KeePass is a free, open source password manager for Windows. It has unofficial ports for Linux, Mac OS X, Android, and iPhone. Passwords are protected with strong encryption keyed with a master password.

learn more… | top users | synonyms

1
vote
1answer
22 views

Export a folder from KeepassX [closed]

Is it possible to unencrypted export a folder in KeepassX? I would like to share a part of my KeepassX database with a collegue but I have all of the needed passwords in separate entries in KeepassX
1
vote
2answers
85 views

Password database vs flat encrypted file [closed]

I am considering putting a forward a proposal to use a password database/manager instead of a flat (PGP) encrypted file for managed passwords for our team to access. I would like to hear some ...
0
votes
1answer
95 views

How do I generating a word list from a known seed word?

I've lost my master password. Not all is lost as I know the original word that generated the password: It was generated by a random case switching for consonants and random vocal to numbers. For ...
0
votes
0answers
72 views

KeePass OTP plugin circumvents inbuilt protections?

I have read the question on HOTP implementation in KeePass HERE. This question is however on the other newer plugin KeeChallenge. According to the documentation, the a secret is encrypted and can ...
2
votes
2answers
172 views

Keepass Dictionary Attack Protection Strategy

Though pretty interested, I'm everything but an expert in Information Security, please redirect me to any helpful resources if my question is stupid or correct me if my assumptions are wrong. When ...
2
votes
1answer
108 views

Is it secure to have two password managers?

For various reasons I use both Keepass 2 and Lastpass. They have 90% the same password database. Is it secure to be using and maintaining both of them? Is it secure if they both use the same password ...
1
vote
1answer
96 views

Is it possible for someone to modify keepass code, recompile and make it available for free download?

I am concerned about the possibility to download a fake keepass upgrade. If possible this would allow many ways to get private data on keepass files! For example, keepass hacked or modified code ...
2
votes
1answer
1k views

Where to keep key file used as composite key for Keepass 2

I used to use a master password and "Windows User Account" to get into my password datasbase with Keepass 2. Then I realized the "Windows User Account" option is garbage because if you ever want to ...
2
votes
2answers
284 views

Hiding Keepass databases and Truecrypt containers

If I change the extension of a Keepass database (i.e. change the .kdbx to something like .txt), Keepass is still able to open it. Is this an effective way for hiding the databases from an adversary?! ...
4
votes
5answers
3k views

Storing KeePass database in cloud. How safe?

It certainly would be more convenient to store my KeePass database on either S3, Dropbox, or better yet SpiderOak. My fear is having my cloud storage account compromised then having the credentials ...
3
votes
4answers
2k views

How does a key file increase the security of a password manager?

Password managers like KeePass often have an option to use a key file in addition to a master password. I don't understand how this increases security. (Note: KeePass also allows using a key file ...
6
votes
4answers
2k views

Practical and Secure use of KeePass

Currently I'm using KeePass as my sensitive data manager. I use just a main password to encrypt the database, but it is not very secure: 9 characters, lower letters and numbers mix with no meaning. ...
4
votes
2answers
2k views

Does adding two-factor authentication by OTP really make KeePass more secure

KeePass is an application that keeps all your passwords for you in a database. It is primarily protected by a master password and/or keyfile. If the database is properly encrypted with that password ...
-1
votes
2answers
193 views

How to store my contacts encrypted?

I use KeePass for storing my passwords. What should I use if I want to store my several hundred contacts (name, phone number, email, etc) encrypted?