KeePass isn t the most popular password manager around here, but many of our readers use it.
Unfortunately, the developer has explained that the KeePass website can t or won t be switched to HTTPS at the moment, meaning that this issue can t be patched:
It is true that the KeePass website isn t available over HTTPS up to now.
Moving the update information file to a HTTPS website is useless, if the KeePass website still uses HTTP.
Unfortunately, for various reasons using HTTPS currently is not possible, but I m following this and will of course switch to HTTPS when it becomes possible.
It s not the greatest workaround, but it s better than nothing if you plan to keep using KeePass.
Alternatively, you can check out our roundup of the five best password managers here for some alternatives including LastPass and 1Password.