device") on Android to avoid enrolling the phone as passkey.

I can see how users spread active credentials across multiple services which seems like a massive #infosec issue to me...