1. Linux

1.1. Installation

1.2. Access KeePass database

sudo apt-get update
sudo apt-get install keepassxc

# Check DNS.
ping SMRU-SRV

# Fix DNS.
ip address
sudo smru setup systemd-ethernet enp0s3

# Check DNS.
ping SMRU-SRV

sudo smru setup share SMRU-SRV Teams$           # Add Teams$ (itadmin) share to /etc/fstab.
vdir /media/Teams

vdir "/media/Teams/IT/KeePass"
vdir "/media/Teams/IT/System/KeePass Keyfiles"

KEYFILE="/media/Teams/IT/System/KeePass Keyfiles/SMRU.key"
DBFILE="/media/Teams/IT/KeePass/SMRU.kdbx"
keepassxc-cli show --all --key-file "${KEYFILE}" --no-password --show-protected "${DBFILE}" "CrowdStrike - SMRU"

2. Windows

2.1. Installation

  • Run the KeePass-2.57.1-Setup.exe file with administrative privileges.

  • Select English.

  • Click OK.

  • Choose I accept the agreement.

  • Click Next.

    C:\Program Files\KeePass Password Safe 2

  • Click Next.

  • Select Full installation.

    Full installation

■ KeePass core files
■ User manual
■ Native support library
■ XSL stylesheets for KDBX XML files
■ Optimize KeePass performance
■ Optimize KeePass start-up performance

  • Click Next.

    ■ Associate KeePass with the .kdbx file extension

□ Create a desktop shortcut

  • Click Next.

  • Click Install.

  • Uncheck Launch KeePass.

  • Click Finish.

2.2. Configuration

  • Logon as <User>.

  • Start KeePass Password Safe.

  • Click Enable (recommended) to enable automatic update check.

  • Close KeePass Password Safe.

2.3. Installation of Portable Edition

  • Logon as <User>.

  • Start Windows Explorer.

  • Copy the T:\IT\Public\Apps\KeePass Professional folder to D:\Work folder.

  • Close Windows Explorer.

2.4. Configuration of Portable Edition

  • Logon as <User>.

  • Start Keepass Professional.

  • Optional: Click Cancel to skip opening a KeePass database file.

  • Optional: Click OK to skip opening a KeePass database file.

  • Select Tools > Options.

  • Select the Security tab.

  • Check Lock workspace after KeePass inactivity (seconds): 300.

  • Check Lock workspace after global user inactivity (seconds): 240.

  • Check Enter master key on secure desktop.

  • Optional: Select the Policy tab.

  • Optional: Select the Interface tab.

  • Optional: Select the Integration tab.

  • Select the Advanced tab.

  • Uncheck Limit to single instance.

  • Check Automatically save when closing/locking the database.

  • Click OK.

  • Select View > Configure Columns.

  • Check Tags.

  • Click OK.

  • Close Keepass Professional.

2.5. Access KeePass database

See Delta Windows Tools source code that uses PowerShell.

3. Usage

3.1. Basic

  • Start KeePass Password Safe.

  • Optional: Click Cancel to skip opening a KeePass database file.

  • Optional: Click OK to skip opening a KeePass database file.

  • Select File > New.

  • Select a Folder you want to save KeePass database to.

  • Type the name of KeePass database in File name: field.

  • Click Save.

  • Check Master password.

  • Type your master password in Master password: and Repeat password: field.

  • Click OK.

  • Click OK.

  • Do your thing.

  • Note: You can add/delete a group or an entry as you like.

  • Close KeePass Password Safe.

3.2. Time-Based One-Time Passwords

  • Start KeePass Password Safe.

  • Edit a password entry.

    • Optional: Double-click the title of a password entry.

    • Optional: Right-click a password entry and select Edit Entry.

  • Click Tools > OTP Generator Settings.

  • Select the Time-Based (TOTP) tab.

  • Type the secret in the Shared secret field.

  • Click OK.

  • Click OK to save the password entry.

  • Optional: Right-click the password entry and select Other Data > Copy Time-Based OTP (Ctrl+T).

  • Optional: Right-click the password entry and select Other Data > Show Time-Based OTP (Ctrl+Shift+T), finally click OK.

  • Select File > Save.

  • Close KeePass Password Safe.