Phillip Richcreek
modified
a comment
on
discussion Open Discussion
I deleted and re-added the triggers on both devices. Which is to say "on each of the two keepass databases on the CD." When I save the Surface Book database, I get error "The given path's format is not supported." Here is a snip of a portion of the XML. Can you give me an idea where this name might be defined in the triggers? Let me know if I need to clarify what I'm asking for. <typeguid>blah-blah-blah==</typeguid> <parameters> <parameter>X:\bl-\ah\blah-name.kdbx</parameter> <parameter> <parameter>...
Phillip Richcreek
posted
a comment
on
discussion Open Discussion
I deleted and re-added the triggers on both devices. Which is to say "on each of the two keepass databases on the CD." When I save the Surface Book database , I get an error "blah." Here is a snip of a portion of the XML. All the data values are hidden, and the filename is shown as X:\bl-\ah\blah-name.kdbx. The filename has been hidden in the image attached. Can you give me an idea where this name might be defined in the triggers? Let me know if I need to clarify what I'm asking for. <typeguid>blah-blah-blah==</typeguid>...
user54851387
posted
a comment
on
discussion Open Discussion
Hello, I'm wondering if it exists an option to save/cache locally your db when loading it only from a remote source ? (as it exists for Keepass2Android for instance). So one may be able to use the db even offline. Thanks,
Georg Hatebur
posted
a comment
on
discussion Help
It was the correct file, but I think the Windows ownership protction played into it. -> I recovered the whole C:\Users folder and fought then houres with the ownership protection, because too many files were damaged, icoudnt take ownership due to error messages. The programm TakeOwnershipEx allowed me to navigate to the .kdbx file and copy it to a save place. Thanks to everyone who thought about my problem.
Paul
posted
a comment
on
discussion Help
"Synchronize" always makes both databases the same, merging all changes and updating the History. Import only modifies the database into which you are importing. Sync is usually the method used to update databases. Import is generally used for a one off import of data from an old / separate database. What are you trying to achieve with your trigger? cheers, Paul
Pelko12
posted
a comment
on
discussion Open Discussion
Hi Dominik , As already stated above, I appreciate your super-quick reaction. One additional proposal from me (yes, I know, there are probably more important issues in the queue, but nevertheless…): A nice feature to have would be a message confirming the successful export with a link "Open file location". Keep on the good work!
user54851387
posted
a comment
on
discussion Help
Hello, I couldn't use the trigger action "import into active database", as I'm getting an "Exception during webclient call", although I did open the remote file with the file menu before (and it worked and added the item in the Open Recent file list). How can I debug this ? PS : using sftp protocol And I do not fully understand the difference between using this action "import into active db" compared to the trigger action called "synchronize active db with an url". The latter doesn't have the merge...
Pelko12
posted
a comment
on
discussion Open Discussion
Oh, I just see that Dominik has obviously comprehended the issue and already released a fix - that's damn fast, chapeau and thanks!
Pelko12
posted
a comment
on
discussion Open Discussion
The setting works. You can confirm the setting is updated and used. No, at least in my environment, it does not work. To verify if your KeePass behaves differently than mine, I can give you step-by-step instructions, if you like.
Paul
posted
a comment
on
discussion Help
An invalid file signature is most likely to mean the data recovered is not your database. There is no recovery option for an incorrect file. :( Hopefully you have a backup of the harddrive before encryption. cheers, Paul
Paul
posted
a comment
on
discussion Open Discussion
What sort of load issues? Details please. cheers, Paul
Paul
posted
a comment
on
discussion Help
Open the IOProtocolExt zip file. Copy / extract "IOProtocolExt.plgx" and the "IOProtocolExt_WinSCP" folder. Place these files in the KeePass "Plugins" folder. Restart KeePass. You must not have any other IOProtocolExt files in the KeePass folder. cheers, Paul p.s. to post a screenshot, save the shot as PNG and then upload to your post. Saves us having to download a separate file to view your pics.
Georg Hatebur
posted
a comment
on
discussion Help
Hello, the unistaller of a program deleted parts of my dokument folder where my .kdbx file was, before a backup was made. I could restore it with resuce tool (Perfect - no corrupted clusters detected). But i get the message: Failed to load the specified file! The file signature is invalid. Either the file isnt a Keepass database file at all or it is corrupted. The repair mode adds no entry and opening the database with a hexeditor shows the wrong first 8 pairs. I have a one day older version of that...
wellread1
modified
a comment
on
discussion Open Discussion
Larger files with more entries take longer to decrypt and load, but 1MB is not too large. Your database should load in around 3 seconds. An inappropriate key transformation database setting can add a delay. Check while the database is open and selected by pressing the 'Test' button in Database Settings...>Security . A delay of 0.2-1.0 seconds is good. Triggers or plugins that execute when the database opens can add delays. Uncheck Plugins in Tools>Options...>Policy(tab) and restart KeePass to disable...
wellread1
posted
a comment
on
discussion Open Discussion
Larger files with more entries take longer to decrypt and load, but 1MB is not too large. Your database should load in around 3 seconds. An inappropriate key transformation database setting can add a delay. Check while the database is open and selected by pressing the 'Test' button in Database Settings...>Security . A delay of 0.2-1.0 seconds is good. Triggers or plugins that execute when the database opens can add delays. Uncheck Plugins in Tools>Options...>Policy(tab) and restart KeePass to disable...
wellread1
posted
a comment
on
discussion Open Discussion
That worked. I thought that the relative path (enter file name only) feature would have to be sacrificed. Somebody will be unhappy but that's life.
ReadyPlayerOne
posted
a comment
on
discussion Open Discussion
Late to reply but I will go searching for those but thought I corrected all those wrong names already.
ReadyPlayerOne
posted
a comment
on
discussion Open Discussion
I notice that when my data saved file got closer to 1MB it started to have some load issues? Does the newer version address this load issue or not? My computer has 16gigs of memory and running Windows 10x64 pro 1909 right now. I at version 2.46 right now.
Dominik Reichl
posted
a comment
on
discussion Open Discussion
I've added a check now; the import/export dialog does not accept relative file paths anymore. Here's the latest development snapshot for testing: https://keepass.info/filepool/KeePass_201001.zip Thanks and best regards, Dominik
wellread1
posted
a comment
on
discussion Open Discussion
No, this seems not to help - I have this option checked. The setting works. You can confirm the setting is updated and used. While KeePass is NOT running, inspect the appropriate item in the <WorkingDirectories> key of the keepass.config.xml file. The path specified in the item containing the string Export@will be used when KeePass is next started. This setting is updated whenever a database is exported and it is saved when KeePass exits. Note: The active keepass.config.xml file is usually in %APPDATA%\KeePass...
Pelko12
posted
a comment
on
discussion Open Discussion
If you check "Remember working directories" in Tools>Options...>Advanced(tab)>Advanced(section) KeePass will remember the last directory used as an export destination. No, this seems not to help - I have this option checked.
Pelko12
posted
a comment
on
discussion Open Discussion
Hi Paul, It is not possible to inadvertently export your data. Nobody has argued the converse. The problem is (please re-read, if necessary, the postings of Brian and me ) that, without an explicit path given, KeePass saves the export "somewhere" - somewhere where Brian, me and probably dozens of other users don't expect it. Thus Brian is rightly " worried there's a plain-text copy of the database setting around somewhere".
wellread1
posted
a comment
on
discussion Open Discussion
If you check "Remember working directories" in Tools>Options...>Advanced(tab)>Advanced(section) KeePass will remember the last directory used as an export destination.
Peter Moentmann
posted
a comment
on
discussion Help
I dis so as for other plugins. The difference is: all other pluging files are plgx-files, the IOProtocolExt plug-in has .com, .exe and .ini-files. I left them in the extracted original folder (named as downloaded IOProtocolExt_WinSCP) as well as files copied directly into the plugin folder. So KeePass don't accept them ..... cheers Peter
Paul
posted
a comment
on
discussion Open Discussion
This is not a bug, it is working as designed. It is not possible to inadvertently export your data. You need to select 2 menu items, choose an export format and then supply a file name, before finally clicking OK. cheers, Paul
Pelko12
posted
a comment
on
discussion Open Discussion
I was just facing the same situation and finally found out that if you don't enter a path, KeePass silently stores the exported file in the very directory from where it has loaded its database (the .kdbx file). Additionally, KeePass fails in indicating this default location in its "Export to:" field: When you click on the floppy icon beside, the path displayed is the last folder that you have entered manually, whereas the last one actually (and accidentally) used may indeed be the default path mentioned...
John Jones
posted
a comment
on
discussion Open Discussion
I see, it makes sense. Personally, I did not encounter any issues on multiple devices using DACL but you probably have a better view on the stability when it comes to KP. Thanks for the input on this matter.
Dominik Reichl
posted
a comment
on
discussion Help
KeePass simply asks the framework to open the URL (using Process.Start [1]); there's nothing special here. Most of the things that I'd suggest have already been posted. One more suggestion: in the Windows system settings → 'Apps' → 'Default apps', click the link 'Choose default apps by protocol', search for 'HTTPS' and try selecting a different browser. If that doesn't work, most likely your anti-virus / security suite is blocking KeePass, and I don't know how this could be changed. Best regards,...
Paul
posted
a comment
on
discussion Help
The implication is that you do not have permission to run something that KeePass needs to perform the update check - it's only a few internet calls. I don't know the exact mechanism KeePass uses to make internet calls, maybe Dominik could suggest a reason. cheers, Paul
Paul
posted
a comment
on
discussion Open Discussion
Therefore sync is working. Now we need to work out why your trigger doesn't work. Manually perform the sync that you have set up in your trigger. Does it work? cheers, Paul
Phillip Richcreek
posted
a comment
on
discussion Open Discussion
I put a copy of the PC database and the SB database on a CD and ran the synchronize with file. The two databases are now identical.
Dominik Reichl
posted
a comment
on
discussion Open Discussion
It would be easy to add an option in the user interface for assigning a restrictive DACL, but it's not a good idea, because activating this option may make KeePass completely unusable (as documented). So, we'd have a trapdoor: it'd be easy for users to make KeePass unusable, but hard to make it usable again (many users don't know how the configuration system of KeePass works and thus couldn't deactivate the option again). Some users might look into the documentation then (or ask in the forum) and...
Andy Spragg
posted
a comment
on
discussion Help
@wellread1, when I said it was not a one-off error, I meant for me. I didn't mean to imply it was not an uncommon error. @pail459, good suggestion, and easy to try, and the answer is yes, when I run as administrator, I don't get the error and the link works. What does that tell me? "plugins installed" ... do you mean for KeePass (answer no, not intentionally anyway, I didn't know there were any) or for my browser (not so sure about that).
John Jones
posted
a comment
on
discussion Open Discussion
I guess that clarifies some of the various available options. I presume it require changes to add it to the security options because of how KP handles DACL, couldn't you dynamically assign a restrictive DACL to the process if an option is ticked?
Fabian Schramke
posted
a comment
on
discussion Help
Nevermind, just had to Unblock the files under Properties.
Phillip Richcreek
modified
a comment
on
discussion Open Discussion
Are you sure the file to sync is in the same folder on both PCs? If not the sync won't work on one machine. Clarify what you mean by same folder on both PCs? I guess you mean the same folder name? But not physically the same folder? If you want physically the same, then it would have to be a shared folder. So the answer to your question is yes, they are in folders of the same name, but not physically the same folder.
Phillip Richcreek
posted
a comment
on
discussion Open Discussion
Are you sure the file to sync is in the same folder on both PCs? If not the sync won't work on one machine. I'm sure they are not in the same folder *How could they be in the same folder? I'm not sharing any folders.
Fabian Schramke
posted
a comment
on
discussion Help
Hi, so i'm trying create an enforced configuration file. The documentation suggests to generate an XSD file that defines the configuration file format. (https://keepass.info/help/kb/config_enf.html) I'm not overly familair with Visual Studio Code, so I'm running into an error "Error: Could not load file or assembly". Can someone provide me with the xsd file or give me some suggestions on how to get past this error? Thanks, Fabian
Dominik Reichl
posted
a comment
on
discussion Open Discussion
In order to make it easier to find such options, I've now added the following: On the security help page, there now are two new sections 'Options for Experts' [1] and 'Options for Administrators' [2], in which such options are mentioned. It is also explained why these options can only be activated by editing the configuration file. On the security tab page of the KeePass options dialog, a label 'More security options:' and two links 'For experts' and 'For administrators' have been added. Clicking...
Paul
posted
a comment
on
discussion Help
I don't know where you have stored it. KeePass expects you to save the database wherever suits, often with your other documents. Use Finder to search for KDBX files. cheers, Paul p.s. keep the questions coming, that's why we're here. :)
Paul
posted
a comment
on
discussion Open Discussion
This is the KeePass help site. You need to ask this question on the Kee website. https://forum.kee.pm/t/welcome-to-the-kee-community/8 cheers, Paul
Paul
posted
a comment
on
discussion Open Discussion
I don't receive email from sourceforge. Post text here or upload files if you need help. You get a sync failed message. We need to know why. Try the sync manually via File > Synchronize > Synchronize with file. Are you sure the file to sync is in the same folder on both PCs? If not the sync won't work on one machine. cheers, Paul
Phillip Richcreek
posted
a comment
on
discussion Open Discussion
Thank you, TashaGabby
Dominik Reichl
posted
a comment
on
discussion Open Discussion
The master key can be changed via 'File' → 'Change Master Key'. However, if you want to set up a database for testing, I'd recommend to create a new database. This is safer than removing sensitive data (including history entries, etc.) from an existing database. Best regards, Dominik
louis bergmann
posted
a comment
on
discussion Help
sorry Paul, last question. where is the database located on Mac Catalina? Thanks very much. louis
Phillip Richcreek
posted
a comment
on
discussion Open Discussion
I'm setting up a database for testing that will contain no sensitive data. The database is derived from a production database and therefore uses that database's master key. How can I change the Master Key? Thanks. TashaGabby
heiko grumbein
posted
a comment
on
discussion Open Discussion
at first: sorry for my bad english and for posting this, but i didn´t find any other possibility to get in contact to you, but i´m sure, you will understand. otherwise send me an email-adress to describe my problems with kee. since a few month the login-prodedure of many homepages changed and has to be done in two steps. this is problem for the kee-add-on (windows 10, firefox). for example the homepages of the "ADAC" (https://www.adac.de/mein-adac/) and the "Postbank" (https://meine.postbank.de/#/login)...
Phillip Richcreek
posted
a comment
on
discussion Open Discussion
You need to test the sync manually before using the triggers. Does that work? I've already used the triggers. Without the triggers, how/why would they sync? Clarify what you mean. You should not have gaps in your XML file, but it may just be the way UC shows the difference. I sent you the xml, right? Look at it; there is one big gap. I has nothing to do with how UC report shows it, but the report does in fact show the gaps. To copy the triggers to another KeePass: I'v done all that.
Paul
posted
a comment
on
discussion Help
Try running KeePass as Admin - right click on the shortcut and select "Run as administrator". Does the update check work? Do you have plug-ins installed? Close KeePass, rename the plug-ins directory, restart KeePass. Does the update check work? cheers, Paul
Paul
posted
a comment
on
discussion Help
If you can open the database with KeeWeb you can open it with KeePassXC. cheers, Paul
Paul
posted
a comment
on
discussion Open Discussion
You need to test the sync manually before using the triggers. Does that work? You should not have gaps in your XML file, but it may just be the way UC shows the difference. To copy the triggers to another KeePass: 1. Select the trigger you want to copy. 2. Click the Tools button and select "Copy selected triggers". 3. Paste the triggers into Notepad or similar and save - or paste into a mail and send it to yourself. 4. Copy the file to the other machine / open mail on the other machine. 5. Copy the...
wellread1
posted
a comment
on
discussion Help
This error is uncommon because there are very few reports of it. A couple of posts were made, one in 2015 and another in 2013. Apparently, the 2013 incident was resolved. Chrome had been updated using a non-standard installer (Ninite). While it is not exactly clear what the user did to fix the problem, I suspect the poster reinstalled Chrome from the official Google Chrome site. The 2015 incident appears to be a browser caused problem, but the poster abandoned the thread. Even though KeePass is raising...
Fleisch Wolf
modified
a comment
on
discussion Help
Has it always happened? Its happening since a few days ago Does it happen if you turn off "use secure desktop" in KeePass? No Does it happen when KeePass opens the secure desktop or when you enter something? The error message occurs when I open Keepass. Anytime I click on ok and try typing in the pw the message occurs again
Fleisch Wolf
posted
a comment
on
discussion Help
Its happening since a few days ago Does it happen if you turn off "use secure desktop" in KeePass? No Does it happen when KeePass opens the secure desktop or when you enter something? The error message occurs when I open Keepass. Anytime I click on ok and try typing in the pw the message occurs again
Andy Spragg
posted
a comment
on
discussion Help
This is not a one-off error, wellread1. I have been getting it every time I have tried for at least a month (I haven't tried that often, but point is, it is not something that will be fixed by a reboot). The safe mode boot suggestion is interesting, but how might it fix the problem when I return to normal boot? As for "permissions different than the current user", I'm afraid this is IT-speak beyond my luser comprehension. I am the current user!
Eddie Brewer
modified
a comment
on
discussion Help
Did you get the update from the official download site? YES. Did you install using KeePass-2.46-Setup.exe, or KeePass-2.46.zip, or something else? (the former) Un-check Run KeePass at Windows startup (current user) in Tools>Options...>Integration(tab). Logout and login to Windows. Are either or both entries still in the startup folder? Did the config file open in WordPad at startup? BOTH ENTRIES STILL IN START-UP FOLDER and config file opened. This is the point where I read Dominik Reichl's reply...
Eddie Brewer
posted
a comment
on
discussion Help
My guess is that you copied the "KeePass.exe" file instead of creating a shortcut to it. This results in KeePass running as a portable application, creating a "KeePass.config.xml" in your Startup folder (which Windows then opens using WordPad). Indeed, that is what seems to have happened. I therefore deleted both files from the Start-up folder AND unchecked the "Run at start-up" option in the settings. After a reboot, nothing happened: KeePass didn't launch, and neither did Wordpad. I then went back...
Eddie Brewer
posted
a comment
on
discussion Help
Did you get the update from the official download site? YES. Did you install using KeePass-2.46-Setup.exe, or KeePass-2.46.zip, or something else? (the former) Un-check Run KeePass at Windows startup (current user) in Tools>Options...>Integration(tab). Logout and login to Windows. Are either or both entries still in the startup folder? Did the config file open in WordPad at startup? BOTH ENTRIES STILL IN START-UP FOLDER and config file opened. This is the point where I read Dominik Richl's reply...
John Jones
posted
a comment
on
discussion Open Discussion
Hi Dominik, I already mentioned DACL support for KP in my previous comments here. The issue is that it is an obscured and hidden option vs. always on by default on XC. It is not even present in the Security tab as an option for users to opt into(just like other potentially incompatible options are, like remember master-password for instance). Basically it is impossible for the average user to find. Just want to clarify that in terms of memory protection KP can be extremely effective with options...
Dominik Reichl
posted
a comment
on
discussion Help
When KeePass registers itself for being started at Windows user logon, it does this using a registry key, not using the Startup folder. So, you must have created this "KeePass.exe" in the Startup folder yourself. My guess is that you copied the "KeePass.exe" file instead of creating a shortcut to it. This results in KeePass running as a portable application, creating a "KeePass.config.xml" in your Startup folder (which Windows then opens using WordPad). In order to fix it, delete the two files and...
Thomas
posted
a comment
on
discussion Open Discussion
Well, that's clever! Thanks :D
wellread1
modified
a comment
on
discussion Help
In my Windows Start-up folder, there are two items: Keepass.exe and keepass.config.xml....I've tried deleting it from there and rebooting, but as soon as I reboot, the config.xml file is back in the start-up folder... Did you get the update from the official download site? Did you install using KeePass-2.46-Setup.exe, or KeePass-2.46.zip, or something else? Un-check Run KeePass at Windows startup (current user) in Tools>Options...>Integration(tab). Logout and login to Windows. Are either or both...
wellread1
modified
a comment
on
discussion Help
In my Windows Start-up folder, there are two items: Keepass.exe and keepass.config.xml....I've tried deleting it from there and rebooting, but as soon as I reboot, the config.xml file is back in the start-up folder... Did you get the update from the official download site? Did you install using KeePass-2.46-Setup.exe, or KeePass-2.46.zip, or something else? Un-check Run KeePass at Windows startup (current user) in Tools>Options...>Integration(tab). Logout and login to Windows. Are either or both...
wellread1
modified
a comment
on
discussion Help
In my Windows Start-up folder, there are two items: Keepass.exe and keepass.config.xml....I've tried deleting it from there and rebooting, but as soon as I reboot, the config.xml file is back in the start-up folder... Did you get the update from the official download site? Did you install using KeePass-2.46-Setup.exe, or KeePass-2.46.zip, or something else? Un-check Run KeePass at Windows startup (current user) in Tools>Options...>Integration(tab). Logout and login to Windows. Are either or both...
wellread1
posted
a comment
on
discussion Help
In my Windows Start-up folder, there are two items: Keepass.exe and keepass.config.xml....I've tried deleting it from there and rebooting, but as soon as I reboot, the config.xml file is back in the start-up folder... Did you get the update from the official download site? Did you install using KeePass-2.46-Setup.exe, or KeePass-2.46.zip, or something else? . Un-check Run KeePass at Windows startup (current user) in Tools>Options...>Integration(tab). Logout and login to Windows. Are either or both...
Dominik Reichl
posted
a comment
on
discussion Open Discussion
Ok, so there's nothing new. Preventing memory reads and disabling (core) dumps on Windows is done by assigning a restrictive DACL to the process (which grants minimal token rights). KeePass has an option for this, too (option 'ProtectProcessWithDacl' [1], disabled by default for the compatibility reasons mentioned in the documentation). Thanks and best regards, Dominik [1] https://keepass.info/help/v2_dev/customize.html#opt
Eddie Brewer
posted
a comment
on
discussion Help
Hi wellread1, Thanks for your responses. I'm not actually clicking anything; I have KeePass configured to launch on boot-up and open the last-opened .kbdx file, which it does marvellously. The .kbdx extension is definitely associated with KeePass. When I boot up, KeePass launches automatically (this is good) and opens the last-used database (also good), but something is triggering Wordpad to open the keepass.config.xml file. Just in case, I did what you suggested, despite the fact that my issue wasn't...
wellread1
modified
a comment
on
discussion Help
It is also possible that you are trying to start KeePass by clicking on an xml file (.xml extension) instead of a KeePass database file (.kdbx extension).
wellread1
posted
a comment
on
discussion Help
It is also possible that you are trying to start KeePass by clicking on an xml file (.xml file) instead of a KeePass database file (.kdbx extension).
wellread1
modified
a comment
on
discussion Help
You might have accidentally associated the KeePass database (.kdbx) file type with WordPad. Make sure that the .kdbx file type is associated with KeePass as follows. Open KeePass and navigate to Tools>Options...>Integration(tab). Click on "Create Association". If the association was successful your .kdbx files will have a KeePass icon and the database will open in KeePass.
wellread1
posted
a comment
on
discussion Help
You might have accidentally associated the KeePass database .kdbx file type with WordPad. Make sure that the .kdbx file type is associated with KeePass as follows. Open KeePass and navigate to Tools>Options...>Integration(tab). Click on "Create Association". If the association was successful your .kdbx files will have a KeePass icon and the database will open in KeePass.
Eddie Brewer
posted
a comment
on
discussion Help
Every time I launch KeePass, Wordpad automatically opens keepass.config.xml. I've searched the forums and haven't found exactly this issue. This started after I upgraded to 2.46. Before that, I had never seen the config.xml file. Any ideas about why this is happening and how I can stop it? Frankly, I'm not knowledgeable enough in all things coding to want to see the xml file. Thanks in advance! OS: Win10 64-bit KeePass Version: for Windows 2.46
John Jones
modified
a comment
on
discussion Open Discussion
Hi Dominik, KeePassXC prevents memory from being read outright, verified it myself: https://keepassxc.org/blog/2019-02-21-memory-security/ *won't prevent high priviledge access Also XC uses DACL by default, disable core dumps, grants minimal token rights to the associated user, denies key API calls etc. Link to code, directed by Jonathan(droidmonkey): https://github.com/keepassxreboot/keepassxc/blob/develop/src/core/Bootstrap.cpp#L45 https://github.com/keepassxreboot/keepassxc/blob/develop/src/core/Bootstrap.cpp#L132...
John Jones
posted
a comment
on
discussion Open Discussion
Hi Dominik, KeePassXC prevents memory from being read outright, verified it myself: https://keepassxc.org/blog/2019-02-21-memory-security/ *won't prevent high prilivedge access Also XC uses DACL by default, disable core dumbs, grants minimal token rights to the associated user, denies key API calls etc. Link to code, provided by Jonathan (droidmonkey): https://github.com/keepassxreboot/keepassxc/blob/develop/src/core/Bootstrap.cpp#L45
Douglas Carr
posted
a comment
on
discussion Open Discussion
I appreciate the help. I've decided to go back to KeePassXC as it's not crashing on me when I play games. Thanks.
Dominik Reichl
posted
a comment
on
discussion Help
You could terminate other processes until the problem doesn't occur anymore. A few applications that are known to cause this problem are listed here: https://keepass.info/help/kb/sec_desk.html#switch Best regards, Dominik
Dominik Reichl
posted
a comment
on
discussion Open Discussion
As far as I can see, such a token-based layer is either impractical or does not provide additional security. Having to confirm every decryption/encryption manually (for example by pressing a button on the token) is impractical; there are many functions that need multiple real passwords at once (displaying them in the main entry list, password quality estimations, copying/editing multiple entries, searching in passwords, finding duplicate/similar passwords, XML Replace operations, printing, exporting,...
OK Thanks.
John Jones
posted
a comment
on
discussion Open Discussion
If you're looking for a solution that works natively with security tokens and addressed memory dumping techniques. I recommend KeePassXC. they have implemented measures for memory protection beyond DPAPI.
John Jones
posted
a comment
on
discussion Open Discussion
You'll to perform many changes into the KeePass logic, this is beyond a plugin(as Paul suggested). when you trigger auto-type, KP doesn't know that the password is encrypted by your token response, you'll have to change KP code to make sure it handles various situations gracefully. Memory encryption is not a simple topic. eventually in order to copy\auto-type the password will have to be stored in plain text(in memory). that means that you'll have to make sure you scrub the plaintext as soon as you...
louis bergmann
posted
a comment
on
discussion Help
Thanks Paul. so you think that just installing kpxc will do the job? greets louis
Paul
posted
a comment
on
discussion Help
Yes, the database is the same. You can test opening your database using the online KeeWeb. cheers, Paul
wellread1
modified
a comment
on
discussion Open Discussion
Yes, but these plugins store the additional secret somewhere and therefore the database cannot be synced anymore. And they do not work on Keepass2Android. As long as the database master key of each database copy is identical, the database copies can be synchronized. The alternate secrets are not the database master key so so it does not matter that they are different. The alternate secrets, used by the plugins I mentioned, are used to protect the stored, database master key. Depending on the protection...
Paul
posted
a comment
on
discussion Open Discussion
Create a test database on your phone with a strong password and fingerprint. Copy the database to the PC. Create a different test database on the PC with a key file. Add the strong password to the PC database in an auto open entry, either via trigger or the KeeAutoExec plug-in. Opening the second test database on the PC will auto open the database used on Android. See the trigger examples for details of auto open and "multiple database" activation. cheers, Paul
wellread1
modified
a comment
on
discussion Open Discussion
It's not really equivalent. As far as I know I cannot PIN-protect a static password on Yubikey. A standard KeePass key file is not protected by a pin either. It relies entirely on physical security that the user provides, i.e. it is somethiong the user has.
wellread1
modified
a comment
on
discussion Open Discussion
My request favors the implementation in the database format itself so that it will be available anywhere. This is not a database format issue. Your request is not compatible with the technology used by KeePass to derive the database encryption key. However, KeePass can accept the same database master key input via the master password field or in a text file, i.e. input via a key file.
wellread1
posted
a comment
on
discussion Open Discussion
My request favors the implementation in the database format itself so that it will be available anywhere. This is not a database format issue. Your request is not compatible with the technology used KeePass to derive the database encryption key. However, KeePass can accept the same database master key input via the master password field or in a text file, i.e. input via a key file.
louis bergmann
posted
a comment
on
discussion Help
hello everybody I should have known better, but I upgraded to catalina and now keypass won't even open up. I've read that I should move to keepassXC. But can I use the same database? Thanks for your help greets louis
wellread1
posted
a comment
on
discussion Open Discussion
Yes, but these plugins store the additional secret somewhere and therefore the database cannot be synced anymore. And they do not work on Keepass2Android. As long as the database master key of each database copy is identical, the database copies can be synchronized. The alternate secrets are not the database master key so so it does not matter that they are different. The alternate secrets are used to protet the stored, database master key. Depending on the protection method an alternate secret does...
Phillip Richcreek
modified
a comment
on
discussion Open Discussion
Are the two computers in the same location? They are physically in the same location and share OneDrive through WiFi. I've deleted then re-added the triggers as defined in the instructions you sent. Sycnronization still is not working. The message that leads me to think it's not working happens when I save the database on the PC. Then I open the database and the changes/additions are reflected in the database. But they aren't reflected on the Surface Book. see synchronization failed below This image...
Phillip Richcreek
modified
a comment
on
discussion Open Discussion
Are the two computers in the same location? They are physically in the same location and share OneDrive through WiFi. I've deleted then re-added the triggers as defined in the instructions you sent. Sycnronization still is not working. see synchronization failed below This image is intriguing. I realize that image doesn't show anything about the contents. But if the triggers aren't in the file, what makes them NOT show up in the xml? see triggers synchronization actions below An UltraCompare shows...
Phillip Richcreek
modified
a comment
on
discussion Open Discussion
Are the two computers in the same location? They are physically in the same location and share OneDrive through WiFi. I've deleted then re-added the triggers as defined in the instructions you sent. Sycnronization still is not working. see synchronization failed below This image is intriguing. I realize that image doesn't show anything about the contents. see triggers synchronization actions below An UltraCompare run shows a gap of 28 lines in the triggers on the PC versus the Surface Book. I will...
wellread1
posted
a comment
on
discussion Open Discussion
It's not really equivalent. As far as I know I cannot PIN-protect a static password on Yubikey. A standard key file is not protected by a pin either. It relies entirely on physical security that the user provides, i.e. it is somethiong the user has.
Phillip Richcreek
posted
a comment
on
discussion Open Discussion
Are the two computers in the same location? They are physically in the same location and share OneDrive through WiFi. I've deleted then re-added the triggers as defined in the instructions you sent. Sycnronization still is not working. This image is intriguing. I realize that image doesn't show anything about the contents. seeC:\Users\pwric\Documents\ONEDRIVE SYNC\triggers synchronize actions PC.PNG An UltraCompare run shows a gap of 28 lines in the triggers on the PC versus the Surface Book. I will...
Thomas
posted
a comment
on
discussion Open Discussion
Yes, but these plugins store the additional secret somewhere and therefore the database cannot be synced anymore. And they do not work on Keepass2Android. My request favors the implementation in the database format itself so that it will be available anywhere.
Thomas
posted
a comment
on
discussion Open Discussion
It's not really equivalent. As far as I know I cannot PIN-protect a static password on Yubikey.
Paul
posted
a comment
on
discussion Help
It's not easy, you have to write your own text handler, as has been done for the password field when hidden characters are used. See this page for more details: https://keepass.info/help/base/secedits.html cheers, Paul
Paul
posted
a comment
on
discussion Open Discussion
I think you will have to fork it. Dominik rarely adds features suggested here, unless they are relatively simple usage improvements. He is trying to keep KeePass down to a minimal password manager. cheers, Paul
