Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

KeePassXC 2.2.0 released with YubiKey and TOTP support

keepassxc.org

Post reply on HN
Print view View original

31–40 of 132 posts

Re: KeePassXC 2.2.0 released with YubiKey and TOTP support

#31

Post by desdiv »

TokenDiversity wrote: post #24

As someone using Keepass2 (mono on Linux), can someone knowledgeable briefly tell me (and probably others) why should and why should not I switch to KeePassX? I'm getting the feeling that this uses the older protocol? I got a good answer to the above question from desdiv so I'm adding an edit: Is there a reason to use this (and not use this) in place of KeePass2 on Windows?

1. Unlocking the database takes much longer than it should. Linux Keepass2 is much slower at unlocking than Windows Keepass2 on the same machine.

2. On Linux, after entering the password the windows disappears, giving no UI feedback during the lengthy unlocking process. When you type the password wrong, it takes even longer for some reason, and there's no tray icon when you type the password wrong, so you'd have to minimize all your windows to find the dialog box all the way in the back.

3. Lacking Unicode support in 2017 is simply unacceptable: https://i.imgur.com/X0T46bY.png

None of this is the fault of the Keepass developers, since all three problems are absent in the Windows build. As far as I can tell the problem lies with Mono.

Re: KeePassXC 2.2.0 released with YubiKey and TOTP support

#32

Post by scott_karana »

underlines wrote: post #25
woodsier wrote: post #21

Earlier quoted context omitted.

Decent mobile support is the only thing holding me back from switching. The current 3rd party options are underwhelming.

I just wait for Android O Autofill Framework to arrive. Then mobile password managers will finally be useful.

Really?... The syncing and conflict resolution (or lack thereof) is the true problem for me.

Re: KeePassXC 2.2.0 released with YubiKey and TOTP support

#33

Post by nerflad »

mynegation wrote: post #15
atomlib wrote: post #14

I see it supports Linux, Windows, and macOS, but are there any Android and iOS apps to open and modifty KeePassXC databases?

If you feel like keeping your kdbx file in Dropbox you may use ikeepass[1] on iOS to load and modify it. For Android there is keepassdroid [2] [1] https://itunes.apple.com/us/app/ikeepass/id299697688?mt=8 [2] http://www.keepassdroid.com/

I have had a good experience with Keepass2Android. It has support for databases on Google Drive.

Re: KeePassXC 2.2.0 released with YubiKey and TOTP support

#34

Post by tedd4u »

FT_intern wrote: post #29

Has anyone thought of a good redundancy scheme for yubikey? Physical object authentication is great except physical objects are less durable than brain memory (or at least, if my brain memory is gone then I probably would have no use for the password anyway).

Keep 1 key on your keychain, one in a fire vault in the house, and one in the safety-deposit box at the local branch bank office. Most U2F-enabled sites let you register multiple keys. Add new sites with keychain during the day, in the evening add the fire-vault key at home. Once a quarter add the third key from the safety-deposit box.

Re: KeePassXC 2.2.0 released with YubiKey and TOTP support

#35

Post by simcop2387 »

atomlib wrote: post #14

I see it supports Linux, Windows, and macOS, but are there any Android and iOS apps to open and modifty KeePassXC databases?

For standard keepass I use keepass2android and nextcloud for syncing. That said I don't believe it supports any of the fun new stuff from KeepassXC. It does work with NFC and HOTP though. I'd love to use TOTP instead.

Re: KeePassXC 2.2.0 released with YubiKey and TOTP support

#36

Post by watersb »

FT_intern wrote: post #29

Has anyone thought of a good redundancy scheme for yubikey? Physical object authentication is great except physical objects are less durable than brain memory (or at least, if my brain memory is gone then I probably would have no use for the password anyway).

I am playing with YubiKey storing certificates, then using the certificates like any other GPG setup, so I can have redundancy and revocation. But I have yet to make it dead simple enough to use for real-world application.

Or maybe I am just procrastinating.

Re: KeePassXC 2.2.0 released with YubiKey and TOTP support

#37

Post by TokenDiversity »

desdiv wrote: post #31
TokenDiversity wrote: post #24

As someone using Keepass2 (mono on Linux), can someone knowledgeable briefly tell me (and probably others) why should and why should not I switch to KeePassX? I'm getting the feeling that this uses the older protocol? I got a good answer to the above question from desdiv so I'm adding an edit: Is there a reason to use this (and not use this) in place of KeePass2 on Windows?

1. Unlocking the database takes much longer than it should. Linux Keepass2 is much slower at unlocking than Windows Keepass2 on the same machine. 2. On Linux, after entering the password the windows disappears, giving no UI feedback during the lengthy unlocking process. When you type the password wrong, it takes even longer for some reason, and there's no tray icon when you type the password wrong, so you'd have to m…

Yeah I just downloaded. This seems like a good native drop-in replacement. Even the menus et all seem to be in the same place.

And Unicode works, yeah!

I have a really old computer and keepass2 opens stuff instantly so I'm guessing I'm probably not using good enough security.

Re: KeePassXC 2.2.0 released with YubiKey and TOTP support

#38

Post by davchana »

tedd4u wrote: post #34
FT_intern wrote: post #29

Has anyone thought of a good redundancy scheme for yubikey? Physical object authentication is great except physical objects are less durable than brain memory (or at least, if my brain memory is gone then I probably would have no use for the password anyway).

Keep 1 key on your keychain, one in a fire vault in the house, and one in the safety-deposit box at the local branch bank office. Most U2F-enabled sites let you register multiple keys. Add new sites with keychain during the day, in the evening add the fire-vault key at home. Once a quarter add the third key from the safety-deposit box.

Why specifically during day/evening/quarter? Why not all three at same time? Just asking. Thanks..

Re: KeePassXC 2.2.0 released with YubiKey and TOTP support

#40

Post by sowbug »

This is really cool. Here are more feature requests (and for all I know they're already there):

* Optionally display a secret as a QR code

* Generate and validate BIP39-compatible seeds (like Diceware but with a checksum. Many Bitcoin wallets these days accept them)

* Get this into Tails

Post reply on HN