> **Off-topic:** > Has anyone gotten KeepassXC to work with Pale Moon? It supports TOTP, custom fields and multiple URLs per password entry - IIRC the original Keepass doesn't support the latter. It has a web extension for Firefox that seems too recent to have had an older version that would work here. It works well very with (Global) Auto-Type, which needs to be configured. Same for KeePass 2. It's not URL-dependent and no extension is needed. * * *

Set local environment variables from a KeePass database

Description and resources for the TrueNAS community application called KeePass DeltaSync.

Service-Hinweis für alle, die ihre Passwörter lokal verwalten: Der quelloffene KeePass-Client KeeForge ist mittlerweile nicht mehr nur für ...

Gestores de contraseñas offline garantizan tu privacidad y seguridad 🔐 Sin riesgos de hackeos en la nube, ¡descubre 5 opciones gratis! 📲

Le gestionnaire de mots de passe KeePass XC est une variante multiplateforme de KeePass, avec comme objectif une plus grande richesse fonctionnelle de base, sans passer par des plugins. La version 2.8, en préparation et dont une bêta vient de paraitre, s’annonce déjà comme une mouture majeure....

Le gestionnaire de mots de passe KeePass XC est une variante multiplateforme de KeePass, avec comme objectif une plus grande richesse fonctionnelle de base, sans passer par des plugins. La version 2.8, en préparation et dont une bêta vient de paraitre, s’annonce déjà comme une mouture majeure. KeePass XC 2.8 bénéficie en effet d’un portage […]

I am not sure how it works with KeePass, I am correcting the part regarding how it works with 2FAS. Also, no matter which app you choose, you’ll be putting your data into a third-party cloud. If you choose Proton Authenticator, it will be either iCloud or Proton’s cloud. Proton also can be used offline, but that’s not what you’re interested in.

Kabo: > Are most encryption applications resistant against such attacks? > > In my case these application are mostly: > > * KeePass > * Notesnook > * Cryptomator > * Veracrypt and LUKS encryption tools > Short answer: yes. Long answer: threat modeling in cryptography is a different beast than what we do here. The mentioned threat models are largely dependent on how they are utilized within the protocols themselves. And we are talking about the primitives (building blocks) of a larger protocol. That said, any modern applications is built with a lot of the lessons of the past. Tools designed for cryptography (password managers, file encryptors) put a ton of energy in ensuring the protocols and primitives they used are done correctly. The attacks mentioned like padding oracle attacks should be well known by any cryptographer worth their merit, and they will build the systems to prevent such basic footguns. But of course there is always risk something wasn’t implemented correctly.

Sorry for my mistake. I previously tried setting up the KeePass + Google Drive combo on my Android device, and it didn’t work somehow. So I assumed that restricting Google Drive’s background activity was what broke the synchronization. But I was wrong. After reading your comment, I looked into this further and found that synchronization still works even if the cloud storage app is uninstalled. Thanks for pointing out my mistake. Now, coming to your comment — I don’t feel comfortable going with the local TOTP app + third-party cloud storage route anymore. I’m looking for something easier to use, an out-of-the-box solution, so I’m sticking to cloud-based services only.

overdrawn98901: > Royal: > >> So KeePass ensures integrity? > > Yes. Do they include signatures or how do they do it? overdrawn98901: > KPA threats is that the attacker has the associated plaintext alongside the ciphertext. It’s threat modeling for cryptography - we assume that the attacker has access to both for cracking. You can choose different threats. > > And usually such attacks are based an exploiting the malleability of a cipher (at which lets assume this is secure) or exploiting other aspects of the system and recover the private key (at which the attacker has full access). Don’t fret too hard, KeePass has done a lot of effort to protect against these attacks. Are most encryption applications resistant against such attacks? In my case these application are mostly: * KeePass * Notesnook * Cryptomator * Veracrypt and LUKS encryption tools

night_driver: > 2FAS and KeePass look good, but to sync the database every time, I either have to enable some background activity for the required apps or perform some manual steps — I don’t want to go with either of these routes. 2FAS has the option to backup to iCloud and Google Drive (meaning it can be cloud based as well, told you that already in other thread). If you choose this cloud sync it works without the need to perform manual steps every time to sync the database. Please do not spread missinformation anymore.