Version v7.4.0

With KeePass Client v7.4.0

Release Date

Jan 27th, 2016

These Release Notes detail the differences between this release and the last version of any type.


  • Our AD/LDAP integration has been improved:
    • Nested groups are now supported (Users & Roles > Manage Directories > click Directory name > click Advanced Settings > make sure Get Nested Groups is checked). The roles created when nested groups are imported will not be nested automatically.
    • New OpenLDAP directory type has intelligent presets for OpenLDAP-specific configuration settings (other LDAP implementations are still supported).
    • Directory account information for Autosyncing and performing password changes and resets is now obfuscated in the database.
Note: Upon logging into Password Server for the first time after upgrading, 
a page requesting Directory account credentials may appear.  Admin must supply the
credentials for an account with at least read access to the Directory in order to 
complete the migration to the new system.

Prevent this page from appearing by entering these credentials on the Edit Directory
page (Users & Roles > Manage Directories > click Directory name) before upgrading.
  • RADIUS is now a supported Two Factor Authentication method
  • The SSO Server page now displays the public SSH thumbprint of the Password Server so users can be sure they are connecting to the right machine.
  • To reduce clutter in the Web Client UI, we have moved the Language Selection dropdown from the bottom of every page to the Manage Account page (accessible from the Hello menu in the top-right corner of the screen).

Bug Fixes

  • Many fixes to UI elements in the Web Client.
  • Fixed an issue where the API calls made by the KeePass client could be identified as attempted attacks by some security software.
  • Fixed an issue in the desktop clients that would cause error dialogs to appear to users if their roles were changed while they were logged in.

Known Issues 

  • There is an issue in this release where the page to finalize the migration of Directory Users and Roles will not appear, and Directory Users will be prevented from logging in.  The workaround is to ensure that the Directory Admin credentials are entered prior to upgrading.  (Fixed in 7.4.1+)
  • KeePass Clients v6.0.1 and older will not be able to perform actions that require usage comments.
  • Internet Explorer 8 is no longer supported in Password Server Version ≥ 7.0.1.