Collaborate Disseminate
I’m running Arch Linux and I need a convenient way to populate website logins using Firefox 57+ (which uses web extensions and thus closes some security holes found in prior versions). To keep the question simple, assume my o… Continue reading How secure is Kee 2.0 (Firefox 57 addon) with keepass-plugin-rpc compared to LastPass?
I downloaded the KeepassXC .AppImage file and was verifying it using first the .DIGEST file and then .sig file. While I was verifying the download using the .sig file I noticed something strange as I did not get the same resu… Continue reading KeepassXC gpg verification with sig file
I downloaded the KeepassXC .AppImage file and was verifying it using first the .DIGEST file and then .sig file. While I was verifying the download using the .sig file I noticed something strange as I did not get the same results at they di… Continue reading KeepassXC gpg verification with sig file
KeePass just introduced the concept of an emergency sheet that can be shared with trusted users. This question might go beyond the scope of this site, but suppose you printed one of these sheets, how would you store it?
I found this IS p… Continue reading Security for KeePass Emergencey Sheet
Background
In the article How to Hack KeePass, the author used keepass2john on a KeePass database to extract a hash of its master password.
For the database CrackThis.kdb the extracted hash was (line breaks added by me)
$k… Continue reading Why do KeePass dabases contain a hash of their master password?
I’ve read KeePass kinda sorta tries as much as is possible to limit keyloggers (at least on PC).
But since you type in your master database password on many devices many times, there’s a huge chance that someone can at one … Continue reading Why doesn’t KeePass use two factor / one time password generation to protect the database?
Can a malware that infected your local computer compromise a KeePass database stored locally in any way?
If yes, what’s the point for KeePass to have such strong security mechanisms if it cannot resist to this scenario? If y… Continue reading KeePass security local malware
KeePass is great, I love it but after several years using it, sometimes I wish to install a plugin but I don’t because I’m scared of what this plugin can really do without my consent.
The documentation about plugin development is really s… Continue reading How trustful are KeePass plugins?
On official site they (Trezor) emphasize that you should never store your recovery seed digitally. But this seems to me absolutely strange. First of all we live in 21st century. And paper (or even steel) backup is easy to los… Continue reading Safe way to backup Bitcoin hardware wallet
There are many posts online debating the merits of “master password” or “deterministic, site-specific” password generation tools.
The general idea is that a function hash(“my_master_password”, “facebook.com”) could determini… Continue reading Is there a password manager that combines a "master password" solution with a keystore solution?