

Keeweb android password#
Below are a summary of some of the top scoring ones we’ve reviewed.īitwarden is one of the best password management services around, with fully functional free tiers for both private individuals and small organisations of up to two people. Still not sure which to get? Thankfully there are plenty of good choices. Browser plugins to enter and save passwords.

Auto-type for paste- and autofill-resistant scenarios.Support for hardware 2FA such as YubiKey dongles.Desktop application for easy use outside the browser.Choose where to host your password database.
Keeweb android generator#
Keeweb android Pc#
Cross-platform, multi-device access – if you need them,your passwords should be as easy to get at on your phone as on your desktop PC.I will let you know when I have something to show. There are at least 3 promising node.js packages which interface with smartcards and support crypto operations in hardware and some have examples for encryption/decryption with smartcards. Except on Linux, macOS and mobile devices.Īnyway, after some more research and spec-writing it looks like the easiest path to POC is building desktop version first. I have been using the multicert provider for a few years and it works great. With public/private keys you just remove keys encrypted to team members public key from kmx file and nothing changes for other team members. If your password is shared among team members and one leaves, all other team members need to memorize new password.You will most likely discover that you have lost the smartcard/device and can take action (revoke access/change passwords in kdbx). With public/private keys you need to lose password and smartcard (or mobile device). if your password leaks (shoulder-surfing, keylogger, etc) and attacker has access to kdbx file, all your secrets in kdbx are lost.I believe all the required functionality is doable in javascript/browser using WebCrypto: The Key Manager functionality is described here: This plugin would need a companion Key Manager for adding and removing the public keys used to decrypt the Keepass key. Keepass Key Provider plugin developer documentation:

Multiple certificate support will allow desktop and mobile scenarios and provide backup in case the smartcard or phone is lost. This plugin would allow using smartcard (eq Yubikey PIV/OpenPGP) and/or Android/iOS keystore client certificates for decrypting key which will unlock Keepass keystore. I propose porting Keepass Multi Cert KeyProvider plugin to Keeweb.
