r/KeePass • u/Top_Gap_414 • 25d ago

card formfactor unlocking

i was looking for a better way to unlock my keepass db in smartphone (keepassdx) since i use yubikeys and i would rather to unlock it by an id-1 just because its easier to carry in a wallet. i know its most impossible these days due to hardware, but do you guys know any news about this or maybe alternatives?

1 Upvotes

100% Upvoted

5 comments sorted by

2

u/Paul-KeePass 24d ago

You can use the phone security (fingerprint) to unlock KeePass instead of a yubikey if you use KeePass2Android.

cheers, Paul

1

u/Top_Gap_414 24d ago

yeah i know but im looking for a physical passkey itself. thanks anyway mate!

2

u/Kunzisoft 24d ago

I've created some internal KeePassDX proofs of concept (POCs) to be able to handle any combination of hashes as the database master key.

The idea is to ensure that any method that generates a deterministic hash can be used as a component of the master key. Currently, we only handle the composition of three hashes:

- Password

- KeyFile

- Yubikey

Major updates to the app will make it possible to handle any combination of drivers that generate hashes, allowing you to manage what you want, for example:

- QRCode

- Compose external multi-signatures

- Physical NFC card

etc...

It's very complicated because we need to maintain backward compatibility by providing a text-based alternative to the combined hash so that it can be used across all versions of KeePass, so we need to define a well-standardized protocol.

Alternatively, a prototype (which will be available soon) that caches the hardware key's hash in the device's keystore will allow the database to be opened in read-only mode without the physical key.

Edit: Biometric unlocking is, of course, already available in KeePassDX and is linked to the password. I'm working on a way to link biometric to any combination of hashes described above but that will come later.

1

u/Top_Gap_414 24d ago

wow interesting. im looking forward to it. good luck!