KeePassXC Advanced Usage // 8 features you might have not heard about
Вставка
- Опубліковано 25 чер 2024
- This video shows advanced features of the password manager KeePassXC. Aron Molnar shows you what else you can do with this free and open source password manager.
Download KeePassXC from keepassxc.org/download/
The YubiKey I use: www.yubico.com/at/product/yub...
Subscribe to my newsletter at securityguide.me
Timestamps:
0:00 Intro
0:10 Leaked and weak passwords
1:12 Multi Factor Authentication/TOTP
4:30 Save entries as reference
5:39 Additional URLs
6:16 Next video: ransomware
6:30 Sharing passwords
9:06 Attachments
10:07 SSH integration
11:38 Protect password file with Yubikey
13:28 More features
13:50 Outro - Наука та технологія
Do you know other useful features I did not mention? I am interested in hearing them.
Two channel autotype obfuscation - although I don't know how to enable it in KeepassXC
Is there any option in keePass to create multiple users and giving them limited access of passwords? Secondly is there any option to install it on the server side? and then we can share it with many users and give limited access to all of the users?
@@MuhammadIrfan-32 I think Vaultwarden (as server) and Bitwarden (as client) is the better option for you in this case.
@@securityguideme Yeah you also missed how to add multiple string fields options and adding additional attributes like (KPH: ). It took me so while to figure it out. Would be helpful for other new people if you add it to your KeePass updated videos.
Great video, that attachment feature is the thing I was searching for. Thank you for such a useful content!
Wow, this was so detailed.
Pretty shocking when my database was analyzed, got rid of most problem cases. The keysharing and SSH key usage are great tips, thanks.
SSH intergration with Remmina thanks to this tutorial. Excellent stuff thanks !
Amazing video and very easy to follow and understand, thanks a lot!
Best video on this topic
Amazing features. I recently started using it thanks to the new support for Windows hello. Thanks for the video!
Thank you for the feedback!!
KeypassXC is great. Thanks for the video.
Video extremely useful for me. Thank you!
Thanks for the great tips. Recommend making smaller or eliminate the self view video frame at lower right corner while presenting.
nice one, Greggie. Thanks
Great video. Thank you for the upload.
Thank you so much for such useful manual!
Thank you! Your video was really helpful.
Very good video. !! You deserve another sub
Great video Sir.
#2 is the most useful I think.
Wonderful video. That sharing functionality is not as bad or difficult as I thought it might end up being. I wonder how that synchronization function actually works though. Sounds almost magical to me.
Awesome video!
Good work!
Thank you! Great video! I'm looking for a replacement for my online pw manager. Gonna try this one.
Great video, very informative!
Keep up the great work!
Also, I am your 100th subscriber. :)
Yeah cool, that's a great milestone for me!
Thank you :-)
I will publish some insights about my channel on the occasion of my 100th subscriber. Keep you updated :-)
Here is some background information on my channel on the occasion of your subscription, which was the 100th 🙂Just in case you are interested 🙂securityguide.me/issues/insights-to-my-youtube-channel
Excellent video! You seem like a great dude! Definitely subscribed
Many thanks :-)
I agree; did the same. Lovely and useful tips.
Amazing and very informative video. You need to make a video "how to backup Keepas from old computer and restore on new comupter" step by step. Keep up good work brother
wow great stuff. it was really helpul for me. thanks
I love you, thanks a lot ❤❤❤
i love it, thank you
Good video. Thanks.
Good content brother
Great video, thanks!
Glad you liked it!
Very useful video.
Thanks a lot
What is the extension you are using for your browser? Great video by the way. I have been using XC for 5 years now and didn't know these features existed!
Great, happy to hear this!
Here are the official browser extentions.
Chrome: chrome.google.com/webstore/detail/keepassxc-browser/oboonakemofpalcgghocfoadofidjkkk?hl=en
Firefox: addons.mozilla.org/en-US/firefox/addon/keepassxc-browser/
Very good.
Many thanks!
Прекрасно! Благодарю!
good video thanks!
Nice.
Great video! Question: how to batch change entries on mac m1? I did not found keepassxc-cli for mac.
This was great! Is keepassxc autofilling all those passwords from your local storage on your computer or from a cloud server?
Also is there a way I could use keepassxc on my computer but also have it synchronize with my phone? Because I will be doing most of my signing in and out on my phone
Hi Josiah,
Thanks for your feedback!
You might want to have a look at my first KeePassXC video: ua-cam.com/video/uQUtBooXJ54/v-deo.html
Passwords are stored in a local file on your computer. There is no cloud server/service involved.
The easiest option is to synchronize your file via Google Drive, OneDrive or Tresorit.
I did not know that KPXC has a Putty integration. That's a game changer.
Gotta make advance tutorials like how to keep Keepass safe (like using flatpak version which is sandboxed and protecting the in memory db by flushing it using Pandora bomb or similar. ).
Thanks for the video, was very usefull. Plis, Can you make a video of the best way to create a credit card entry for this password manager?
You can step into the entry, go to "Advanced" and add a new custom attribute.
You could also use the notes field to add your credit card information.
Since it doesn't have a direct correspondent for Android, I'll stick with the oldest Keepass manager!😢
Not even KeepassDX?
How to setup and save login and password to use with Auto-Type when you have multiple user's login for the same Website (Using single Database)?
Hi is there a way to automate the uodating of password in multiple entries?
Is there also a way to change passwords for multiple entries at once?
Thank you
What is difference of clone and adding additional urls?
Is there a way to auto save passwords from a website when creating a new account on that site? Or a plugin to do it?
Yeah, you can do this with the KeePassXC browser plugin.
You generate your random password using the password generator, enter it and if the browser plugin detects that this entry does not yet exist, it asks you to save the password.
lh5.googleusercontent.com/QYk12Otc6aX90hxdAinH_QQru1y9-0qZoKNhBOKf-u8H97akXOOdpeOTq4ssS0ZRuPW_QILw3yAyL8B9MoYf=w10000-h10000
Anybody know how to get KeypassXC to enter 2 numbers ( the position of which keeps changing each time you log in ) from 7 passcode numbers in between entering your username and password as most banking web sites like to use ?
Can I log into KeePassXC using a fingerprint scanner or pin?
Mine comes up with a red message when I try and import the share file?
How can I use backup key ? It seems this program allows only one key
How do I ensure that when Windows starts it doesn't ask me for the database password? On iOS it is possible but on Windows I can't find how
I already use a password manager called Keepass is this program associated with it ?
is it possible to use webdav?
Ok but how do you share the Group password with your mummy?
How do you keep track of it and synchronise it?
You still have the problem of one initial password exchange.
But then you can keep track of multiple passwords that can change over time.
I recommend to verify your mummy's security number on signal and then send the password with disappearing messages.
Obviously comments seem to disappear from my videos (but I got at least parts of some via mail):
Hi. Don't know what happened to my comment - but it looks like it's not there. So I will try again ;-) Whats the difference between using "KeeShare" vs. a separate Database to share with others (family/friends)? Isn't it easier to create another Database and share it via OneDrive/iCloud,... ?
And here's my answer (feel like being bipolar):
Yeah, it's true, you can also just create another database.
For some people it might be more convenient to have the shared passwords included in their "main" password manager file, especially if they share multiple passwords with multiple groups. It might be easier to have an overview about what is shared.
But if you prefer creating a new database: That's perfectly valid too.
Hello, is there a way to change the font and/or increase the size of the font in the keypasssxc database?
Hello,
Unfortunately, there is not a good solution.
There is a closed ticket but not a "one size fits all" solution, strongly depending on your operating system.
You might want to read through the ticket and review solutions: github.com/keepassxreboot/keepassxc/issues/621
@@securityguideme Thanks for your response. The small font of KeePassXC is a no-go for me.
is it possible i can print all my password for back-up. thanks
Yeah you can go to "Database" --> "Export" --> "HTML File" and then print it.
Just make sure you store it in a secure place.
@@securityguideme thanks appreciate it very much...
Kommst du aus Österreich?
Ja.
Was hat mich verraten?
Mein Akzent? :-)
@@securityguideme ja 😂 macht dich sehr sympathisch.
(Außerdem, dass "Anmelden" statt sign in dort steht)
Can I synchronize my database automatically with my ssh server?
Don't think so, unfortunately
@@securityguideme Thanks for the quick reply
You can use sshfs to mount a section of your ssh server filesystem in your local machine and store your database there.
@@Tetex I did mount a ssh directory, but when I brows files using Keepassxc i doesn't recognize network directories
@@abdusalam3ar Really? I thought it would show in the path you mounted it. I can't test sshfs right now, but I know for a fact that it works with rclone mounts. Are you mounting it in your home directory and searching there using keepassxc? Create a folder in your home and mount the ssh file system there, it should work.
Btw, maybe you are in Windows and that's why it isn't working for you but I'm 99% sure it works in Linux.
3:32 I'm confused. I thought keepassxc had no TOTP?
right click site, TOTP, Setup TOTP...
ich habe mir mal das mit dem "Anhang" genauer angeschaut. Es funktioniert so wie du es erklärt hast aber es hat einen großen hacken! jedes mal wenn du die datei öffnest zb. word dokument wird eine kopie lokal im temp abgelegt. wenn du sie zumachst wird diese datei auch brav gelöscht. soweit so gut. wenn die datei aber offen bleibt und zwischendurch keepassXC in lock mode geht, dann bleibt die datei für immer im TEMP verzeichniss liegen. beim nächsten öffnen wird wieder eine kopie unter neuem namen abgelegt. BEi word/excel dateien mit heicklem inhalt ist das fast schon eine sicherheitslücke
Gratuliere. Am besten dem Projekt melden: github.com/keepassxreboot/keepassxc/security
@@securityguideme mal sehen ob ich es mir antun will. hab leider noch zwei drei andere recht dicke security probleme gefunden...die sagen wir es mal so...zumindest diskusionswürdig wären. Auch wenn ich keepassXC selber gerne nutze und das mein favorit ist, wirft das doch ein bischen ein mulmiges gefühl auf ob sonst noch sicherheitslücken gibt die noch schwerwiegender sind.
@@securityguideme hi, ich hab das problem bei github gemeldet....es wurde als drastisch genug empfunden das es wohl in 2.8 gefixt wird!
Isn't it dangerous to check if the passwords were leaked?
i wonder this as well
Generally not as the encryption standards used when checking are very high and if anyone really wanted to target you, they would have found another method
Using KeePass as the 2FA app kind of defeats the purpose of multi-factor authentication.
Not if you keep keepass database locally. You both have (db) and know (master pswd) which is the essence of 2fa.
@@gajowyify It's not about something you have, since you don't login using your database, you login using your password that's in the database. If you would remember all the passwords in the database, that'd be just as good, so the database is irrelevant as a factor for login. It's only there because most humans can't remember 100 random passwords.
Also if someone were to gain access to this database, they'd have both the passwords and 2fa tokens.
You are absolutely right! At least two different DBs with different passwords should be used if one wants to do that. But two factors should always be separated.
Yes and no. It still protects you from a password leak. If one has access to you keepass then of course you have a problem anyway. 2FA or not
Hi. I love the channel. I am beginning to hate KeePass though:(
My frustration with it is in the fact that exporting KeePass passwords to chrome or Firefox is impossible for me. I have tried multiple ways of generating the CSV or HTML files. Neither chrome or Firefox can read the files keepass creates. Such a shit show :(
Mommy? Im sorry. Mommy? Im sorry. Mommy? Im sorry. Mommy?
Great video tho thnx for the tutorials
Algorithm.
This is why i don't use it. You need a class only to use passwords. Rediculous.
What if i travel to a different country? How do i access my passwords?
It be great if you can make a video showing how to setup multi yubico keys