Skip to content

IV has already been used #2289

@c-b-x

Description

@c-b-x

Checks

  • I have read the Wiki, searched the open issues, and still think this is a new bug.

Explain the problem clearly and succinctly:

When entering an incorrect password to unlock a database and then trying again with the corrected password, the following message appears:

IV has already been used. Reusing IV in encryption mode
violates security best practices.

A workaround is to toggle the hardware key option.
After that unlocking works again.

Image Image

Describe what you expected to happen:

The app should probably create a new IV when editing the password after a failed attempt.

KeePassDX version:

4.2.4

Build:

Free

Database version:

No response

File provider (content:// URI)

No response

Android version:

16

Android device:

No response

Additional context:

No response

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    Status

    Completed

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions