wiki/src/doc/encryption_and_privacy/manage_passwords.mdwn

   1 [[!meta title="Manage passwords with KeePassX"]]
   2
   3 Using the [<span class="application">KeePassX</span>](https://www.keepassx.org/)
   4 password manager you can:
   5
   6   - Store many passwords in an encrypted database which is protected by
   7     a single passphrase of your choice.
   8   - Always use different and stronger passwords, since you only have to
   9     remember a single passphrase to unlock the entire database.
  10   - Generate very strong random passwords.
  11
  12 [[!toc]]
  13
  14 <a id="create"></a>
  15
  16 Create and save a password database
  17 ===================================
  18
  19 Follow these steps to create a new password database and save it in the
  20 persistent volume for use in future working sessions.
  21
  22 To learn how to create and configure the persistent volume, read the
  23 [[documentation on persistence|first_steps/persistence]].
  24
  25 0. When starting Tails, [[enable the persistent volume|first_steps/persistence/use]].
  26
  27 0. In the [[<span class="application">Persistent Volume
  28    Assistant</span>|first_steps/persistence/configure]], verify that the
  29    [[<span class="guilabel">Personal Data</span>
  30    persistence feature|doc/first_steps/persistence/configure#personal_data]] is activated. If it is deactivated, activate it, restart Tails,
  31    and [[enable the persistent volume|first_steps/persistence/use]].
  32
  33 0. To start <span class="application">KeePassX</span>, choose
  34    <span class="menuchoice">
  35    <span class="guimenu">Applications</span>&nbsp;▸
  36    <span class="guisubmenu">Accessories</span>&nbsp;▸
  37    <span class="guimenuitem">KeePassX</span></span>.
  38
  39 0. To create a new password database, choose <span class="menuchoice">
  40      <span class="guimenu">File</span>&nbsp;▸
  41      <span class="guimenuitem">New Database&hellip;</span></span>
  42
  43 0. The password database is encrypted and protected by
  44    a passphrase.
  45    * Specify a passphrase of your choice in the <span
  46      class="guilabel">Password</span> text box, then click <span
  47      class="guilabel">OK</span>.
  48    * Type the same passphrase again in the next dialog, then click
  49      <span class="guilabel">OK</span>.
  50
  51 0. To store the password database in the persistent volume for use in
  52    future working sessions:
  53    * Choose <span class="menuchoice">
  54      <span class="guimenu">File</span>&nbsp;▸
  55      <span class="guimenuitem">Save Database</span></span>.
  56    * Enter `keepassx` in the <span class="guilabel">Name</span> text box.
  57    * Select `Persistent` in the list of folders in the left pane.
  58    * Click <span class="guilabel">Save</span>.
  59
  60 <a id="restore"></a>
  61
  62 Restore and unlock the password database
  63 ========================================
  64
  65 Follow these steps to unlock the password database saved in the
  66 persistent volume from a previous working session.
  67
  68 0. When starting Tails, [[enable the persistent volume|first_steps/persistence/use]].
  69
  70 0. To start <span class="application">KeePassX</span>, choose
  71    <span class="menuchoice">
  72    <span class="guimenu">Applications</span>&nbsp;▸
  73    <span class="guisubmenu">Accessories</span>&nbsp;▸
  74    <span class="guimenuitem">KeePassX</span></span>.
  75
  76 0. If a password database is found in the persistent volume, a dialog
  77    appears and asks for the passphrase to unlock that password database.
  78    Enter the passphrase and click <span class="guilabel">OK</span>.
  79
  80 0. If you enter an invalid passphrase the following error message
  81    appears:
  82
  83    <span class="guilabel">The following error occured while opening the
  84    database:<br/>
  85    Hash test failed.<br/>
  86    The key is wrong or the file is damaged.</span>
  87
  88    Then click <span class="guilabel">OK</span> and try again.
  89
  90 <a id="user_guide"></a>
  91
  92 <span class="application">KeePassX</span> user guide
  93 ====================================================
  94
  95 To read the official <span class="application">KeePassX</span> user
  96 guide, choose
  97 <span class="menuchoice">
  98 <span class="guimenu">Help</span>&nbsp;▸
  99 <span class="guimenuitem">KeePassX Handbook…</span></span>.
 100
 101 Use <span class="application">KeePassX</span> to type a password into <span class="application">Pinentry</span>
 102 ===============================================================================================================
 103
 104 When using <span class="application">OpenPGP</span> with <span
 105 class="application">Claws Mail</span> or <span class="application">OpenPGP
 106 Applet</span> for example, you need to enter a password in a <span
 107 class="application">Pinentry</span> dialog box. But you cannot copy and
 108 paste into it. This is a security feature of <span
 109 class="application">Pinentry</span> based on the fact that otherwise the
 110 data in the clipboard could be accessed by another application against
 111 your will.
 112
 113 Use the <span class="guilabel">AutoType</span> feature of <span
 114 class="application">KeePassX</span> to type a password into a <span
 115 class="application">Pinentry</span> dialog box.
 116
 117 0. Before the <span class="application">Pinentry</span> dialog box
 118 appears, [[open <span class="application">KeePassX</span> and unlock the
 119 database|manage_passwords#restore]].
 120
 121 0. Use <span class="application">OpenPGP</span> with <span
 122 class="application">Claws Mail</span> or <span class="application">OpenPGP
 123 Applet</span> until the <span class="application">Pinentry</span> dialog
 124 box appears.
 125
 126 0. Click on the <span class="application">KeePassX</span> logo in the
 127 notification area to switch to <span class="application">KeePassX</span>.
 128 Right-click on the entry from which you want to
 129 use the password, and choose <span class="guilabel">Perform
 130 AutoType</span>.
 131
 132 <div class="note">
 133
 134 Do not enter a user name in the <span
 135 class="application">KeePassX</span> entry, otherwise <span
 136 class="application">KeePassX</span> will type it together with the
 137 password in the <span class="application">Pinentry</span> dialog box,
 138 and the resulting password will be incorrect.
 139
 140 </div>