KeePass 1.37

# New Features:
- Header data in KDB files is now authenticated (to prevent silent data removal attacks; thanks to P. Gasti and K. B. Rasmussen).
- The content part of a KDB file now contains 32 random bytes (generated each time the file is saved, by a cryptographically secure pseudo-random number generator using system entropy) to prevent content guessing attacks using the content hash.
- When closing the entry editing dialog by closing the window (using [X], Esc, ...) and there are unsaved changes, KeePass now asks whether to save or discard the changes; only when explicitly clicking the 'Cancel' button, KeePass doesn't prompt.
- Added '-pw-stdin' command line option to make KeePass read the master password from the StdIn stream.
# Improvements:
- Improved update check.
- Upgraded and improved installer (now uses Unicode, LZMA2 compression, ...).
- Upgraded to Boost libraries version 1.51.0.
- Various code optimizations.
- Minor other improvements.

# New Features:
* When trying to delete entries, the confirmation dialog now shows a short summary of the entries that will be deleted.
* Added date/time placeholders: {DT_SIMPLE}, {DT_YEAR}, {DT_MONTH}, {DT_DAY}, {DT_HOUR}, {DT_MINUTE}, {DT_SECOND}, {DT_UTC_SIMPLE}, {DT_UTC_YEAR}, {DT_UTC_MONTH}, {DT_UTC_DAY}, {DT_UTC_HOUR}, {DT_UTC_MINUTE}, {DT_UTC_SECOND}.
# Improvements:
* Improved UI update when using a TAN entry.
* The last modification time of a TAN entry is now updated when using it.
* Improved behavior when trying to shutdown the system while KeePass is running.
* KeePass does not block the system shutdown anymore when a dialog is displayed but no database is opened.
* LNGX files aren't shown in the translation selection dialog anymore.
* Improved KDB data validation.
* Improved multi-byte to Unicode and Unicode to multi-byte string conversions (less memory is required now).
* Changed versioning scheme in file version information blocks from digit- to component-based.
* Upgraded installer.
* Various code optimizations.
* Minor other improvements.
# Bugfixes:
* HTML export: XML special characters in URL links and attachment names are now encoded.
* HTML export: group trees are not encoded twice anymore.

# New Features:
* Auto-Type window definitions in custom window-sequence pairs are now Spr-compiled (i.e. placeholders, environment variables, field references, etc. can be used).
* Auto-Type: entry titles are now Spr-compiled before being compared with the target window title.
* Added support for 's' HTML tag in the notes field (in the entry view of the main window the marked text is striked out).
* Supported HTML tags (b, i, u, s) are now removed from notes before showing them in the main entry list.
* Regular expression replacements can now be applied to the notes before showing them in the main entry list (the KeeNotesRegex# items in the configuration file specify the regular expressions and KeeNotesFormat# the replacements).
* Added option to select a different font for notes ('Tools' -> 'Options' -> tab 'Interface' -> button 'Select Notes Font').
* Ensuring same keyboard layouts during auto-type is now optional (option enabled by default).
* Added regular expression support in x64 builds.
* Master key transformations are now computed in two threads in x64 builds, too; on dual/multi core processors this results in almost twice the performance as before (by doubling the amount of rounds you'll get the same waiting time as in 1.21, but the protection against dictionary and guessing attacks is doubled).
# Improvements:
* Improved key transformation delay calculation.
* The program options are now also accessible while the database is locked.
* Column headers in a search results list are now unclickable (search results cannot be sorted anyway).
* Improved string translation in task dialogs.
* Improved dialog display state handling.
* Added '@' and '`' to the printable 7-bit ASCII character set.
* Merged simple and extended special character spaces to one special character space.
* Reduced control character space from 60 to 32.
* Upgraded to Boost libraries version 1.49.0.
* Various code optimizations.
* Minor other improvements.
# Bugfixes:
* The 'Add Entry' tray context menu command is now disabled when a dialog is displayed.
* The toolbar state is now updated after clicking a group link in the entry details view.

# New Features:
* Added option to minimize the main window after locking the KeePass workspace (option enabled by default).
* Added {SAFARI} browser path placeholder.
* KeePass now removes zone identifiers from the CHM help file.
* Address space layout randomization (ASLR) is supported now.
* Plugins: added new COM interface IKpAPI3, which extends IKpAPI2 by a lot of useful functions.
* Plugins: added tray and cleanup notification and customization messages.
* Plugins: added ability to delay unloading until the main window has been closed.
# Improvements:
* The overlay icon for the taskbar button (on Windows 7) is now restored when Windows Explorer crashes and when starting in minimized and locked mode.
* The buttons in file save dialogs now have accelerator keys.
* Improved opening of CHM help file.
* Improved command availability updating of rich text context menus.
* KeePass is now developed and compiled using Visual Studio 2008 (with MFC 9.0); older compilers, IDEs and Windows 9x aren't supported anymore.
* Updated SAL annotations.
* Upgraded to Boost libraries version 1.47.0.
* KeePass.exe isn't compressed using UPX anymore.
* Plugins: IKpAPI::GetMainWindowHandle now always returns the handle of the KeePass main window, independent from which thread the function is called.
* Various UI text improvements.
* Various code optimizations.
* Minor other improvements.

# New Features:
* Added option to specify a database color; by specifying a color, the main window icon and the tray icon are recolored.
* When searching for a string containing a whitespace character, KeePass now splits the terms and reports all entries containing all of the terms (e.g. when you search for "Forum KeePass" without the quotes, all entries containing both "Forum" and "KeePass" are reported); the order of the terms is arbitrary; if you want to search for a term containing whitespace, enclose the term in quotes.
* Added support for sending keystrokes (auto-type) to windows that are using different keyboard layouts.

# Improvements:
* Improved version formatting in update dialog.
* On Windows Vista and higher, the restart dialog after changing the language is now shown as modern task dialog.
* KeePassLibC can now be compiled in debug x64 and release Unicode x64 mode.
* Various code optimizations.
* Minor other improvements.

# Bugfixes:
- Command line options provided by plugins work correctly again.

* New Features & Improvements:
- Added option to remember key sources (key file paths, provider names, ...); it's enabled by default.
- New locking timer (using a timeout instead of a countdown).
- Lock files are now hidden.
- On Windows 7 and higher, the main window peek preview is now disabled when the KeePass workspace is locked.
- File transactions: the NTFS/EFS encryption flag is now also preserved when the containing directory isn't encrypted.
- {FIREFOX} placeholder: added support for registry-redirected 32-bit Firefox installations on 64-bit Windows systems.
- Relative database paths on the command line are now evaluated relatively to the initial working directory (specified by the parent process) instead of the last used directory.
- Improved user-friendliness in UAC dialogs.
- Improved help (moved placeholders to separate page, ...).
- Installer: the KeePass start menu shortcut is now created directly in the programs folder; the other shortcuts have been removed (use the Control Panel for uninstalling and the 'Help' menu in KeePass to access the help).
- Upgraded installer.
- Various code optimizations.
- Minor other improvements.

# New Features:
* Password quality estimation algorithm: added check for about 1500 most common passwords (these are rated down to 1/8th of their statistical rating; Bloom filter-based implementation).
* {GOOGLECHROME} placeholder: updated detection code to also support the latest versions of Chrome.
* KeePass now enables data execution prevention (DEP).
* Improved lock overlay icon (higher resolution).

# Improvements:
* Improved character classification in password quality estimation algorithm.
* Improved group and entries deletion confirmation dialogs (only Windows Vista and higher).
* Items in the update checking, plugin and icon picker dialogs aren't underlined anymore when hovering over them.
* The default expiry interval for new entries is now limited to a maximum of 8 years.
* Renamed character repetition option in the password generator for improved clarity.
* Added code to prevent loading libraries from the current working directory (to avoid binary planting attacks).
* Installer: various minor improvements.
* Various code optimizations.
* Minor other improvements.

# New Features:

* Added option to use file transactions when writing databases (enabled by default; writing to a temporary file and replacing the actual file afterwards avoids data loss when KeePass is prevented from saving the database completely).
* Added high DPI support.
* The Ctrl+E shortcut key now jumps to the quick search box.
* In the main entry list, backup entries are now rendered with green text color.
* Menus are now rendered with gradient item backgrounds.
* Added support for detecting KeePass 2.08 and higher KDBX database files.
* Added {GOOGLECHROME} placeholder, which is replaced by the executable path of Google Chrome, if installed.
* Added '--auto-type' command line option.
* Added '--lock-all' and '--unlock-all' command line options to lock/unlock the workspaces of all other KeePass instances.
* Added 'KeeConfigFileOverrideGlobal' and 'KeeConfigFileOverrideUser' configuration options to change the locations of the configuration files.
* On Windows 7, KeePass now shows a 'locked' overlay icon on the taskbar button when the database is locked.
* On Windows 7, when opening/saving a database, the taskbar button is now animated using an indeterminate progress bar.

# Improvements:

* Most broadcasted Windows messages do not wait for hanging applications anymore.
* Improved multi-byte characters support in entry details view.
* Improved toolbar updating after restoring from tray.
* Improved naming of options to clarify their meaning.
* Improved tray icon updating.
* Improved behavior on KDBX error.
* Upgraded installer.
* Various performance improvements.
* Various code optimizations.
* Minor other improvements.

- Added option to use Windows' CNG/BCrypt API for key
transformations (about 50% faster than the KeePass built-in
key transformation code; by increasing the amount of rounds
by 50%, you'll get the same waiting time as in 1.15, but the
protection against dictionary and guessing attacks is raised
by a factor of 1.5; option enabled by default; only Windows
Vista and higher)
- Completely new update checking system that now also supports
checking for new plugin versions
- Added warning when trying to open a KDBX file created by
KeePass 2.x (with hint about how to migrate from 2.x to 1.x)
- Added 'KeeAutoNewDbBasePath' and 'KeeAutoNewDbBaseName'
configuration options (to specify the default location where
the database file will be stored in mini mode)
- Added advanced option to immediately delete TAN entries after
using them
- Added '-minimize' command line option
- Added '-registerfileext' and '-unregisterfileext' command
line options to register/unregister the KDB file association
- File association methods are now UAC aware
- Added check for reserved group names (like 'Backup')
- On Windows Vista and higher, core database manager error /
warning messages are displayed using modern task dialogs
- The number of days below which entries are treated as soon to
expire can now be configured (see help -> customize)
- Plugins: added new COM interface (IKpAPI2) for the main API
that allows querying whether the database is the one
initially specified on the command line
- Key provider plugin API: new key query method that supports
context information

- Image list handling improvements
- When auto-locking after the specified number of seconds of
inactivity, KeePass minimizes to taskbar or to tray,
depending on the 'Minimize to tray instead of taskbar' option
- Plugin versions are now displayed in a separate column in the
plugins dialog
- When trying to open a second master key dialog or auto-type
entry selection dialog for a window, KeePass brings itself to
the foreground instead of showing a second dialog
- Calculation of soon to expire entries is now more precise
- Various improvements to status bar messages
- Improved workspace locking toolbar button tooltips
- Installer: various minor improvements
- Various code optimizations
- Minor other improvements

- Newlines of the notes field are now encoded correctly in
exports when Unix mode is enabled
- New databases do not inherit file names of previous locked
databases anymore

New Features:

* Completely new plugin architecture (exposing a lot more functionality to plugins, faster, requires less memory, safer memory management / cross-module calls, more secure, and allows independent development of KeePass and plugins, i.e. starting with 1.15 KeePass can be updated without requiring plugins to be updated and vice versa).
* Added option to use advanced in-memory protection (DPAPI, only Windows Vista and higher; the key is stored in a secure, non-swappable memory area managed by Windows; option enabled by default).
* The hash of the master key and its transformed version are now in-memory protected.
* Added help source selection dialog (by default the online help center is used).
* Added '-set-urloverride', '-clear-urloverride' and '-get-urloverride' command line options.
* Focused disabled menu items are now drawn with a transparent selection rectangle.
* Windows XP and higher: added support for double-buffering in the entry list.
* Windows Vista and higher: added support for alpha-blended marquee selection in the entry list.
* Added KeeForceAllowChangeMasterKey, KeeForceAllowPrinting, KeeForceAllowImport and KeeForceAllowExport configuration options (these override the option to disable unsafe operations and the mini mode setting; they are only loaded from the enforced and global INI files, not the local one).
* Added KeeDisallowPrintingPasswords configuration option to disallow printing passwords and viewing them in the print preview.
* Added multi-user documentation.

Improvements:

* Improved plugin loading performance.
* Plugins don't need to be manually enabled anymore (just copy the plugin files into the KeePass application directory).
* Improved main menu items order.
* Improved main menu accelerators.
* Improved group main menu item texts.
* Improved performance of various entry list operations.
* Hash of master key is now cleared when closing a database.
* Hash of file key is now cleared after opening/saving files.
* Various code optimizations.
* Minor other improvements.

Bugfixes:

* Fixed cursor navigation problem in secure edit controls.
* Fixed random access violation in OnScreenKeyboard plugin.

Notes:
This is a stable release. It is recommended to upgrade
from any previous 1.x version to 1.14.


Changes:
08/10/18 - 1.14
- KeePass is now also available as MSI package
- Entry field references are now dereferenced in drag&drop
operations
- Added support for writing databases to hidden files
- Added '-lock' command line option

- Improved compatibility of browser placeholders with cmd://
URLs
- Improved compatibility of the database auto-saving option
(at exit and locking) with other options
- Consecutive auto-type delays now add up
- Improved encoding detection in file import routines
- Several 64-bit code improvements
- Various code optimizations
- Minor other improvements

- Fixed crash that happened when clicking 'No' in the plugin
incompatibility message box while passing a plugin command
line argument
- Special XML characters in group names are now encoded
correctly in XML exports (group tree attribute)

Notes:
This is a stable release. It is recommended to upgrade
from any previous 1.x version to 1.13.


Changes:
08/09/07 - 1.13
- Completely new auto-type/URL placeholder replacement and
field reference engine
- Added internal field reference cache (highly improves
performance of multiple-cyclic/recursive field references)
- Added support for Uniform Naming Convention (UNC) paths
(Windows) in the URL field (without cmd:// prefix)
- Added command in the 'Tools' menu in the entry editing dialog
to insert the default auto-type sequence into the notes
- On Windows Vista and higher, the read-only mode message box
is displayed as a modern task dialog
- Added option to exclude expired entries in the 'Find' dialog
- Added advanced option to include expired entries in quick
searches (toolbar; enabled by default)
- Added advanced option to automatically sort items in the
auto-type entry selection dialog (enabled by default)
- Added advanced option to disable automatic clearing of the
clipboard when closing/locking the database (default: clear)
- Added Ctrl-Shift-F accelerator for the 'Find in this Group'
main menu command
- Added {NUMPAD0} to {NUMPAD9} to documentation
- The RmvDup plugin now supports removing empty groups

- The current working directory is now restored after manually
browsing for a key file
- Duplicating entries now doesn't clear the search results list
anymore
- Improved performance of high ANSI and special character
encoding for auto-type sequences
- When using PuTTY for ssh:// URLs, references within the user
name field are now dereferenced
- Auto-type definition lines and field references generated by
commands in the 'Tools' menu of the entry editing dialog are
now appended to the notes instead of being inserted at top
- Improved UUID string parsing
- Improved cmd:// URL handling
- {VKEY xxx} now doesn't need to be initialized anymore using
other auto-type special key codes
- Updated auto-type global hot key hint when registering fails
- Various code optimizations
- Minor other improvements
- Minor installer improvements

- Cyclic password field references now work correctly
- KeePass does not crash anymore when being in mini mode and
clicking Cancel in the initial database creation dialog

New Features:

* Groups in the group list now behave like folders in Windows Explorer when moving groups/folders (i.e. sub-groups are also moved).
* Added advanced option to drop to the background when copying data to the clipboard.
* Added auto-type configuration dialog (button 'Auto-Type' in the options dialog, tab page 'Advanced'); this dialog now contains all options related to auto-type.
* The default auto-type sequence can now be configured in the Auto-Type configuration dialog.
* Added option to prepend a special auto-type initialization sequence for Internet Explorer and Maxthon windows to fix a focus issue (option enabled by default).
* Added field reference creation dialog (accessible through the 'Tools' menu in the entry editing dialog).
* KeePass now follows field references in indirect auto-type sequence paths.
* Field references are dereferenced when copying data to the clipboard.
* Secure edit controls in the master key and entry dialogs now accept text drops.
* Group names in the entry details view are now clickable; click it to jump to the group of the entry (especially useful for jumping from search results to the real group of an entry).
* Added documentation about how to customize KeePass (networks).
* KeePass now shows an explicit file corruption warning message when saving to a file fails.
* KeePass on Windows d XP now mimics the extended combobox behavior seen on Windows Vista: when pressing a character key, the next string starting with this character is selected (for example a file can be selected in the key files list now by pressing the key corresponding to the drive).
* Entries in the auto-type entry selection window are now sorted.

Improvements:

* The auto-type sequence and auto-type window definition lines are now removed before copying the contents of the notes field to the clipboard, executing an URL and/or auto-typing.
* KeePass recreates the temporary system/account directory, if it has accidently been deleted.
* When using the installation package and Windows Vista, settings are now stored in the user's profile directory (instead of Virtual Store; like on Windows XP and earlier).
* If the option to remember the last used file is disabled, KeePass now won't remember the last used directory either.
* Entry details view is now cleared when no entry is selected.
* All edit combo boxes can now auto-scroll horizontally.
* When security-critical operations are disabled, the 'unhide' button in the master key dialog is disabled now.
* The read-only flag is not cleared anymore when closing a file (consequently locking will not clear the read-only flag).
* When deleting a subgroup tree, backup entries of all deleted entries are now created in the 'Backup' group.
* Improved status bar updating on WTS notifications.
* {INSERT} works like {INS} now.
* Various code optimizations.
* Minor installer improvements.
* Minor other improvements.

Bugfixes:

* "User Name" is now translated correctly in TXT exports.
* Referencing passwords of other entries now works correctly.

- Master key transformations (rounds) are now computed in two
threads; on dual/multi core processors this results in almost
twice the performance as before (by doubling the amount of
rounds you'll get the same waiting time as in 1.10, but the
protection against dictionary and guessing attack is doubled)
- On Windows Vista, some of the message boxes are now displayed
as modern task dialogs
- Database files are now verified (read and hashed) after
writing them to disk (in order to prevent data loss caused by
damaged/broken devices and/or file systems)
- When saving databases to removable media, KeePass now tries
to lock and unlock the volume, which effectively flushes all
system caches related to this drive (this prevents data loss
caused by removing USB sticks without correctly unmounting in
Windows first; but it only works when no other program is
using the drive)
- Improved database file writing algorithm (small block writes
and explicit flushing)
- The system's INI cache is now flushed before copying the
temporary global INI file to the application directory
(improves Windows 95 / 98 / ME compatibility)
- Added placeholders for referencing fields of other entries
(dereferenced when starting URLs and performing auto-type,
see the auto-type placeholders documentation)
- Added natural sorting (when sorting the entry list, KeePass
now performs a human-like comparison instead of a simple
lexicographical one; this sorts entries with numbers more
logically; only supported with ShlWApi/IE 6.0.2800)
- Added pattern placeholder 's' to generate special characters
of the printable 7-bit ASCII character set
- KeePass now locks when the system is suspending (if the
option for locking on locking Windows or switching user is
enabled)
- Added a 'Tools' button menu in the entry editing dialog
- Tools button menu: Added command to select an application for
the URL field (will be prefixed with cmd://)
- Tools button menu: Added command to select a document for the
URL field (will be prefixed with cmd://)
- Tools button menu: Added command to insert a placeholder into
the URL field
- Tools button menu: Added command to select an auto-type
target window (a dialog will be opened, in which you can
select an existing currently-opened window; an appropriate
auto-type definition will be added in the notes field)
- Several entry context menu commands are now only enabled if
applicable (if the user name field of an entry is empty, the
'Copy User Name' command is disabled, etc.)
- A " - Copy" suffix is now appended to duplicated entries
- After duplicating entries, the new entries are selected
- Added ability to sort entries based on UUIDs
- Added advanced option to focus the entry list after a
successful quick search (toolbar; disabled by default)
- Added support for large translation/language files
- Added option to always allow full access through remote
control (disabled by default, and marked with "not
recommended")
- Added radio buttons for removing the expiry time from
entries in the mass-modify dialog
- Added generic Wiki and '$' client icons
- Added certificate and mobile phone client icons (thanks to
oppitronic)
- Added ability to specify the minimum length and minimum
estimated quality that master passwords must have (see help
file -> Features -> Composite Master Key; for admins)
- Added interface for writing master password requirements
validation plugins (see the KPM_VALIDATE_MASTERPASSWORD
message)
- Added interface for writing entry validation plugins (see the
KPM_VALIDATE_ENTRY message)
- Added interface for writing generated passwords validation
plugins (see the KPM_VALIDATE_GENPASSWORD message)
- Added plugin interface for storing custom data in KeePass KDB
databases (for example some history, logging, ...)
- Plugins can now execute auto-type (KPC_AUTOTYPE)
- Added ability to specify a window title suffix in the INI
file (KeeWindowTitleSuffix)
- Added more simple and robust plugin interface for editing and
deleting entries
- The dialog banner text color can be changed in the INI file
now (KeeBannerColorText, set to BGR-Quad)
- The gradient direction in dialog banners can now be specified
in the INI file (KeeBannerFlip)
- In mini mode, no passwords are generated automatically for
new entries
- In mini mode, clicking the 'Generate Password' button in the
entry window immediately generates a new password based on
the automatic generation profile, instead of showing the
password generator dialog
- In mini mode, the URL field is replaced by a combo box, in
which you can select one of the plugin-provided user
applications (KPM_USERAPP_GETFIRST and KPM_USERAPP_GETNEXT)

- If natural sorting is supported, TANs are not prefixed with
zeros anymore
- Removed 'Loading error' message that appeared when checking
for an update and a new version is available
- TAN indices are now stored in the user name field (the notes
field can therefore be used now for storing confirmation
messages and/or transaction details)
- "User Name" is now translated correctly in TXT exports
- On Windows XP and higher, dialog banners now have black
background gradients by default
- Improved list view item focusing
- Icon of the 'Generate Password' button in the entry editing
dialog is now always visible
- Passwords generated by the automatic generation profile can
now be accepted
- The help can now consistently be accessed through buttons in
the lower left of dialogs
- Improved apple icon (inverted colors)
- Improved group tree redrawing when closing a database
- Correct times are assigned to incoming entries through RC
- Improved placeholder replacement engine for URLs and auto-
type (prevents infinite recursion)
- Multiple files can now be selected in the import file dialog
(except KDB format)
- Import file dialogs do not change the working directory
anymore
- In the mass-modify dialog the expiry time now defaults to the
current local time instead of the 'never expires' time
- Upgraded to Boost libraries version 1.34.1
- Minor UI improvements (improved error messages, ...)
- Minor other improvements

- Fixed randomly appearing bug in TAN numbering routine
- Fixed random failure of local date/time formatting routine