I recently found the ability of attaching files to entries in KeePass 2.0: does KeePass just remember the location of files attached to the entry or does it encrypt the attached files inside the KeePass database somehow?

locked by schroeder Jan 24 '18 at 17:42

This question exists because it has historical significance, but it is not considered a good, on-topic question for this site so please do not use it as evidence that you can ask similar questions here. This question and its answers are frozen and cannot be changed. See the help center for guidance on writing a good question.

Read more about locked posts here.

  • I guess it can be both... Keepass might store encrypted attachments, but also remember the location for (manual) updating. Actually, I would very much like the second option, see this.. – sancho.s Reinstate Monica Jan 24 '18 at 17:19

From the KeePass documentation:

File attachments are stored encrypted in the database (like all other database content).


From experience, I can tell you that it embeds the file inside the .kdb. I cannot say for sure that it encrypts them, although I would have to assume so, and would be extremely concerned if it did not (as I understand it, everything inside the file is encrypted).

You can easily test the linking-vs-attaching behavior for yourself by adding a large-ish file and seeing the size of your .kdb shoot up.

  • Heh. A strange thing happened when I added a file.. It went down by 3kb. Guessing somehow it found a better way of compressing the data. I'll probably try a really big file latter today though – Matt Oct 12 '14 at 18:26
  • Stores the files. I frequently use Keypass attachments. Mostly to store all my key pairs securely in one place; as well as digital scans of some important documents (passport, birth certificate, etc). On any modern PC or mobile, a 4MB keystore isn't a problem; and a single critical file is easier to backup to every conceivable device and medium in my house. – LateralFractal Oct 12 '14 at 22:59

Not the answer you're looking for? Browse other questions tagged or ask your own question.