keepassx

<<TableOfContents: execution failed [list index out of range] (see also the log)>>

Features

Different passwords for different accounts.
MFA for modern accounts/services- this becomes so easy, use it wherever it is possible.
No single device dependency. Your passwords are where you are.
Splitted security levels (multiple vaults).
Awesome browser integration.
Sharing credentials (multiple vaults, shared via cloud storage). E.g. a) team: sharing credentials, b) family: shared WLAN password, children school accounts.

KeePassXC is a tool to store and manage passwords. Apps are freely available for

Mobile Integration:

We have tested KeePassXC on mobile devices only very roughly.
The integration is not as good ('simple to use') as on the desktop app or in the browser.
Never the less: most persons see's it as an advantage to have the personal vault on their mobile device accessible.

KeePassXC create/open/edit/save password-vaults in a single file.
A password-vault is basically an encrypted file, where you can store your various usernames/passwords/URLs and also attachments like pictures or other important / private documents.
A password-vault can only be opened if you know the Master-Password. The Master Password is the key to all your stored passwords.
If you forgot your Master-Password, you cannot access your stored passwords anymore.
Encryption -- either the Advanced Encryption Standard (AES) or the Twofish algorithm are used for encryption of the vault in 256 bit sized increments
All features: http://www.keepassx.org/features/

Click on "File" --> "New Database..."
You will be prompted to set a master key. Input your master password (the master password for all your other stored passwords). Then click "OK"
Repeat your master password. click "OK".
Chose a group. (Standard choices are Internet of eMail. You can also create your own groups).
Click on "Entries" --> "Add New Entry..."
Input the information you need
- Title: a short description of the entry
- Username: your username
- URL: on what homepage do you need the password
- Password: your password
- Repeat: repeat your password
- Comment: a longer description of the entry
Click on "File" --> "Save Database"
Chose a location and a name for your password database. click "OK"

Only use a cloud service if you need to sync your passwords across several devices! (Recommendation: yes, use a cloud service)
Decide on your own:
- Pro 'cloud':
  - all of your confidental data on all devices.
  - implicit backups (data on multiple devices, and also in the cloud).
- Contra 'cloud':
  - all of your confidental data on all devices - higher chance that your (encrypted) vaults are accessible to others.
  - If your cloud access is compromised or the cloud service provider is compromised: the thief owns the (enrypted) vault.
US based cloud provider like Google Drive, Dropbox, Apple iDrive, Microsoft OneDrive:
- Those services are very attractive to hackers.
- The NSA has the right to get all data from US companies. After Snowden it's for sure, the NSA is not friendly.
- Rule of thumb: Don't use US hosted / company based services for confidential data.
Local cloud storage provider:
- https://drive.switch.ch - Switch Eduction cloud service - switchdrive
- https://drive.math.uzh.ch - I-MATH
How to:
- On all devices where you like to sync your KeePassXC Vault file, install and configure drive.math.uzh.ch
- Open the KeePassXC vault file on all of your devices directly from the cloud folder.
Automatic merge of vault: Even if KeePassXC has a vault opened, changes on a different device (e.g. phone) and sync via cloud, becomes immediately active.
- If you work in a team: no change, everyone can open the local copy - changes will be merged.