#Keepassxc totp secrets password#
#Keepassxc totp secrets crack#

But, for me personally, the inconvenience of it is not worth the additional security.

If you're worried about either of those threats, then a separate TOTP device is absolutely vital. But I use syncthing to directly share my DB between devices, so I'm not particularly worried about that.

#Keepassxc totp secrets password#

Now, if you store your password database on someone else's cloud, that could become more of a concern, as a mass breach and bulk collection of databases becomes a possible attack vector.

#Keepassxc totp secrets crack#

What I'm not especially worried about is specific targeted attacks where the attacker is attempting to acquire my database and crack it. TOTP even if it's in the same database solves for #2 since simply scraping the password isn't enough to gain access.Īnd #3 isn't addressed at all, even if you use a separate device for TOTP. Using a password database allows me to use different passwords for every site, which defeats #1. Technically no, but whether or not that is a problem depends on the threats you're worried about. If you keep 2FA codes on the same file as your password then it isn't 2 Factor anymore, right? However, I keep 2FA TOTP codes on my Pebble watch only. I often use the notes to store things like github tokens (for git), etc. > The UI makes it much easier to copy and paste fields and the notes are clearly visible. Some sites will login with different URL's and KeepassXC will not recognize all.~~īut I am still a fan. ~~You can't have multiple addresses per entry. As varjolintu explains bellow, this is wrong. Chrome's add-in is the hardest to get working.

Sometimes you need to reload the page, reopen the db. * The browser add-ins are not always smooth and friction-less. Touch ID is one of those things that suddenly you discover you can't live without. * It took me a while to understand how does the Touch ID/fingertip reader works (you need to turn on the checkbox, press Ok on the authentication modal and then touch the reader). * The UI makes it much easier to copy and paste fields and the notes are clearly visible. Is tricky to get it working but once you get it you'll become addicted. Make your own cloud with a RaspberryPi referred by a DDNS and you'll have super powers. * Runs on Linux/Mac/Windows and there are compatible clients for Android.