Add Keepassxc to the Microsoft Store

[thewalkerz]

Some time ago Microsoft released its new application store so that more developers could upload their apps, regardless if they are UWP, PWA or the classic Win32, I would like them to upload Keepassxc to the Microsoft store, that would make it easier to download this fabulous password manager.

This video from Microsoft explains how to do with Win32
https://www.microsoft.com/en-us/videoplayer/embed/RWFAsa?pid=cx-video-1-oneplayer&postJsllMsg=true&autoplay=true&market=en-us

Thanks for this Amazing Password Manager 😁

[droidmonkey]

Yup, planning on doing this for the 2.7.0 release coming up! Thanks for the kudos 👏

[unicorn855]

Is this still planned/likely to happen? I am currently thinking about whether or not to switch out of 'S Mode' on one of windows devices because I'd rather have a great password manager than the 'increased security' which windows in S mode claims to offer :)
Still, I'd like to see a robust and feature-rich password manager such as KeepassXC on there regardless 👍

[droidmonkey]

I am working on getting registered to add an app to the store... a bit more cumbersome than I expected.

[hj-collab]

@droidmonkey Now it's really important for the official app to get into the store. Else fake keepassxcs will make money in your name and might even sniff passwords. I suggest you to ask for help in Privacy Communities like PrivacyGuides to get the app in the store.

[droidmonkey]

Just because we are in the store already doesn't prevent anyone else from submitting. Microsoft only cares if the name is the same, not the actual application.

I am attempting another submission right now.

[hj-collab]

@droidmonkey All the best. Meanwhile I'll ask people in the PrivacyGuides to report the fake app.

[unicorn855]

I mean it's a dead giveaway that the app in the store at the moment is fake not only because no one knows who/what 'CoderLearn' is supposed to be, but also because they literally infringe upon your rights by claiming to be the 'KeePassXC Team' (what a dodgy phrasing to begin with)

Can I as a simple user do anything about that scam in any case?

Perhaps it's a good idea to issue a warning about the fake app on your official website until this gets resolved?

[droidmonkey]

We have issued a formal copyright takedown request and reached out to Microsoft.

[droidmonkey]

Anddddddd DONE

https://apps.microsoft.com/store/detail/keepassxc/XP8K2L36VP0QMB

[hj-collab]

@droidmonkey I have shifted back to the msi package on website from MS store package. I run WDAC very strict configuration and it works fine with the apps I use. I don't want to tone it down. Thanks!

[zmatthias]

It would be really aweseome if UAC escalation were not needed. Me and many people would love to use it for work and sadly do not get the privledges on our machines. Thanks a lot!

[droidmonkey]

Use our portable distribution or ask your IT staff to make it available in your software store. Installing a password manager to user modifiable location is very risky. Files could be tampered with that corrupts our program and exposes your secrets.

[hj-collab]

@droidmonkey I'll use the portable distribution. Just wanted to know your thoughts. Is it really risky when all your KeePassXC binaries & dlls are signed? It's not some body could easily tamper them.

[droidmonkey]

If you use applocker and enforce binary signing then you are better off.

[Vettenranta]

If I download KeepassXC from Microsoft store does it need to be verified like the .msi and .zip files? I mean the authenticity and integrity checks. I am very paranoid about my security.

[phoerious]

If you downloaded this, no.
https://apps.microsoft.com/store/detail/keepassxc/XP8K2L36VP0QMB

[Vettenranta]

Yes, that's the one that I downloaded.

[wbrickles]

It appears this app doesn't update from the Microsoft Store (I understand that's a limitation of win32 apps). There also doesn't be the standard way of checking for updates from the app itself. What is the recommended way for Microsoft Store users to keep the application updated?

[phoerious]

Microsoft takes forever to approve new updates.

[droidmonkey]

So we learned that win32 apps are NOT auto updated from the store, which is so dumb. You need to install the update outside the store.

[wbrickles]

My store version (2.7.4) doesn't appear to have "Check for updates" available as an option. So is the best option for updating to download from the website?

[droidmonkey]

Yes

[wbrickles]

That's unfortunate, really leaves people who install from the Microsoft Store pretty vulnerable if any security issue is found. Thank you for the quick responses!