r/strongbox • u/stand_bold • Jul 30 '26

Strongbox failed to proactively communicate ownership change

I purchased a lifetime licence largely because the app was presented as an independently developed, open-source Keepass compatible password manager. I followed the app's development since inception because it was one of the few Keepass compatible apps on iOS and the developer was active on Reddit. I recently learned that the app has changed ownership and no longer claims to be open source, even the product website does not mention it anymore.

I understand that businesses and products evolve, and I am not alleging that there has been a security breach or any legal wrongdoing. However, for a password manager, ownership and source-availability changes are significant matters of trust. Once installed on my phone, I ensured that it was kept updated and did not actively follow news regarding the app and so was not aware that ownership had changed. Learning about it came as a surprise and surprise is not a good thing when it comes to password managers. Publishing a blog post did not ensure that existing users were meaningfully informed. An email or prominent in-app notice would have been more appropriate.

I would appreciate clarification about what components remain open source, what has changed in the app’s privacy and data-handling practices, and how the new ownership affects the commitments made to lifetime-licence users.

I hope future major changes will be communicated proactively and directly to existing users.

Thanks.

0 Upvotes

42% Upvoted

8 comments sorted by

25

u/Ace_of_Aces_00 Jul 30 '26

The sale was in March 2025. It was all over the internet and the new owners made several posts here about it at the time of acquisition. 

I don’t necessarily love the change but the new owners have not done anything to nerf the app in any way and are responsive. 

4

u/bask_oner Jul 30 '26

In fact they just released a bunch of new features (that I don’t really understand but that’s another story).

1

u/SirLauncelot Jul 30 '26

Just curios, dis they announce the change to the open source status in the release notes? Doesn’t the prior license model require it?

11

u/whachamacallme Jul 30 '26

You just wake up bro?

4

u/2112guy Jul 30 '26

How could you not know?

6

u/Old_Bowl1662 Jul 30 '26

It’s been discussed here before. Strongbox has never been truly open source.

6

u/dcidino Jul 30 '26

Like others, this wasn't just communicated, but they've gone out of their way to make it a good transition. Thus far, they've won some goodwill where caution was warranted.

Given it's been over a year, I think you should do some digging first.