When using keepassxc-cli show the password prompt for the database is sent to stdout. This makes integrating keepass-cli into scripts problematic.

Expected Behavior

The database password prompt should be sent to stderr or directly to the invoking pty, while only the entry itself is sent to stdout.

Current Behavior

The database password prompt and the entry are sent to stdout.

Possible Solution

keepassxc-cli should send the database password prompt either on stderr or on the invoking pty, leaving stdout for the requested entry

Steps to Reproduce (for bugs)

1. keepassxc-cli $db $entry 2>/dev/null
2. keepassxc-cli $db $entry >/dev/null

Step 1 prints both the database password prompt and the entry, step 2 prints nothing.

Debug Info

KeePassXC - Version 2.2.0
Revision: caa49a8

Libraries:

• Qt 5.5.1
• libgcrypt 1.6.5

Enabled extensions:

• KeePassHTTP
• Auto-Type
• YubiKey