weracard.blogg.se - Kdbx database

Go to File -> Database Settings -> Security and change Key Function to either Argon2d or Argon2id.I'm going to change to argon2, but I'd like to know which database version I was using after making the switch.įor anyone reading this in 2023, do the following to get the latest KDBX 4.1 database format: I don't know if by then KDBX 4 was enforced despite my encryption settings.įrom that same page, "Up to KDBX 3.1, the number of rounds for AES-KDF was stored in the header field with ID 6 (TransformRounds)", but I don't know how and if you can check that somehow. These don't necessarily enforce the change as of KeePass 2.35 and I don't know if any of my plugins save any data to the database:Īlso, the post in the link mentions KeepPass 2.35 which was released in and I migrated to KeePass in august of 2019 with KeePass 2.42 which was released in.

I'm using AES for encryption and AES-KDF.

A plugin requests to store custom data in an entry or a group.

A plugin requests to store custom header data in the KDBX file.

AES-KDF is not selected as key derivation function (KDBX 3.1 only supports AES-KDF any other key derivation function, like for instance Argon2, requires KDBX 4).

On this page you can see the conditions that force a migration to KDBX 4 (at least one must be met):

It's a bit messy without but ok for now.I've been reading that KDBX 4 is better than KDBX 3.1 and I've been looking for ways to determine what's the version of my database. Would be nice if KeePass2Android was able to display the Groups in their nested folder structure. It does open the kdbx file from the Syncthing folder as well (without using KeeShare). Thanks to this post I tested KeePass2Android and that does indeed unlock the kdbx file with the Yubikey Challenge-response secret, both with an NFC swipe and also by plugging the Yubikey into the device + touch. I would also prefer to be able to either plug my Yubikey into the Android device or use it via NFC to unlock the database.

I have found that KeePassDX on Android is then able to open that kdbx file from the Syncthing folder without requiring Yubikey authentication at all. You can set it to Sync and specify your Syncthing directory.

I am trying to do the exact same thing at the moment.Ī workaround might be the KeeShare Sync option that you can enable for a Group/Folder in KeepassXC.