** Mark Rogers mark@more-solutions.co.uk [2017-06-12 21:48]:

On 12 June 2017 at 11:57, samwise samwise@bagshot-row.org wrote:

...

KeePass is a lot more powerful than first appears!

I've played with Keepass in the (distant) past but not recently, and it's looking like I should take another look.

I currently use LastPass (cue cries of horror...) because its Android client generally works pretty well at auto-filling apps (including but not limited to browser). A quick Google shows that there are KeyPass clients for Android (and more than one to choose from!) but a quick glance suggests that while they may give access to the passwords it wasn't clear that auto-fill would be there.

(KeePassDroid doesn't seem to have much in the way of feature documentation, but reading the documentation on Keepass2Android, which looks pretty well specified, it allows switching to a Keepass keyboard to auto-enter passwords but that doesn't sound as seamless as LastPass.)

What do others use for synchronising their Keepass data securely between machines (including mobiles)? Is it possible to share certain sets of data between users?

** end quote [Mark Rogers]

I find Keepass does me quite nicely. On Android I use Keepass2Android for preference, and to fill in the user/password fields I switch to the Keepass2Android keyboard (unlocking the database as necessary - it has a feature where once unlocked you only need the last 3 characters to re-unlock it during a session). The keyboard has two keys on it that provide the user or password, respectively, for the currently open entry in the Keepass database.

For sync'ing the database you can use Dropbox, although I'm planning to migrate to Nextcloud once I have my setup sorted. Keepass2Android asks for permission to save to Dropbox, and you can just give access to an app directory rather than full access to everything, so there's no need for the Dropbox client to be installed. With the file in a suitable Dropbox directory desktop and mobile can work with the same database and merge changes as necessary.

On Windows (when I'm actually using it) I use the Keepass2 client, and up until recently I've used the same on Linux running under Mono. That works quite nicely, but I've been playing with KeepassXC recently - with mixed results. Some features I prefer (managing permission to fill in forms on a per site basis, and only filling in when you ask it to), but I'm having a few issues getting it to match the password to the website where it seems to regularly fall back to a single entry. I may need to tidy up my database as some of the URLs that are automatically saved are a bit long and likely specific down to a session in some cases - Keepass2 under Mono handles this better, but then it did create most of the entrie!

Hi, Mark.

I use KeePassDroid on Android and my current approach for pasting in passwords is admittedly fairly cumbersome. Load that app, copy the password to the clipboard, switch to the target webpage / app and paste it in.

However, using my smartphone, it's not very often I have to paste the passwords in. Once you've done it once, it is usually remembered by most Android apps. If I was going to setup an SSH connection from my phone, I'd use something like JuiceSSH with keys so that I wouldn't need to bother with passwords regularly.

So it's only really logging into websites via the browser - and I don't tend to do that too often, as most web services I'd want to log into have apps or use cookies to keep me logged in.

That said, if you want auto-fill in a browser on a PC, I have used the KeeFox [http://keefox.org/] browser plugin in the past with some success to auto-login to websites. Maintaining the entries in the keepass database to keep this working can be a bit tedious though, so I'm not sure it's worth the effort. It's about to be completely re-written to match Mozilla's new vision of API for plugins.

Peter.

On 12 June 2017 at 17:07, Mark Rogers mark@more-solutions.co.uk wrote:

On 12 June 2017 at 11:57, samwise samwise@bagshot-row.org wrote:

...

KeePass is a lot more powerful than first appears!

I've played with Keepass in the (distant) past but not recently, and it's looking like I should take another look.

I currently use LastPass (cue cries of horror...) because its Android client generally works pretty well at auto-filling apps (including but not limited to browser). A quick Google shows that there are KeyPass clients for Android (and more than one to choose from!) but a quick glance suggests that while they may give access to the passwords it wasn't clear that auto-fill would be there.

(KeePassDroid doesn't seem to have much in the way of feature documentation, but reading the documentation on Keepass2Android, which looks pretty well specified, it allows switching to a Keepass keyboard to auto-enter passwords but that doesn't sound as seamless as LastPass.)

What do others use for synchronising their Keepass data securely between machines (including mobiles)? Is it possible to share certain sets of data between users?

Mark

-- Mark Rogers // More Solutions Ltd (Peterborough Office) // 0844 251 1450 Registered in England (0456 0902) 21 Drakes Mews, Milton Keynes, MK8 0ER

---

main@lists.alug.org.uk http://www.alug.org.uk/ https://lists.alug.org.uk/mailman/listinfo/main Unsubscribe? See message headers or the web site above!