Security update for V4 attachments

pwSafe uses the core components of Password Safe to access your safe.

Password Safe has identified a security issue in the handling of attachments in V4 databases, i.e. safes having the .psafe4 file extension. As V4 databases are still experimental, most safes are V3 databases (with .psafe3 extension) and therefor not affected.

No exploits of this have been reported in the wild. Further information is available in Password Safe’s release announcement.

The fix is included in pwSafe 12.5.4, available for iPhone/iPad and Mac.

What should I do?

• Make sure you are using pwSafe version 12.5.4, or higher, on your iPhone, iPad and Mac.
  How can I check which version of pwSafe I am using?
• If you also use Password Safe on Windows or Linux, make sure to update those devices too.

You do not need to change your existing safes or replace attachments stored in your safes.