Applications:KeePass

From Yubico

Jump to: navigation, search

KeePass by Dominik Reichl

Image:KeePass_Logo_117x34.gif‎


KeePass is a popular free open source password manager. It is available for many platforms [1], and supports advanced security features like in-memory protection of sensitive data and strengthening against dictionary and guessing attacks against the master password [2].

In Static Password mode, a YubiKey can be used to easily enter a very strong master password for KeePass 1.x/2.x databases.

Setup

When creating a new KeePass database (main menu: File -> New) or changing the master key of an existing database (main menu: File -> Change Master Key), first make sure that in the key dialog the input focus is currently in the master password field (marked red on the screenshot on the right). Then insert your YubiKey and press its button. YubiKey will enter a strong password for you. Do the same in the master password verification dialog (if you get an error at this point, your YubiKey is configured in OTP mode, not Static Password mode). After successfully changing the key, don't forget to save the database to apply the new key.

In order to open your database, you can now just select the database file (if it's not opened automatically), insert your YubiKey and press its button.

If you want to additionally use a key file, make sure that you first select the key file and then enter the master password using YubiKey. The order is important, because YubiKey automatically presses the Return key to close the dialog.

KeePass 2.x: If you want to use a YubiKey together with KeePass 2.x, in the setup phase do the following: place the cursor into the first master password field, press YubiKey's button, click [OK] in the warning message that appears, place the cursor into the second master password field ("Repeat password"), again press YubiKey's button. Opening a database with YubiKey works exactly the same as for KeePass 1.x described above.

More information

» KeePass website
» KeePass help page: KeePass & YubiKey


Personal tools
Authors/Administrators