KeePass is an encrypted password database format. It is an alternative to online password managers and is supported on all major platforms.
There are two versions of the format: KeePass 1.x (Classic) and KeePass 2.x
- 2Integration
- 2.2Browser integration
- 2.4Yubikey
- 3Tips and tricks
- 4Troubleshooting
Main Page Contact. Powered by WordPress. KeePassXC is a totally free, open source, cross-platform password manager that was born as a derivative version of KeePass. Broadly speaking, this program is very similar to the original KeePass, with the difference that it has a much more active community in its development, which translates into more frequent updates, more bug fixes and more.
Installation
There are three major implementations of KeePass, two are available in the official repositories:
- KeePass — A cross-platform password manager that has autotype and clipboard support when respectively xdotool and xsel are installed. It lets you import many formats and has many plugins.
- http://keepass.info || keepass
- KeePassXC — Fork of KeePassX that is actively maintained and has additional features like browser integration, ssh agent support, yubikey support, a TOTP generator and KeeShare included. Also provides a CLI.
- https://keepassxc.org || keepassxc
- KeePassX — Started as a Linux port of KeePass. keepassx2AUR uses the KeePass 2.x format, but can import 1.x databases. It also lets you import PwManager and KWallet XML databases. It does not support plugins. [1] No active development since 2016. [2]
- https://www.keepassx.org/ || keepassxAURkeepassx2AUR
Other lesser-known alternatives can be found in the AUR:
- keepassc — A curses-based password manager compatible to KeePass v.1.x and KeePassX. It uses
xselfor clipboard functions.
- https://raymontag.github.io/keepassc/ || keepasscAUR
- kpcli — A command line interface for KeePass database files
*.kdbor*.kdbx.
- https://sourceforge.net/projects/kpcli/ || kpcliAUR
- keepmenu — Dmenu/Rofi frontend for Keepass database files.
- https://github.com/firecat53/keepmenu || python-keepmenu-gitAUR
- keeweb — A web app (online / Electron) compatible with KeePass 2.x. KeeWeb is the only version with default Sync support for major cloud services, Gdrive, Onedrive, Dropbox etc.
- https://keeweb.info || keewebAURnextcloud-app-keewebAUR
Integration
Many plugins and extensions are available for integrating KeePass to other software. KeePassX and KeePassXC do not have a plugin interface, but KeePassXC has various integrations built-in.
Plugin installation in KeePass
KeePass is by default installed at /usr/share/keepass/. Copy plugin.plgx to a plugins sub-directory under the KeePass installation directory as demonstrated below:
Browser integration
keepassxc-browser for KeePassXC
Keepassxc Brave
keepassxc-browser is the browser extension of KeePassXC's built-in browser integration using native-messaging and transport encryption using libsodium. It was developed to replace KeePassHTTP, as KeePassHTTP's protocol has fundamental security problems.
The developers provide the browser extension on
- Firefox Add-ons (for Firefox and Tor Browser) and
- in the chrome web store (for Chromium, Google Chrome, Vivaldi and Brave)
The source code and an explanation how it works can be found on GitHub, the KeePassXC developers provide a configuration guide on their website. Substance painter 2019 3 3 cyl.
keepassxc-browser for KeePass
keepassxc-browser can also be used with KeePass through Keepass-natmsg Plugin from AUR (keepass-natmsgAUR) and is recommended as successor of KeePassHTTP.
KeePassRPC and Kee
Kee (GitHub repo) is a browser extension for Firefox and Chromium which integrates KeePass through KeePassRPC, a KeePass plugin from the same developers.
The KeePass plugin is available from GitHub or from the AUR (keepass-plugin-rpcAUR).
The browser extension can be found on GitHub, Firefox Add-ons and the chrome web store.
Via autotype feature
An alternative to having a direct channel between browser and KeePass(XC) is using the autotype feature. There are browser extensions which support this way by putting the page URL into the window name:
- KeePass Helper or TitleURL for Firefox
- URL in title for Chromium
Nextcloud
- Keeweb for Nextcloud (nextcloud-app-keewebAUR)
- Open Keepass stores inside Nextcloud
Yubikey
YubiKey can be integrated with KeePass thanks to contributors of KeePass plugins. KeepassXC provides built-in support for Yubikey Challenge-Response without plugins.
Configuration with KeePass
- StaticPassword
- Configure one of Yubikey slots to store static password. You can make the password as strong as 65 characters (64 characters with leading '!'). This password can then be used as master password for your KeePass database.
- one-time passwords (OATH-HOTP)
- Download plugin from KeePass website: http://keepass.info/plugins.html#otpkeyprov
- Use yubikey-personalization-gui-gitAUR to setup OATH-HOTP
- In advanced mode untick OATH Token Identifier
- In KeePass additional option will show up under Key file / provider called One-Time Passwords (OATH HOTP)
- Copy secret, key length (6 or 8), and counter (in Yubikey personalization GUI this parameter is called Moving Factor Seed)
- You may need to setup Look-ahead count option to something greater than 0, please see this thread[dead link 2020-03-29 ⓘ] for more information
- See this video[dead link 2020-02-24] for more help
- Challenge-Response (HMAC-SHA1)
- Get the plugin from AUR: keepass-plugin-keechallengeAUR
- In KeePass additional option will show up under Key file / provider called Yubikey challenge-response
- Plugin assumes slot 2 is used
SSH agent
KeePassXC offers SSH agent support, a similar feature is also available for KeePass using the KeeAgent plugin.
The feature allows to store SSH keys in KeePass databases, KeePassXC/KeeAgent acts as OpenSSH Client and dynamically adds and removes the key to the Agent.
The feature in KeePassXC is documented in its FAQ.
ssh-add -d or ssh-add -D, therefore KeePassXC/KeeAgent cannot remove them when locking the database. [3][4]Tips and tricks
Disable your clipboard manager
If you are an avid user of clipboard managers, you may need to disable your clipboard manager before you launch keepass and then re-start your clipboard manager afterwards.
Troubleshooting
User interface scaling issues with KeePassXC 2.6
If the user interface elements are not scaled properly, see HiDPI#Qt 5 and upstream bug report.
See also
Keepassxc 2.6.0 is released. Here is how to install KeePassXC password manager on Linux Ubuntu Systems. KeePassXC is a modern open-source password manager. It is used to store and manage information such as URLs, usernames, passwords, and so on for various accounts on your web and desktop applications.
KeePassXC stores all data in an encrypted database format while still providing secure access to that information. KeePassXC is helpful for people with extremely high demands of secure personal data management. KeePassXC is a cross-platform community-driven port of the Windows application 'Keepass Password Safe'.
Features of KeePassXC
- Encrypted – The complete database is always encrypted with the industry-standard AES (alias Rijndael) encryption algorithm using a 256 bit key. KeePassXC uses a database format that is compatible with KeePass Password Safe. Your wallet works offline and requires no Internet connection.
- Cross-Platform – KeePassXC is a community fork of KeePassX, the cross-platform port of KeePass for Windows. Every feature works cross-platform and was thoroughly tested on multiple systems to provide users with the same look and feel on every supported operating system. This includes the beloved Auto-Type feature.
- Open Source – The full source code is published under the terms of the GNU General Public License.
Basic
- Create, open, and save databases in the KDBX format (KeePass Compatible)
- Store sensitive information in entries that are organized by groups
- Search for entries
- Password generator
- Auto-Type passwords into applications
- Browser integration with Google Chrome, Mozilla Firefox, Microsoft Edge, Chromium, Vivaldi, Brave, and Tor-Browser
- Entry icon download
- Import databases from CSV, 1Password, and KeePass1 formats
KeePass is an encrypted password database format. It is an alternative to online password managers and is supported on all major platforms.
There are two versions of the format: KeePass 1.x (Classic) and KeePass 2.x
- 2Integration
- 2.2Browser integration
- 2.4Yubikey
- 3Tips and tricks
- 4Troubleshooting
Main Page Contact. Powered by WordPress. KeePassXC is a totally free, open source, cross-platform password manager that was born as a derivative version of KeePass. Broadly speaking, this program is very similar to the original KeePass, with the difference that it has a much more active community in its development, which translates into more frequent updates, more bug fixes and more.
Installation
There are three major implementations of KeePass, two are available in the official repositories:
- KeePass — A cross-platform password manager that has autotype and clipboard support when respectively xdotool and xsel are installed. It lets you import many formats and has many plugins.
- http://keepass.info || keepass
- KeePassXC — Fork of KeePassX that is actively maintained and has additional features like browser integration, ssh agent support, yubikey support, a TOTP generator and KeeShare included. Also provides a CLI.
- https://keepassxc.org || keepassxc
- KeePassX — Started as a Linux port of KeePass. keepassx2AUR uses the KeePass 2.x format, but can import 1.x databases. It also lets you import PwManager and KWallet XML databases. It does not support plugins. [1] No active development since 2016. [2]
- https://www.keepassx.org/ || keepassxAURkeepassx2AUR
Other lesser-known alternatives can be found in the AUR:
- keepassc — A curses-based password manager compatible to KeePass v.1.x and KeePassX. It uses
xselfor clipboard functions.
- https://raymontag.github.io/keepassc/ || keepasscAUR
- kpcli — A command line interface for KeePass database files
*.kdbor*.kdbx.
- https://sourceforge.net/projects/kpcli/ || kpcliAUR
- keepmenu — Dmenu/Rofi frontend for Keepass database files.
- https://github.com/firecat53/keepmenu || python-keepmenu-gitAUR
- keeweb — A web app (online / Electron) compatible with KeePass 2.x. KeeWeb is the only version with default Sync support for major cloud services, Gdrive, Onedrive, Dropbox etc.
- https://keeweb.info || keewebAURnextcloud-app-keewebAUR
Integration
Many plugins and extensions are available for integrating KeePass to other software. KeePassX and KeePassXC do not have a plugin interface, but KeePassXC has various integrations built-in.
Plugin installation in KeePass
KeePass is by default installed at /usr/share/keepass/. Copy plugin.plgx to a plugins sub-directory under the KeePass installation directory as demonstrated below:
Browser integration
keepassxc-browser for KeePassXC
Keepassxc Brave
keepassxc-browser is the browser extension of KeePassXC's built-in browser integration using native-messaging and transport encryption using libsodium. It was developed to replace KeePassHTTP, as KeePassHTTP's protocol has fundamental security problems.
The developers provide the browser extension on
- Firefox Add-ons (for Firefox and Tor Browser) and
- in the chrome web store (for Chromium, Google Chrome, Vivaldi and Brave)
The source code and an explanation how it works can be found on GitHub, the KeePassXC developers provide a configuration guide on their website. Substance painter 2019 3 3 cyl.
keepassxc-browser for KeePass
keepassxc-browser can also be used with KeePass through Keepass-natmsg Plugin from AUR (keepass-natmsgAUR) and is recommended as successor of KeePassHTTP.
KeePassRPC and Kee
Kee (GitHub repo) is a browser extension for Firefox and Chromium which integrates KeePass through KeePassRPC, a KeePass plugin from the same developers.
The KeePass plugin is available from GitHub or from the AUR (keepass-plugin-rpcAUR).
The browser extension can be found on GitHub, Firefox Add-ons and the chrome web store.
Via autotype feature
An alternative to having a direct channel between browser and KeePass(XC) is using the autotype feature. There are browser extensions which support this way by putting the page URL into the window name:
- KeePass Helper or TitleURL for Firefox
- URL in title for Chromium
Nextcloud
- Keeweb for Nextcloud (nextcloud-app-keewebAUR)
- Open Keepass stores inside Nextcloud
Yubikey
YubiKey can be integrated with KeePass thanks to contributors of KeePass plugins. KeepassXC provides built-in support for Yubikey Challenge-Response without plugins.
Configuration with KeePass
- StaticPassword
- Configure one of Yubikey slots to store static password. You can make the password as strong as 65 characters (64 characters with leading '!'). This password can then be used as master password for your KeePass database.
- one-time passwords (OATH-HOTP)
- Download plugin from KeePass website: http://keepass.info/plugins.html#otpkeyprov
- Use yubikey-personalization-gui-gitAUR to setup OATH-HOTP
- In advanced mode untick OATH Token Identifier
- In KeePass additional option will show up under Key file / provider called One-Time Passwords (OATH HOTP)
- Copy secret, key length (6 or 8), and counter (in Yubikey personalization GUI this parameter is called Moving Factor Seed)
- You may need to setup Look-ahead count option to something greater than 0, please see this thread[dead link 2020-03-29 ⓘ] for more information
- See this video[dead link 2020-02-24] for more help
- Challenge-Response (HMAC-SHA1)
- Get the plugin from AUR: keepass-plugin-keechallengeAUR
- In KeePass additional option will show up under Key file / provider called Yubikey challenge-response
- Plugin assumes slot 2 is used
SSH agent
KeePassXC offers SSH agent support, a similar feature is also available for KeePass using the KeeAgent plugin.
The feature allows to store SSH keys in KeePass databases, KeePassXC/KeeAgent acts as OpenSSH Client and dynamically adds and removes the key to the Agent.
The feature in KeePassXC is documented in its FAQ.
ssh-add -d or ssh-add -D, therefore KeePassXC/KeeAgent cannot remove them when locking the database. [3][4]Tips and tricks
Disable your clipboard manager
If you are an avid user of clipboard managers, you may need to disable your clipboard manager before you launch keepass and then re-start your clipboard manager afterwards.
Troubleshooting
User interface scaling issues with KeePassXC 2.6
If the user interface elements are not scaled properly, see HiDPI#Qt 5 and upstream bug report.
See also
Keepassxc 2.6.0 is released. Here is how to install KeePassXC password manager on Linux Ubuntu Systems. KeePassXC is a modern open-source password manager. It is used to store and manage information such as URLs, usernames, passwords, and so on for various accounts on your web and desktop applications.
KeePassXC stores all data in an encrypted database format while still providing secure access to that information. KeePassXC is helpful for people with extremely high demands of secure personal data management. KeePassXC is a cross-platform community-driven port of the Windows application 'Keepass Password Safe'.
Features of KeePassXC
- Encrypted – The complete database is always encrypted with the industry-standard AES (alias Rijndael) encryption algorithm using a 256 bit key. KeePassXC uses a database format that is compatible with KeePass Password Safe. Your wallet works offline and requires no Internet connection.
- Cross-Platform – KeePassXC is a community fork of KeePassX, the cross-platform port of KeePass for Windows. Every feature works cross-platform and was thoroughly tested on multiple systems to provide users with the same look and feel on every supported operating system. This includes the beloved Auto-Type feature.
- Open Source – The full source code is published under the terms of the GNU General Public License.
Basic
- Create, open, and save databases in the KDBX format (KeePass Compatible)
- Store sensitive information in entries that are organized by groups
- Search for entries
- Password generator
- Auto-Type passwords into applications
- Browser integration with Google Chrome, Mozilla Firefox, Microsoft Edge, Chromium, Vivaldi, Brave, and Tor-Browser
- Entry icon download
- Import databases from CSV, 1Password, and KeePass1 formats
Advanced
Keepassxc Brave Browser
- Database reports (password health, HIBP, and statistics)
- Database export to CSV and HTML formats
- TOTP storage and generation
- Field references between entries
- File attachments and custom attributes
- Entry history and data restoration
- YubiKey/OnlyKey challenge-response support
- Command line interface (keepassxc-cli)
- Auto-Open databases
- KeeShare shared databases (import, export, and synchronize)
- SSH Agent
- FreeDesktop.org Secret Service (replace Gnome keyring, etc.)
- Additional encryption choices: Twofish and ChaCha20
keepassxc 2.6.0
KeePassXC 2.6.0 release brings a complete overhaul of the user interface with custom themes (both light and dark), icons, and exciting features. We now have comprehensive password reports, including Have I Been Pwned password checks to find breached passwords. In addition, the YubiKey and OnlyKey integration is vastly improved with support for up to four keys plugged in simultaneously.
keepassxc 2.6.0 – Added Trine 3: the artifacts of power 1 1 1.
- Custom Light and Dark themes [#4110, #4769, #4791, #4892, #4915]
- Compact mode to use classic Group and Entry line height [#4910]
- New monochrome tray icons [#4796, #4803]
- View menu to quickly switch themes, compact mode, and toggle UI elements [#4910]
- Search for groups and scope search to matched groups [#4705]
- Save Database Backup feature [#4550]
- Sort entries by 'natural order' and move lines up/down [#4357]
- Option to launch KeePassXC on system startup/login [#4675]
- Caps Lock warning on password input fields [#3646]
- Add 'Size' column to entry view [#4588]
- Browser-like tab experience using Ctrl+[Num] (Alt+[Num] on Linux) [#4063, #4305]
- Password Generator: Define additional characters to choose from [#3876]
- Reports: Database password health check (offline) [#3993]
- Reports: HIBP online service to check for breached passwords [#4438]
- Auto-Type: DateTime placeholders [#4409]
- Browser: Show group name in results sent to browser extension [#4111]
- Browser: Ability to define a custom browser location (macOS and Linux only) [#4148]
- Browser: Ability to change root group UUID and inline edit connection ID [#4315, #4591]
- CLI: db-info command [#4231]
- CLI: Use wl-clipboard if xclip is not available (Linux) [#4323]
- CLI: Incorporate xclip into snap builds [#4697]
- SSH Agent: Key file path env substitution, SSH_AUTH_SOCK override, and connection test [#3769, #3801, #4545]
- SSH Agent: Context menu actions to add/remove keys [#4290]
keepassxc 2.6.0 – Changed
- Complete replacement of default database icons [#4699]
- Complete replacement of application icons [#4066, #4161, #4203, #4411]
- Complete rewrite of documentation and manpages using Asciidoctor [#4937]
- Complete refactor of config files; separate between local and roaming [#4665]
- Complete refactor of browser integration and proxy code [#4680]
- Complete refactor of hardware key integration (YubiKey and OnlyKey) [#4584, #4843]
- Significantly improve performance when saving and opening databases [#4309, #4833]
- Remove read-only detection for database files [#4508]
- Overhaul of password fields and password generator [#4367]
- Replace instances of 'Master Key' with 'Database Credentials' [#4929]
- Change settings checkboxes to positive phrasing for consistency [#4715]
- Improve UX of using entry actions (focus fix) [#3893]
- Set expiration time to Now when enabling entry expiration [#4406]
- Always show 'New Entry' in context menu [#4617]
- Issue warning before adding large attachments [#4651]
- Improve importing OPVault [#4630]
- Improve AutoOpen capability [#3901, #4752]
- Check for updates every 7 days even while still running [#4752]
- Improve Windows installer UI/UX [#4675]
- Improve config file handling of portable distribution [#4131, #4752]
- macOS: Hide dock icon when application is hidden to tray [#4782]
- Browser: Use unlock dialog to improve UX of opening a locked database [#3698]
- Browser: Improve database and entry settings experience [#4392, #4591]
- Browser: Improve confirm access dialog [#2143, #4660]
- KeeShare: Improve monitoring file changes of shares [#4720]
- CLI: Rename create command to db-create [#4231]
- CLI: Cleanup db-create options (–set-key-file and –set-password) [#4313]
- CLI: Use stderr for help text and password prompts [#4086, #4623]
- FdoSecrets: Display existing secret service process [#4128]
keepassxc 2.6.0 – Fixed
- Fix changing focus around the main window using tab key [#4641]
- Fix search field clearing while still using the application [#4368]
- Improve search help widget displaying on macOS and Linux [#4236]
- Return keyboard focus after editing an entry [#4287]
- Reset database path after failed 'Save As' [#4526]
- Make builds reproducible [#4411]
- Improve handling of ccache when building [#4104, #4335]
- Windows: Use correct UI font and size [#4769]
- macOS: Properly re-hide application window after browser integration and Auto-Type usage [#4909]
- Linux: Fix version number not embedded in AppImage [#4842]
- Auto-Type: Fix crash when performing on new entry [#4132]
- Browser: Send legacy HTTP settings to recycle bin [#4589]
- Browser: Fix merging browser keys [#4685]
- CLI: Fix encoding when exporting database [#3921]
- SSH Agent: Improve reliability and underlying code [#3833, #4256, #4549, #4595]
- FdoSecrets: Fix crash when editing settings before service is enabled [#4332]
Install KeePass Password Manager
Run the following commands in terminal to install the KeePass password manager on Linux Ubuntu:
sudo apt-get update
sudo add-apt-repository ppa:phoerious/keepassxc
sudo apt-get update
sudo apt install keepassxc
