KeePass is a free, open source password manager for Windows. It has unofficial ports for Linux, Mac OS X, Android, and iPhone. Passwords are protected with strong encryption keyed with a master password.

learn more… | top users | synonyms

0
votes
0answers
9 views

Right mechanism & workflow for repeated replication of passwords from LastPass to KeePass?

A lot of us currently use LastPass for the easy management, access and input of passwords for applications and websites. Now, there are some people who are obsessive about not leaving it out to a ...
2
votes
3answers
47 views

Is using the 2FA secret on the same machine as using the credentials, removing one factor of 2FA?

In other words: Is saving or using the two-factor authentication (2FA) secret on the same machine to generate one-time passwords (OTP), breaking the two-factor authentication (2FA) concept since it's ...
4
votes
4answers
111 views

What are possible methods for calculating password entropy?

I noticed there are tons of questions and answers about password entropy on this forum, some even suggesting formulas for calculating it. None did answer my exact question. What are possible or ...
2
votes
1answer
48 views

Protecting against specialized Keepass attacks

If you look at the KeePass security information, it says: However in all the questions above we're assuming that there's a spyware program running on the system that's specialized on attacking ...
0
votes
1answer
61 views

KeePass - Backup to Telegram? [closed]

I am looking for ways to backup my KeePass file to prevent loss. Of course, I saved it to my computer and my phone. But what if I lose access to my computer and my phone at once? Where should I back ...
7
votes
1answer
360 views

I stored a copy of my KeePass database on a portable hard drive and I lost the drive. Should I worry about that?

I've been using KeePass for years, and I have a lot of accounts. I need to access them anywhere I work, so I store one copy of my database on a portable hard drive. The drive isn't encrypted. The ...
2
votes
2answers
67 views

How does KEEPASS store images, videos and attached documents/items? [duplicate]

I have read quite a bit about KEEPASS and how it encrypts passwords. However, the more I read about it, the more I find how it generates and stores passwords - the methodology provided as well as the ...
2
votes
2answers
102 views

Is it safe to leave Keepass always opened on a computer?

I often need to get several passwords from my Keepass during the same day and I find myself having to open it and input the master password every single time, which is awfully laborious. The obvious ...
3
votes
1answer
123 views

Where to save Keepass' file? [closed]

Using Keepass since a year ago, been told it's an excellent method to store one's passwords. But what is the best location to save Keepass' file (the file where all password are stored and that you ...
1
vote
1answer
57 views

Password manager: should key file be stored on a different device than password db file (even if master pw used)?

Does it defeat the purpose of a key file to store it in the same location as the password database? What if a master password is needed also? For example I save my .kdbx to dropbox as a means to ...
3
votes
1answer
146 views

When using Dropbox to sync Keepass db, is it ok to open it in synced folder?

I'm going to be storing a Keepass 2 database file (.kdbx) in a local folder that's synced by Dropbox. Is it safe to use Keepass to open the database directly considering everything in the folder is ...
1
vote
1answer
341 views

Yubikey with KeePass using challenge-response vs OATH-HOTP

i got my YubiKey 4 today and first tried it to use KeePass with OATH-HOTP (OtpKeyProv plugin). My Configuration was 3 OTPs with look-ahead count = 0. It was not working that good because sometimes the ...
3
votes
0answers
224 views

How is PasswordSafe different from KeePass/OtpKeyProv?

Over at Does adding two-factor authentication by OTP really make KeePass more secure the top answer unmistakably states that KeePass is not made more secure by using an OTP. I told a friend I was ...
5
votes
1answer
308 views

Is keepass random password generator fully secure and trustworthy?

Am I safe using keepass for generating passwords? For example my accounts, am I safe using a keepass generated password? Could my future keepass master-keys be safely generated in keepass? What method ...
8
votes
2answers
239 views

Has anyone validated if KeePass is safe to use? Does it have any backdoors?

Everyone says "the code is open source, go check it out". The truth is, I neither know how to validate the complex code nor can I understand the binaries in code or predict their behaviours. Has ...
2
votes
0answers
39 views

Is it a good idea to use password safes such as KeePass? [duplicate]

I'm starting to use KeePass as a password manager but I was wondering if such password safes are a good way to store passwords. Could a malware dump my RAM when the safe is open and retrieve all the ...
2
votes
2answers
82 views

Random mouse input vs random keyboard input vs CryptoAPI

I ask this question because it's really starting to annoy me to move my mouse until the " generated bits : 256 " appear every time I want to generate an password on Keepassand I wonder, why software ...
1
vote
1answer
280 views

How to prevent chromeipass from auto-filling credentials?

ChromeIPass (addon for Keepass on Chrome) wants to unlock the database every time it detects credential fields, even if I don't even have an account on that site. This is the default setting (october ...
7
votes
2answers
293 views

Is KeePass's method for key derivation secure?

I'm familiar with how key derivation functions can be used to slow down brute force attacks against passwords by requiring significant computational and/or memory resources to compute the final key. ...
4
votes
1answer
120 views

Keepass - Needle in a stack of needles

I got the idea from someone saying the best way is to hide the needle in a stack of needles, not in a haystack. I am considering writing a little app to accompany my Keepass installation. The app ...
27
votes
3answers
1k views

Is it unsafe to keep multiple versions of a KeePass database?

I keep my KeePass .kdb database in a remote location, and I never overwrite the old versions, I just append the date to the new version which I'm uploading. So it looks like this: db.kdb_2015-01-01 ...
2
votes
2answers
341 views

Does changing the default number of iterations in KeePass (or other encryption applications) increase security?

Inspired by this question about the difficulty of cracking a KeePass database, I'm wondering if changing the default number of iterations in an encryption application (e.g., KeePass) increases ...
0
votes
0answers
27 views

KeePassX and Dropbox [duplicate]

I am currently using KeePassX on Linux to allow me to have a different strong password for each website. With this program there comes two major inconveniences: I lose access to everything in the case ...
-1
votes
1answer
365 views

How to change font so simillar characters can be distinguished in Keepass 2? [closed]

I've had problems at work and at home where password managers display similar letters virtually identically. For example it's impossible to distinguish between an 1, l and I. Is there a recommended ...
1
vote
2answers
1k views

Confusion about keepass portable and keyfile on an USB-stick

I want to start using keepass to set and get my passwords. To always get access to them I thought about using keepass-portable on an USB-stick. So I would have an USB-stick with a the program keepass-...
0
votes
1answer
331 views

Making 2 yubikeys generate the same password

Is their a way you can make two yubikeys generate the exact same password at the exact same time? (identical copy) I am wanting to purchase two of them so I am able to store a backup yubikey in a ...
3
votes
2answers
2k views

Keepass 2.0 file attachment security

I recently found the ability of attaching files to entries in KeePass 2.0: does KeePass just remember the location of files attached to the entry or does it encrypt the attached files inside the ...
1
vote
2answers
127 views

OTP vs. Keyfile

I have been wondering what are the benefits and cons of using an OTP (one time password) versus a keyfile to, for example, decrypt a keepass database, connect to a server via SSH, or other uses. Edit:...
0
votes
1answer
158 views

Plausible deniability regarding KeepassX files

I recently installed Guest Additions in my Windows 7 Virtual Machine because I could not stand working without widescreen and high resolution. I have read somewhere that this could be a possible ...
2
votes
1answer
212 views

Is encrypting something more than once safer than hashing more than once?

I am aware of the implications that hashing something more than once correctly will increase the security of a system, but doing it incorrectly will decrease it, as noted here and on various other ...
-1
votes
1answer
144 views

Why doesn't the OS give every application a secret password?

As far as I understand if Dropbox wants to automatically run in the background without asking the user for a password it has to store the password somewhere on the harddrive and has currently no way ...
1
vote
1answer
176 views

Export a folder from KeepassX [closed]

Is it possible to unencrypted export a folder in KeepassX? I would like to share a part of my KeepassX database with a collegue but I have all of the needed passwords in separate entries in KeepassX
1
vote
2answers
425 views

Password database vs flat encrypted file [closed]

I am considering putting a forward a proposal to use a password database/manager instead of a flat (PGP) encrypted file for managed passwords for our team to access. I would like to hear some ...
1
vote
2answers
2k views

How do I generate a word list from a known seed word? [duplicate]

I've lost my master password. Not all is lost as I know the original word that generated the password: It was generated by a random case switching for consonants and random vocal to numbers. For ...
0
votes
1answer
598 views

KeePass OTP plugin circumvents inbuilt protections?

I have read the question on HOTP implementation in KeePass HERE. This question is however on the other newer plugin KeeChallenge. According to the documentation, the a secret is encrypted and can ...
4
votes
2answers
559 views

Keepass Dictionary Attack Protection Strategy

Though pretty interested, I'm everything but an expert in Information Security, please redirect me to any helpful resources if my question is stupid or correct me if my assumptions are wrong. When ...
2
votes
1answer
308 views

Is it secure to have two password managers?

For various reasons I use both Keepass 2 and Lastpass. They have 90% the same password database. Is it secure to be using and maintaining both of them? Is it secure if they both use the same password (...
3
votes
1answer
319 views

Is it possible for someone to modify keepass code, recompile and make it available for free download?

I am concerned about the possibility to download a fake keepass upgrade. If possible this would allow many ways to get private data on keepass files! For example, keepass hacked or modified code ...
3
votes
1answer
4k views

Where to keep key file used as composite key for Keepass 2

I used to use a master password and "Windows User Account" to get into my password datasbase with Keepass 2. Then I realized the "Windows User Account" option is garbage because if you ever want to ...
3
votes
2answers
1k views

Hiding Keepass databases and Truecrypt containers

If I change the extension of a Keepass database (i.e. change the .kdbx to something like .txt), Keepass is still able to open it. Is this an effective way for hiding the databases from an adversary?! ...
13
votes
9answers
22k views

Storing KeePass database in cloud. How safe?

It certainly would be more convenient to store my KeePass database on either S3, Dropbox, or better yet SpiderOak. My fear is having my cloud storage account compromised then having the credentials ...
10
votes
4answers
9k views

How does a key file increase the security of a password manager?

Password managers like KeePass often have an option to use a key file in addition to a master password. I don't understand how this increases security. (Note: KeePass also allows using a key file ...
16
votes
6answers
6k views

Practical and Secure use of KeePass

Currently I'm using KeePass as my sensitive data manager. I use just a main password to encrypt the database, but it is not very secure: 9 characters, lower letters and numbers mix with no meaning. ...
9
votes
3answers
7k views

Does adding two-factor authentication by OTP really make KeePass more secure

KeePass is an application that keeps all your passwords for you in a database. It is primarily protected by a master password and/or keyfile. If the database is properly encrypted with that password ...
-1
votes
2answers
263 views

How to store my contacts encrypted?

I use KeePass for storing my passwords. What should I use if I want to store my several hundred contacts (name, phone number, email, etc) encrypted?