KeePassXC Advanced Usage // 8 features you might have not heard about

This video shows advanced features of the password manager KeePassXC. Aron Molnar shows you what else you can do with this free and open source password manager.
Download KeePassXC from keepassxc.org/download/
The YubiKey I use: www.yubico.com/at/product/yub...
Subscribe to my newsletter at securityguide.me
Timestamps:
0:00 Intro
0:10 Leaked and weak passwords
1:12 Multi Factor Authentication/TOTP
4:30 Save entries as reference
5:39 Additional URLs
6:16 Next video: ransomware
6:30 Sharing passwords
9:06 Attachments
10:07 SSH integration
11:38 Protect password file with Yubikey
13:28 More features
13:50 Outro

[@securityguideme]

Do you know other useful features I did not mention? I am interested in hearing them.

[@sahinsarkar7293]

Two channel autotype obfuscation - although I don't know how to enable it in KeepassXC

[@MuhammadIrfan-32]

Is there any option in keePass to create multiple users and giving them limited access of passwords? Secondly is there any option to install it on the server side? and then we can share it with many users and give limited access to all of the users?

[@securityguideme]

@@MuhammadIrfan-32 I think Vaultwarden (as server) and Bitwarden (as client) is the better option for you in this case.

[@alexparakan]

@@securityguideme Yeah you also missed how to add multiple string fields options and adding additional attributes like (KPH: ). It took me so while to figure it out. Would be helpful for other new people if you add it to your KeePass updated videos.

[@rudypieplenbosch6752]

Pretty shocking when my database was analyzed, got rid of most problem cases. The keysharing and SSH key usage are great tips, thanks.

[@DoctorPingvin]

Great video, that attachment feature is the thing I was searching for. Thank you for such a useful content!

[@xila8861]

Wow, this was so detailed.

[@Mike_Malloy]

Thanks for the great tips. Recommend making smaller or eliminate the self view video frame at lower right corner while presenting.

[@laurentestreboou]

Amazing video and very easy to follow and understand, thanks a lot!

[@icantfindausernamehe]

SSH intergration with Remmina thanks to this tutorial. Excellent stuff thanks !

[@LordDevi]

Wonderful video. That sharing functionality is not as bad or difficult as I thought it might end up being. I wonder how that synchronization function actually works though. Sounds almost magical to me.

[@charli1984]

Video extremely useful for me. Thank you!

[@neusprach]

Thank you! Great video! I'm looking for a replacement for my online pw manager. Gonna try this one.

[@AnDiHawk]

Thank you so much for such useful manual!

[@gamingallday9225]

Amazing features. I recently started using it thanks to the new support for Windows hello. Thanks for the video!

[@securityguideme]

Thank you for the feedback!!

[@nazirnasir2714]

Amazing and very informative video. You need to make a video "how to backup Keepas from old computer and restore on new comupter" step by step. Keep up good work brother

[@TopTenPlatinum]

Thank you! Your video was really helpful.

[@tugrulserhat]

#2 is the most useful I think.

[@LionRoars918]

KeypassXC is great. Thanks for the video.

[@demerit5]

Great video. Thank you for the upload.

[@netcalibur]

nice one, Greggie. Thanks

[@wowforeal]

Best video on this topic

[@rfrancoi]

Great video Sir.

[@bouke3402]

Very good video. !! You deserve another sub

[@arturf7777]

wow great stuff. it was really helpul for me. thanks

[@XoloitzcuintIi]

Great video, very informative! Keep up the great work! Also, I am your 100th subscriber. :)

[@securityguideme]

Yeah cool, that's a great milestone for me! Thank you :-) I will publish some insights about my channel on the occasion of my 100th subscriber. Keep you updated :-)

[@securityguideme]

Here is some background information on my channel on the occasion of your subscription, which was the 100th 🙂Just in case you are interested 🙂securityguide.me/issues/insights-to-my-youtube-channel

[@junaidsyed5004]

Awesome video!

[@MamToCos]

Good job! Thanks 😀

[@alter_proxy]

Excellent video! You seem like a great dude! Definitely subscribed

[@securityguideme]

Many thanks :-)

[@emreybs2563]

I agree; did the same. Lovely and useful tips.

[@sandragomez3118]

i love it, thank you

[@ygtntxrf]

I love you, thanks a lot ❤❤❤

[@gattomark]

Good work!

[@gunnar4554]

Good video. Thanks.

[@merkury28]

Great video! Question: how to batch change entries on mac m1? I did not found keepassxc-cli for mac.

[@skyheart9245]

Good content brother

[@mixcocam]

What is the extension you are using for your browser? Great video by the way. I have been using XC for 5 years now and didn't know these features existed!

[@securityguideme]

Great, happy to hear this! Here are the official browser extentions. Chrome: chrome.google.com/webstore/detail/keepassxc-browser/oboonakemofpalcgghocfoadofidjkkk?hl=en Firefox: addons.mozilla.org/en-US/firefox/addon/keepassxc-browser/

[@inang1968]

Hi is there a way to automate the uodating of password in multiple entries? Is there also a way to change passwords for multiple entries at once? Thank you

[@renaldas72]

Great video, thanks!

[@securityguideme]

Glad you liked it!

[@toplaylists]

How to setup and save login and password to use with Auto-Type when you have multiple user's login for the same Website (Using single Database)?

[@sistemamarco]

Very useful video.

[@securityguideme]

Thanks a lot

[@yuritian8830]

Прекрасно! Благодарю!

[@vla2uv]

Since it doesn't have a direct correspondent for Android, I'll stick with the oldest Keepass manager!😢

[@stefanalecu9532]

Not even KeepassDX?

[@djohh3057]

Anybody know how to get KeypassXC to enter 2 numbers ( the position of which keeps changing each time you log in ) from 7 passcode numbers in between entering your username and password as most banking web sites like to use ?

[@Drugvigil]

What is difference of clone and adding additional urls?

[@cbbcbb6803]

Very good.

[@securityguideme]

Many thanks!

[@robobrain10000]

Can I log into KeePassXC using a fingerprint scanner or pin?

[@siviplay2436]

How do I ensure that when Windows starts it doesn't ask me for the database password? On iOS it is possible but on Windows I can't find how

[@Serpher1]

I did not know that KPXC has a Putty integration. That's a game changer.

[@chrisbitus1328]

Gotta make advance tutorials like how to keep Keepass safe (like using flatpak version which is sandboxed and protecting the in memory db by flushing it using Pandora bomb or similar. ).

[@sadarahurh8794]

How can I use backup key ? It seems this program allows only one key

[@sorrystateout]

Nice.

[@migue_cc]

Thanks for the video, was very usefull. Plis, Can you make a video of the best way to create a credit card entry for this password manager?

[@securityguideme]

You can step into the entry, go to "Advanced" and add a new custom attribute. You could also use the notes field to add your credit card information.

[@aaron6841]

Mine comes up with a red message when I try and import the share file?

[@Josiah_Harder]

This was great! Is keepassxc autofilling all those passwords from your local storage on your computer or from a cloud server?

[@Josiah_Harder]

Also is there a way I could use keepassxc on my computer but also have it synchronize with my phone? Because I will be doing most of my signing in and out on my phone

[@securityguideme]

Hi Josiah, Thanks for your feedback! You might want to have a look at my first KeePassXC video: kzbin.info/www/bejne/q4K4pXWlpL19a5Y Passwords are stored in a local file on your computer. There is no cloud server/service involved. The easiest option is to synchronize your file via Google Drive, OneDrive or Tresorit.

[@the-papaw]

Is there a way to auto save passwords from a website when creating a new account on that site? Or a plugin to do it?

[@securityguideme]

Yeah, you can do this with the KeePassXC browser plugin. You generate your random password using the password generator, enter it and if the browser plugin detects that this entry does not yet exist, it asks you to save the password. lh5.googleusercontent.com/QYk12Otc6aX90hxdAinH_QQru1y9-0qZoKNhBOKf-u8H97akXOOdpeOTq4ssS0ZRuPW_QILw3yAyL8B9MoYf=w10000-h10000

[@alandeacon5244]

I already use a password manager called Keepass is this program associated with it ?

[@moin6747]

is it possible to use webdav?

[@attentioncestpaslegal7847]

Ok but how do you share the Group password with your mummy? How do you keep track of it and synchronise it?

[@securityguideme]

You still have the problem of one initial password exchange. But then you can keep track of multiple passwords that can change over time. I recommend to verify your mummy's security number on signal and then send the password with disappearing messages.

[@obconoby7395]

Hello, is there a way to change the font and/or increase the size of the font in the keypasssxc database?

[@securityguideme]

Hello, Unfortunately, there is not a good solution. There is a closed ticket but not a "one size fits all" solution, strongly depending on your operating system. You might want to read through the ticket and review solutions: github.com/keepassxreboot/keepassxc/issues/621

[@obconoby7395]

@@securityguideme Thanks for your response. The small font of KeePassXC is a no-go for me.

[@securityguideme]

Obviously comments seem to disappear from my videos (but I got at least parts of some via mail): Hi. Don't know what happened to my comment - but it looks like it's not there. So I will try again ;-) Whats the difference between using "KeeShare" vs. a separate Database to share with others (family/friends)? Isn't it easier to create another Database and share it via OneDrive/iCloud,... ?

[@securityguideme]

And here's my answer (feel like being bipolar): Yeah, it's true, you can also just create another database. For some people it might be more convenient to have the shared passwords included in their "main" password manager file, especially if they share multiple passwords with multiple groups. It might be easier to have an overview about what is shared. But if you prefer creating a new database: That's perfectly valid too.

[@SecretMan299]

is it possible i can print all my password for back-up. thanks

[@securityguideme]

Yeah you can go to "Database" --> "Export" --> "HTML File" and then print it. Just make sure you store it in a secure place.

[@SecretMan299]

@@securityguideme thanks appreciate it very much...

[@abdusalam3ar]

Can I synchronize my database automatically with my ssh server?

[@securityguideme]

Don't think so, unfortunately

[@abdusalam3ar]

@@securityguideme Thanks for the quick reply

[@Tetex]

You can use sshfs to mount a section of your ssh server filesystem in your local machine and store your database there.

[@abdusalam3ar]

@@Tetex I did mount a ssh directory, but when I brows files using Keepassxc i doesn't recognize network directories

[@Tetex]

@@abdusalam3ar Really? I thought it would show in the path you mounted it. I can't test sshfs right now, but I know for a fact that it works with rclone mounts. Are you mounting it in your home directory and searching there using keepassxc? Create a folder in your home and mount the ssh file system there, it should work. Btw, maybe you are in Windows and that's why it isn't working for you but I'm 99% sure it works in Linux.

[@leoSaunders]

3:32 I'm confused. I thought keepassxc had no TOTP?

[@whenwasnow6062]

right click site, TOTP, Setup TOTP...

[@fisi]

Kommst du aus Österreich?

[@securityguideme]

Ja. Was hat mich verraten? Mein Akzent? :-)

[@fisi]

@@securityguideme ja 😂 macht dich sehr sympathisch. (Außerdem, dass "Anmelden" statt sign in dort steht)

[@b.c.2177]

Isn't it dangerous to check if the passwords were leaked?

[@Flightsimmovies]

i wonder this as well

[@UKsystems]

Generally not as the encryption standards used when checking are very high and if anyone really wanted to target you, they would have found another method

[@tdi0512]

ich habe mir mal das mit dem "Anhang" genauer angeschaut. Es funktioniert so wie du es erklärt hast aber es hat einen großen hacken! jedes mal wenn du die datei öffnest zb. word dokument wird eine kopie lokal im temp abgelegt. wenn du sie zumachst wird diese datei auch brav gelöscht. soweit so gut. wenn die datei aber offen bleibt und zwischendurch keepassXC in lock mode geht, dann bleibt die datei für immer im TEMP verzeichniss liegen. beim nächsten öffnen wird wieder eine kopie unter neuem namen abgelegt. BEi word/excel dateien mit heicklem inhalt ist das fast schon eine sicherheitslücke

[@securityguideme]

Gratuliere. Am besten dem Projekt melden: github.com/keepassxreboot/keepassxc/security

[@tdi0512]

@@securityguideme mal sehen ob ich es mir antun will. hab leider noch zwei drei andere recht dicke security probleme gefunden...die sagen wir es mal so...zumindest diskusionswürdig wären. Auch wenn ich keepassXC selber gerne nutze und das mein favorit ist, wirft das doch ein bischen ein mulmiges gefühl auf ob sonst noch sicherheitslücken gibt die noch schwerwiegender sind.

[@tdi0512]

@@securityguideme hi, ich hab das problem bei github gemeldet....es wurde als drastisch genug empfunden das es wohl in 2.8 gefixt wird!

[@Stray0]

Using KeePass as the 2FA app kind of defeats the purpose of multi-factor authentication.

[@gajowyify]

Not if you keep keepass database locally. You both have (db) and know (master pswd) which is the essence of 2fa.

[@Stray0]

@@gajowyify It's not about something you have, since you don't login using your database, you login using your password that's in the database. If you would remember all the passwords in the database, that'd be just as good, so the database is irrelevant as a factor for login. It's only there because most humans can't remember 100 random passwords. Also if someone were to gain access to this database, they'd have both the passwords and 2fa tokens.

[@disarrayer]

You are absolutely right! At least two different DBs with different passwords should be used if one wants to do that. But two factors should always be separated.

[@tdkpaul]

Yes and no. It still protects you from a password leak. If one has access to you keepass then of course you have a problem anyway. 2FA or not

[@koolaids6609]

Mommy? Im sorry. Mommy? Im sorry. Mommy? Im sorry. Mommy? Great video tho thnx for the tutorials

[@lordolorin2891]

Hi. I love the channel. I am beginning to hate KeePass though:( My frustration with it is in the fact that exporting KeePass passwords to chrome or Firefox is impossible for me. I have tried multiple ways of generating the CSV or HTML files. Neither chrome or Firefox can read the files keepass creates. Such a shit show :(

[@MikeHunt-rw4gf]

Algorithm.

[@fvheel]

This is why i don't use it. You need a class only to use passwords. Rediculous. What if i travel to a different country? How do i access my passwords?

[@cryptotrader.university]

It be great if you can make a video showing how to setup multi yubico keys