I use Keepass to manage my password, and it's synced using Dropbox on home computer (Windows 7), work computer (Ubuntu) and my Android phone.

Currently, I'm only using a master password for securing it, but I'd much rather use my Windows User Account at home, so I wouldn't have to type in a long password every day. On the other hand, if I switch to using my WUA for securing it, then I wouldn't be able to access it from my phone or my work computer.

Is there any way I can set my keepass database to accept, but not require, both methods for unlocking? This way I could just use my WUA at home, and just use my master password everywhere else.

link|improve this question

feedback

2 Answers

The easiest method (if you don't change passwords much, which if you use Keepass you probably do) is to duplicate the database using the 2.x version.

There isn't too much of another way. If you actually look at what's going on with the encryption, you'll see that if it encrypts the whole thing with one key, it can't decrypt it with another because that's the very point of encryption.

If you tried to use more than one key, in any way, it would be reduced to verifying the key and then using a stored key unlock the database, which is quite insecure.

Even if the program stored two copies with two different encryption keys in the same file, that both makes it easier to brute-force since getting one key makes it easy to find the other key, and clumsy because every time you edit the passwords you have to have the other key.

Tl;dr: having multiple keys possible but with only one needed is almost mathematically impossible.

One other solution you have is to get a shorter password. Reading this article, concerning AES (which is what Keepass uses), a password as simple as fluffy is puffy would take maybe 39 miillion years to crack even though those words are very simple.

By comparison then, Keepass hashes the password 6,000 times by default (and if you set it to 2 million it would still barely break a sweat) which makes any sort of mathematical trickery useless. You can use the pronouncable and lower+upper+num settings on passwd.me to generate a password that's easy to learn and remember but hard to brute force or guess, like tahter.3usandu. Heck, you might even end up learning Japanese :-).

link|improve this answer
feedback

You can put your password into a text file on your home PC (make sure your text editor does not add newline characters), then give it to KeePass as the keyfile. (You could encrypt the keyfile with Windows' EFS.)

Now you can use the keyfile at home, and type the password manually elsewhere.

link|improve this answer
Hey, that actually works. =) – Bruce Connor Feb 2 '11 at 15:19
feedback

Your Answer

 
or
required, but never shown

Not the answer you're looking for? Browse other questions tagged or ask your own question.