KeePass is a free, open source password manager for Windows. It has unofficial ports for Linux, Mac OS X, Android, and iPhone. Passwords are protected with strong encryption keyed with a master password.

learn more… | top users | synonyms

0
votes
0answers
9 views

Keepass 2.32 on Windows 10, keyboard inputs gibberish after restart [migrated]

i have installed keepass a few days ago and have been using the autotype obfuscation feature successfully. However, I've been having issues with the keyboard entering garbled text when I restart the ...
7
votes
1answer
330 views

I stored a copy of my KeePass database on a portable hard drive and I lost the drive. Should I worry about that?

I've been using KeePass for years, and I have a lot of accounts. I need to access them anywhere I work, so I store one copy of my database on a portable hard drive. The drive isn't encrypted. The ...
2
votes
2answers
44 views

How does KEEPASS store images, videos and attached documents/items? [duplicate]

I have read quite a bit about KEEPASS and how it encrypts passwords. However, the more I read about it, the more I find how it generates and stores passwords - the methodology provided as well as the ...
2
votes
2answers
82 views

Is it safe to leave Keepass always opened on a computer?

I often need to get several passwords from my Keepass during the same day and I find myself having to open it and input the master password every single time, which is awfully laborious. The obvious ...
2
votes
1answer
103 views

Where to save Keepass' file? [closed]

Using Keepass since a year ago, been told it's an excellent method to store one's passwords. But what is the best location to save Keepass' file (the file where all password are stored and that you ...
1
vote
1answer
48 views

Password manager: should key file be stored on a different device than password db file (even if master pw used)?

Does it defeat the purpose of a key file to store it in the same location as the password database? What if a master password is needed also? For example I save my .kdbx to dropbox as a means to ...
1
vote
1answer
113 views

When using Dropbox to sync Keepass db, is it ok to open it in synced folder?

I'm going to be storing a Keepass 2 database file (.kdbx) in a local folder that's synced by Dropbox. Is it safe to use Keepass to open the database directly considering everything in the folder is ...
1
vote
1answer
161 views

Yubikey with KeePass using challenge-response vs OATH-HOTP

i got my YubiKey 4 today and first tried it to use KeePass with OATH-HOTP (OtpKeyProv plugin). My Configuration was 3 OTPs with look-ahead count = 0. It was not working that good because sometimes the ...
5
votes
1answer
168 views

Is keepass random password generator fully secure and trustworthy?

Am I safe using keepass for generating passwords? For example my accounts, am I safe using a keepass generated password? Could my future keepass master-keys be safely generated in keepass? What method ...
8
votes
2answers
194 views

Has anyone validated if KeePass is safe to use? Does it have any backdoors?

Everyone says "the code is open source, go check it out". The truth is, I neither know how to validate the complex code nor can I understand the binaries in code or predict their behaviours. Has ...
2
votes
0answers
37 views

Is it a good idea to use password safes such as KeePass? [duplicate]

I'm starting to use KeePass as a password manager but I was wondering if such password safes are a good way to store passwords. Could a malware dump my RAM when the safe is open and retrieve all the ...
2
votes
2answers
64 views

Random mouse input vs random keyboard input vs CryptoAPI

I ask this question because it's really starting to annoy me to move my mouse until the " generated bits : 256 " appear every time I want to generate an password on Keepassand I wonder, why software ...
1
vote
1answer
177 views

How to prevent chromeipass from auto-filling credentials?

ChromeIPass (addon for Keepass on Chrome) wants to unlock the database every time it detects credential fields, even if I don't even have an account on that site. This is the default setting (october ...
7
votes
2answers
237 views

Is KeePass's method for key derivation secure?

I'm familiar with how key derivation functions can be used to slow down brute force attacks against passwords by requiring significant computational and/or memory resources to compute the final key. ...
27
votes
3answers
1k views

Is it unsafe to keep multiple versions of a KeePass database?

I keep my KeePass .kdb database in a remote location, and I never overwrite the old versions, I just append the date to the new version which I'm uploading. So it looks like this: db.kdb_2015-01-01 ...
2
votes
2answers
295 views

Does changing the default number of iterations in KeePass (or other encryption applications) increase security?

Inspired by this question about the difficulty of cracking a KeePass database, I'm wondering if changing the default number of iterations in an encryption application (e.g., KeePass) increases ...
0
votes
0answers
27 views

KeePassX and Dropbox [duplicate]

I am currently using KeePassX on Linux to allow me to have a different strong password for each website. With this program there comes two major inconveniences: I lose access to everything in the case ...
-1
votes
1answer
291 views

How to change font so simillar characters can be distinguished in Keepass 2? [closed]

I've had problems at work and at home where password managers display similar letters virtually identically. For example it's impossible to distinguish between an 1, l and I. Is there a recommended ...
1
vote
2answers
882 views

Confusion about keepass portable and keyfile on an USB-stick

I want to start using keepass to set and get my passwords. To always get access to them I thought about using keepass-portable on an USB-stick. So I would have an USB-stick with a the program ...
0
votes
1answer
303 views

Making 2 yubikeys generate the same password

Is their a way you can make two yubikeys generate the exact same password at the exact same time? (identical copy) I am wanting to purchase two of them so I am able to store a backup yubikey in a ...
3
votes
2answers
1k views

Keepass 2.0 file attachment security

I recently found the ability of attaching files to entries in KeePass 2.0: does KeePass just remember the location of files attached to the entry or does it encrypt the attached files inside the ...
1
vote
2answers
123 views

OTP vs. Keyfile

I have been wondering what are the benefits and cons of using an OTP (one time password) versus a keyfile to, for example, decrypt a keepass database, connect to a server via SSH, or other uses. ...
0
votes
1answer
151 views

Plausible deniability regarding KeepassX files

I recently installed Guest Additions in my Windows 7 Virtual Machine because I could not stand working without widescreen and high resolution. I have read somewhere that this could be a possible ...
2
votes
1answer
206 views

Is encrypting something more than once safer than hashing more than once?

I am aware of the implications that hashing something more than once correctly will increase the security of a system, but doing it incorrectly will decrease it, as noted here and on various other ...
1
vote
1answer
168 views

Export a folder from KeepassX [closed]

Is it possible to unencrypted export a folder in KeepassX? I would like to share a part of my KeepassX database with a collegue but I have all of the needed passwords in separate entries in KeepassX
1
vote
2answers
389 views

Password database vs flat encrypted file [closed]

I am considering putting a forward a proposal to use a password database/manager instead of a flat (PGP) encrypted file for managed passwords for our team to access. I would like to hear some ...
1
vote
2answers
2k views

How do I generate a word list from a known seed word? [duplicate]

I've lost my master password. Not all is lost as I know the original word that generated the password: It was generated by a random case switching for consonants and random vocal to numbers. For ...
0
votes
1answer
570 views

KeePass OTP plugin circumvents inbuilt protections?

I have read the question on HOTP implementation in KeePass HERE. This question is however on the other newer plugin KeeChallenge. According to the documentation, the a secret is encrypted and can ...
3
votes
2answers
511 views

Keepass Dictionary Attack Protection Strategy

Though pretty interested, I'm everything but an expert in Information Security, please redirect me to any helpful resources if my question is stupid or correct me if my assumptions are wrong. When ...
2
votes
1answer
293 views

Is it secure to have two password managers?

For various reasons I use both Keepass 2 and Lastpass. They have 90% the same password database. Is it secure to be using and maintaining both of them? Is it secure if they both use the same password ...
3
votes
1answer
309 views

Is it possible for someone to modify keepass code, recompile and make it available for free download?

I am concerned about the possibility to download a fake keepass upgrade. If possible this would allow many ways to get private data on keepass files! For example, keepass hacked or modified code ...
3
votes
1answer
4k views

Where to keep key file used as composite key for Keepass 2

I used to use a master password and "Windows User Account" to get into my password datasbase with Keepass 2. Then I realized the "Windows User Account" option is garbage because if you ever want to ...
3
votes
2answers
986 views

Hiding Keepass databases and Truecrypt containers

If I change the extension of a Keepass database (i.e. change the .kdbx to something like .txt), Keepass is still able to open it. Is this an effective way for hiding the databases from an adversary?! ...
11
votes
9answers
20k views

Storing KeePass database in cloud. How safe?

It certainly would be more convenient to store my KeePass database on either S3, Dropbox, or better yet SpiderOak. My fear is having my cloud storage account compromised then having the credentials ...
9
votes
4answers
8k views

How does a key file increase the security of a password manager?

Password managers like KeePass often have an option to use a key file in addition to a master password. I don't understand how this increases security. (Note: KeePass also allows using a key file ...
13
votes
6answers
6k views

Practical and Secure use of KeePass

Currently I'm using KeePass as my sensitive data manager. I use just a main password to encrypt the database, but it is not very secure: 9 characters, lower letters and numbers mix with no meaning. ...
6
votes
3answers
7k views

Does adding two-factor authentication by OTP really make KeePass more secure

KeePass is an application that keeps all your passwords for you in a database. It is primarily protected by a master password and/or keyfile. If the database is properly encrypted with that password ...
-1
votes
2answers
260 views

How to store my contacts encrypted?

I use KeePass for storing my passwords. What should I use if I want to store my several hundred contacts (name, phone number, email, etc) encrypted?