This isn't true anymore. Newer versions store a SHA-256 hash of the header insid...

		debfx on June 16, 2015 \| parent \| context \| favorite \| on: KeePass – questionable security This isn't true anymore. Newer versions store a SHA-256 hash of the header inside the encrypted XML. At least KeePass >= 2.20 and KeePassX 2.0 >= alpha3 support this. I haven't checked other implementations.