{"id":5968,"date":"2023-12-14T22:06:03","date_gmt":"2023-12-14T20:06:03","guid":{"rendered":"https:\/\/www.sigalou-domotique.fr\/?p=5968"},"modified":"2026-01-02T16:56:44","modified_gmt":"2026-01-02T14:56:44","slug":"je-mets-en-place-un-gestionnaire-de-mot-de-passe","status":"publish","type":"post","link":"https:\/\/www.sigalou-domotique.fr\/en\/je-mets-en-place-un-gestionnaire-de-mot-de-passe","title":{"rendered":"I set up my password manager on all my computers and smartphone"},"content":{"rendered":"<p><em>Edit: Attention, a different solution has been written since the writing of this page, but the information here remains valid:<\/em><\/p>\r\n<ul>\r\n<li><a href=\"https:\/\/www.sigalou-domotique.fr\/en\/jinstalle-vaultwarden-bitwarden-sur-mon-nas-synology\/\" target=\"_blank\" rel=\"noopener\">I install Vaultwarden (Bitwarden) on my Synology NAS<\/a><\/li>\r\n<\/ul>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\"><\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\"><strong>I chose KeepassXC + Keepass2Android with Yubikey authentication<\/strong><\/p>\r\n\r\n\r\n\r\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_88 counter-hierarchy ez-toc-counter ez-toc-light-blue ez-toc-container-direction\">\n<label for=\"ez-toc-cssicon-toggle-item-6aae57bf34915\" class=\"ez-toc-cssicon-toggle-label\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewbox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewbox=\"0 0 24 24\" version=\"1.2\" baseprofile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/label><input type=\"checkbox\"  id=\"ez-toc-cssicon-toggle-item-6aae57bf34915\"  aria-label=\"Toggle\" \/><nav><ul class='ez-toc-list ez-toc-list-level-1' ><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/www.sigalou-domotique.fr\/en\/je-mets-en-place-un-gestionnaire-de-mot-de-passe\/#Mon_cahier_des_charges\" >My specifications<\/a><ul class='ez-toc-list-level-4' ><li class='ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/www.sigalou-domotique.fr\/en\/je-mets-en-place-un-gestionnaire-de-mot-de-passe\/#Avenant_a_mon_cahier_des_charges\" >Addendum to my specifications<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/www.sigalou-domotique.fr\/en\/je-mets-en-place-un-gestionnaire-de-mot-de-passe\/#Fonctionnement_de_lenregistrement_des_mots_de_passe_dans_la_base_au_format_Keypass\" >How to save passwords in the database in Keypass format<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/www.sigalou-domotique.fr\/en\/je-mets-en-place-un-gestionnaire-de-mot-de-passe\/#Mon_choix_de_la_declinaison_KeePass_pour_les_ordinateurs_fixe_ou_portable_sous_Windows_KeePassXC\" >My choice of KeePass for Windows desktop and laptop computers: KeePassXC<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/www.sigalou-domotique.fr\/en\/je-mets-en-place-un-gestionnaire-de-mot-de-passe\/#Mon_choix_de_la_declinaison_Keypass_pour_les_Android_Keepass2Android\" >My choice of Keypass for Android: Keepass2Android<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/www.sigalou-domotique.fr\/en\/je-mets-en-place-un-gestionnaire-de-mot-de-passe\/#Mon_choix_dun_cloud_dedie_au_seul_fichier_de_donnees_kDrive\" >My choice of a cloud dedicated to the single data file: kDrive<\/a><ul class='ez-toc-list-level-4' ><li class='ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/www.sigalou-domotique.fr\/en\/je-mets-en-place-un-gestionnaire-de-mot-de-passe\/#Sur_les_ordinateurs\" >On computers<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/www.sigalou-domotique.fr\/en\/je-mets-en-place-un-gestionnaire-de-mot-de-passe\/#Sur_les_SmartPhones\" >On SmartPhones<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/www.sigalou-domotique.fr\/en\/je-mets-en-place-un-gestionnaire-de-mot-de-passe\/#Mon_choix_de_cle_de_securite_physique_Yubikey\" >My choice of physical security key: Yubikey<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-10\" href=\"https:\/\/www.sigalou-domotique.fr\/en\/je-mets-en-place-un-gestionnaire-de-mot-de-passe\/#Jinterconnecte_lensemble_des_equipements_via_le_cloud\" >I interconnect all equipment via the cloud<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-11\" href=\"https:\/\/www.sigalou-domotique.fr\/en\/je-mets-en-place-un-gestionnaire-de-mot-de-passe\/#Je_mets_en_oeuvre_de_cette_solution_etape_par_etape\" >I implement this solution step by step<\/a><ul class='ez-toc-list-level-4' ><li class='ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-12\" href=\"https:\/\/www.sigalou-domotique.fr\/en\/je-mets-en-place-un-gestionnaire-de-mot-de-passe\/#Je_cree_un_compte_chez_Infomaniak_et_jinstalle_kDrive\" >I create an account at Infomaniak and install kDrive<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-13\" href=\"https:\/\/www.sigalou-domotique.fr\/en\/je-mets-en-place-un-gestionnaire-de-mot-de-passe\/#Je_cree_une_base_de_donnees_Keypass_qui_contiendra_tous_mes_identifiants\" >I create a Keypass database that will contain all my credentials<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-14\" href=\"https:\/\/www.sigalou-domotique.fr\/en\/je-mets-en-place-un-gestionnaire-de-mot-de-passe\/#Je_securise_louverture_de_la_base_de_donnees_avec_la_Yubikey\" >I secure the opening of the database with the Yubikey<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-15\" href=\"https:\/\/www.sigalou-domotique.fr\/en\/je-mets-en-place-un-gestionnaire-de-mot-de-passe\/#Jinterconnecte_de_maniere_securisee_KeypassXC_et_le_navigateur\" >I securely interconnect KeypassXC and the browser<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-16\" href=\"https:\/\/www.sigalou-domotique.fr\/en\/je-mets-en-place-un-gestionnaire-de-mot-de-passe\/#Je_reproduis_toute_cette_installation_sur_mon_ordinateur_portable\" >I reproduce all this installation on my laptop<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-17\" href=\"https:\/\/www.sigalou-domotique.fr\/en\/je-mets-en-place-un-gestionnaire-de-mot-de-passe\/#Jinstalle_kDrive_sur_mon_SmartPhone\" >I install kDrive on my SmartPhone<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-18\" href=\"https:\/\/www.sigalou-domotique.fr\/en\/je-mets-en-place-un-gestionnaire-de-mot-de-passe\/#Jinstalle_Keypass2Android_sur_mon_SmartPhone\" >I install Keypass2Android on my SmartPhone<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-19\" href=\"https:\/\/www.sigalou-domotique.fr\/en\/je-mets-en-place-un-gestionnaire-de-mot-de-passe\/#Debat_questions_demandes_de_precisions\" >Debate, questions, requests for clarification<\/a><\/li><\/ul><\/nav><\/div>\n<h3><span class=\"ez-toc-section\" id=\"Mon_cahier_des_charges\"><\/span>My specifications<span class=\"ez-toc-section-end\"><\/span><\/h3>\r\n<ul>\r\n<li>Choose a free and secure password manager (even better certified ANSSI)<\/li>\r\n<li>Allow to share a password change instantly on all my devices, smartphone included, avoid file replications<\/li>\r\n<li>Don't use proprietary (non-open source) solutions that could host my data somewhere in the world<\/li>\r\n<li>Do not have a super strong opening password of 30 special characters to be typed 5 times a day<\/li>\r\n<li>Secure database opening via a single Yubikey on all devices<\/li>\r\n<li>If the Yubikey is lost or broken, have a backup solution<\/li>\r\n<li>That the user in the browser is no login or password to enter and even better, that the dual authentication based on TOTP (time-based single-use password) is calculated and completed on the same principle.<\/li>\r\n<li>That new login\/passwords are added to the database easily and updates detected and corrected in the database.<\/li>\r\n<\/ul>\r\n<p><!--more--><\/p>\r\n<h4><span class=\"ez-toc-section\" id=\"Avenant_a_mon_cahier_des_charges\"><\/span>Addendum to my specifications<span class=\"ez-toc-section-end\"><\/span><\/h4>\r\n<ul>\r\n<li>Have 3 bases: Mine, my wife's, the one common to both<\/li>\r\n<li>That my wife also has a Yubikey and that with her can open the bases<\/li>\r\n<li>Of course, the two previous points do not complicate the automatic retrieval of logins in the browser<\/li>\r\n<\/ul>\r\n<p>&nbsp;<\/p>\r\n\r\n\r\n\r\n<h3><span class=\"ez-toc-section\" id=\"Fonctionnement_de_lenregistrement_des_mots_de_passe_dans_la_base_au_format_Keypass\"><\/span>How to save passwords in the database in Keypass format<span class=\"ez-toc-section-end\"><\/span><\/h3>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/keypass2.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-5974\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/keypass2.png\" alt=\"\" width=\"104\" height=\"131\"><\/a><\/p>\r\n<p>The whole security of Keepass is based on the fact that, in the absence of an opening password, it is currently impossible to read the passwords contained in the database.<\/p>\r\n<p>To date, Keepass is the only password manager to have received ANSSI certification in France. Of course, ANSSI only validated a portable version (<a href=\"https:\/\/cyber.gouv.fr\/produits-certifies\/keepass-version-210-portable\" target=\"_blank\" rel=\"noopener\">KeePass Version 2.10 Portable<\/a>) but it was the principle of this way of coding the database that was rewarded.<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/anssi.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-5973\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/anssi.png\" alt=\"\" width=\"293\" height=\"123\"><\/a><\/p>\r\n<p>So to make it simple, Keypass software exploits a database file in mabasedemotsdepase format<strong>.kdbx<\/strong><\/p>\r\n<p>The strength of this file is that it is portable. You can either keep it with you, share it via a cloud or a \u2026 file server The recovery of this file by a hacker \"should\" not be able to be read. On this principle and admitting it, we can continue this page.<\/p>\r\n<h3><span class=\"ez-toc-section\" id=\"Mon_choix_de_la_declinaison_KeePass_pour_les_ordinateurs_fixe_ou_portable_sous_Windows_KeePassXC\"><\/span>My choice of KeePass for Windows desktop and laptop computers: KeePassXC<span class=\"ez-toc-section-end\"><\/span><\/h3>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/keypass3.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-5975\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/keypass3.png\" alt=\"\" width=\"73\" height=\"96\"><\/a><\/p>\r\n<p>KeePassXC is one of the best-known versions of KeyPass, I tried several of them, but the arch-simple support for securing by Challenge-Response (we see this in detail below) is great. The use of a Yubikey and the Challenge-Response means that you do not have to enter an arch-fort password, the principle of the physical key is sufficient with KeePassXC.<\/p>\r\n<p>Note that KeepassXC is available on all platforms<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/keypass4.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-5976\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/keypass4.png\" alt=\"\" width=\"376\" height=\"45\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/keypass4.png 376w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/keypass4-300x36.png 300w\" sizes=\"auto, (max-width: 376px) 100vw, 376px\" \/><\/a><\/p>\r\n<h3><span class=\"ez-toc-section\" id=\"Mon_choix_de_la_declinaison_Keypass_pour_les_Android_Keepass2Android\"><\/span>My choice of Keypass for Android: Keepass2Android<span class=\"ez-toc-section-end\"><\/span><\/h3>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/keypass5.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone  wp-image-5977\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/keypass5.png\" alt=\"\" width=\"166\" height=\"86\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/keypass5.png 351w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/keypass5-300x156.png 300w\" sizes=\"auto, (max-width: 166px) 100vw, 166px\" \/><\/a><\/p>\r\n<p>As on PC, there are a multitude of Android apps that claim to be KeyPass compatible. Assuming that you entrust all your credentials to an app, it is better to use one that has a pinion on the street and that the whole geek community monitors. Do not randomly take a little-known application, yet the blinds are full of it.<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/Liste-Applications-Android-pour-KeePass-1024x191-1.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-5978\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/Liste-Applications-Android-pour-KeePass-1024x191-1.jpg\" alt=\"\" width=\"1024\" height=\"191\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/Liste-Applications-Android-pour-KeePass-1024x191-1.jpg 1024w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/Liste-Applications-Android-pour-KeePass-1024x191-1-600x112.jpg 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/Liste-Applications-Android-pour-KeePass-1024x191-1-300x56.jpg 300w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/Liste-Applications-Android-pour-KeePass-1024x191-1-768x143.jpg 768w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/a><\/p>\r\n<p>Keepass2Android makes it possible to use yubikey and the Challenge-Response principle to open the database. Principle and Challenge-Answer identical to that of KeypassXC, so it is wonderful, even Yubikey key for both.<\/p>\r\n<p>Obviously on the smartphone, you will have to choose a Yubikey that can be connected to the USB port or an NFC key (my choice).<\/p>\r\n<p>Presenting the key at the back will be enough to unlock the database.<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/61bb0248-8cfa-4f2a-836c-bb92da574fa8.__CR00300300_PT0_SX300_V1___.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-5979\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/61bb0248-8cfa-4f2a-836c-bb92da574fa8.__CR00300300_PT0_SX300_V1___.png\" alt=\"\" width=\"265\" height=\"242\"><\/a><\/p>\r\n<h3><span class=\"ez-toc-section\" id=\"Mon_choix_dun_cloud_dedie_au_seul_fichier_de_donnees_kDrive\"><\/span>My choice of a cloud dedicated to the single data file: kDrive<span class=\"ez-toc-section-end\"><\/span><\/h3>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/onedrive-vs-onedrive-for-business.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone  wp-image-5984\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/onedrive-vs-onedrive-for-business.png\" alt=\"\" width=\"307\" height=\"128\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/onedrive-vs-onedrive-for-business.png 576w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/onedrive-vs-onedrive-for-business-300x125.png 300w\" sizes=\"auto, (max-width: 307px) 100vw, 307px\" \/><\/a><\/p>\r\n<p>I easily did the first tests on OneDrive Pro and then on OneDrive Perso, it worked well. But my idea is to avoid making the Keypass database available to a potential hacker who has entered my OneDrive Pro or Perso. I thought to myself, you might as well use a mini cloud dedicated to the sole use of the Keypass database. Under a wacky name and no personal information.<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/1668449352247.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-5985\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/1668449352247.png\" alt=\"\" width=\"280\" height=\"68\"><\/a><\/p>\r\n<p>I have an account with Ionos that offers a basic free HiDrive solution if you have an account with them, otherwise it is \u20ac1.80\/month. I tested with HiDrive, I had problems with synchronization and corrupted file when I tried changes on several machines at the same time, synchro on Android (even with the offline option) does not seem to me at the top, but I admit that I did not look for more. I also discarded HiDrive because it was the Drive linked to my Ionos account.<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/kdrive.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone  wp-image-5986\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/kdrive.png\" alt=\"\" width=\"300\" height=\"123\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/kdrive.png 549w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/kdrive-300x123.png 300w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\r\n<p>After reviewing all the offers available on the market, I stopped on the product proposed by Infomaniak. Infomaniak is a Swiss cloud provider that has been developing web hosting, streaming, marketing and online event solutions since 1994. The company favours local renewable energy and builds its own data centres and solar power plants in Switzerland, without relocating. They offer a free discovery offer with 15 GB of storage (kDrive) and a free email address for life. So I opened an account with a wacky name, and a storage is attached to that account. Without any connection to me outside of security settings. Note that the account is security in double authentication with choice between Yubikey or OTP.<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/kdrive2.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone  wp-image-5987\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/kdrive2.png\" alt=\"\" width=\"332\" height=\"117\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/kdrive2.png 642w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/kdrive2-600x211.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/kdrive2-300x106.png 300w\" sizes=\"auto, (max-width: 332px) 100vw, 332px\" \/><\/a><\/p>\r\n<p>The data is stored in Switzerland, it suits me very well.<\/p>\r\n<h4><span class=\"ez-toc-section\" id=\"Sur_les_ordinateurs\"><\/span>On computers<span class=\"ez-toc-section-end\"><\/span><\/h4>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/kdrive3.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-5988\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/kdrive3.png\" alt=\"\" width=\"276\" height=\"42\"><\/a><\/p>\r\n<p>You have to install the kDrive synchronization application, which works in the same way as other Drive software that everyone knows. A folder shared on disk in sync with a folder in the cloud.<\/p>\r\n<p>This is the green icon in the image above, between HiDrive and OneDrive described above.<\/p>\r\n<p>I have always chosen to dedicate a disk partition to my cloud synchro, this is disk O: at home, it is organised as follows:<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/kdrive4.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-5989\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/kdrive4.png\" alt=\"\" width=\"223\" height=\"196\"><\/a><\/p>\r\n<p>So I will create a folder in kDrive to put my KeyPass database file there, so it will be in O:\/kDrive<\/p>\r\n<h4><span class=\"ez-toc-section\" id=\"Sur_les_SmartPhones\"><\/span>On SmartPhones<span class=\"ez-toc-section-end\"><\/span><\/h4>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/Screenshot_20231215_091809_kDrive.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone  wp-image-5990\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/Screenshot_20231215_091809_kDrive.jpg\" alt=\"\" width=\"228\" height=\"494\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/Screenshot_20231215_091809_kDrive.jpg 1080w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/Screenshot_20231215_091809_kDrive-600x1300.jpg 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/Screenshot_20231215_091809_kDrive-138x300.jpg 138w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/Screenshot_20231215_091809_kDrive-473x1024.jpg 473w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/Screenshot_20231215_091809_kDrive-768x1664.jpg 768w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/Screenshot_20231215_091809_kDrive-709x1536.jpg 709w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/Screenshot_20231215_091809_kDrive-945x2048.jpg 945w\" sizes=\"auto, (max-width: 228px) 100vw, 228px\" \/><\/a><\/p>\r\n<p>The dedicated kDrive application is used. We will find the folder created on computer that will contain the KeyPass database.<\/p>\r\n<h3><span class=\"ez-toc-section\" id=\"Mon_choix_de_cle_de_securite_physique_Yubikey\"><\/span>My choice of physical security key: Yubikey<span class=\"ez-toc-section-end\"><\/span><\/h3>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/cle1.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone  wp-image-5999\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/cle1.png\" alt=\"\" width=\"248\" height=\"126\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/cle1.png 1523w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/cle1-600x304.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/cle1-300x152.png 300w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/cle1-1024x519.png 1024w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/cle1-768x389.png 768w\" sizes=\"auto, (max-width: 248px) 100vw, 248px\" \/><\/a><\/p>\r\n<p>I had set my sights on the Winkeo-A from NeoWave, a French company made in France. But the absence of NFC made me backtrack because I wanted to be able to unlock the password database on my smartphone as well.<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/cle2.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone  wp-image-6000\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/cle2.png\" alt=\"\" width=\"167\" height=\"195\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/cle2.png 333w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/cle2-257x300.png 257w\" sizes=\"auto, (max-width: 167px) 100vw, 167px\" \/><\/a><\/p>\r\n<p>In the end, like everyone else, I opted for the most popular key, the Yubikey. Everyone can choose their version according to their use.<\/p>\r\n<h3><span class=\"ez-toc-section\" id=\"Jinterconnecte_lensemble_des_equipements_via_le_cloud\"><\/span>I interconnect all equipment via the cloud<span class=\"ez-toc-section-end\"><\/span><\/h3>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/keypass1.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-5970\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/keypass1.png\" alt=\"\" width=\"1877\" height=\"895\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/keypass1.png 1877w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/keypass1-600x286.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/keypass1-300x143.png 300w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/keypass1-1024x488.png 1024w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/keypass1-768x366.png 768w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/keypass1-1536x732.png 1536w\" sizes=\"auto, (max-width: 1877px) 100vw, 1877px\" \/><\/a><\/p>\r\n<p>As a good schema is worth all speeches, here is an overview.<\/p>\r\n<p>Each database can only be unlocked with a Yubikey (the same).<\/p>\r\n\r\n\r\n\r\n<h3><span class=\"ez-toc-section\" id=\"Je_mets_en_oeuvre_de_cette_solution_etape_par_etape\"><\/span>I implement this solution step by step<span class=\"ez-toc-section-end\"><\/span><\/h3>\r\n<h4><span class=\"ez-toc-section\" id=\"Je_cree_un_compte_chez_Infomaniak_et_jinstalle_kDrive\"><\/span>I create an account at Infomaniak and install kDrive<span class=\"ez-toc-section-end\"><\/span><\/h4>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/kdrive45.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-6009\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/kdrive45.png\" alt=\"\" width=\"592\" height=\"117\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/kdrive45.png 592w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/kdrive45-300x59.png 300w\" sizes=\"auto, (max-width: 592px) 100vw, 592px\" \/><\/a><\/p>\r\n<p>At Infomaniak, I accept <a href=\"https:\/\/www.infomaniak.com\/fr\/cloud-gratuit\" target=\"_blank\" rel=\"noopener\">the proposal for a free email address and 15GB<\/a>, once everything is set up, I activate multi-factor authentication and then install the kDrive application on my PC.<\/p>\r\n<p>This application offers me a synchronization folder, it will be O:\/kDrive, in this folder, I then add a folder that will be used to place my KeyPass database file.<\/p>\r\n<h4><span class=\"ez-toc-section\" id=\"Je_cree_une_base_de_donnees_Keypass_qui_contiendra_tous_mes_identifiants\"><\/span>I create a Keypass database that will contain all my credentials<span class=\"ez-toc-section-end\"><\/span><\/h4>\r\n<p>I start on PC, I download the application <a href=\"https:\/\/keepassxc.org\/download\/#windows\" target=\"_blank\" rel=\"noopener\">KeyPassXC<\/a>.<\/p>\r\n<p><em>Be careful to take the original version on the site of <a href=\"https:\/\/keepassxc.org\/\" target=\"_blank\" rel=\"noopener\">KeypassXC<\/a> !!\u00a0<\/em><\/p>\r\n<p>I install KeyPassXC and add a new database.<\/p>\r\n<p>Don\u2019t worry if necessary, there are a lot of possible imports of old data.<\/p>\r\n<p>There is no particular problem with the installation.<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/new_db_wizard_1.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-6007\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/new_db_wizard_1.png\" alt=\"\" width=\"453\" height=\"281\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/new_db_wizard_1.png 453w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/new_db_wizard_1-300x186.png 300w\" sizes=\"auto, (max-width: 453px) 100vw, 453px\" \/><\/a><\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/new_db_wizard_3.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-6008\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/new_db_wizard_3.png\" alt=\"\" width=\"458\" height=\"345\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/new_db_wizard_3.png 458w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/new_db_wizard_3-300x226.png 300w\" sizes=\"auto, (max-width: 458px) 100vw, 458px\" \/><\/a><\/p>\r\n<p>For the strong password, I do not take too much of my head, in a few steps, I will delete it to keep only the identification with the Yubikey.<\/p>\r\n<p>I save the database in the specific folder I created on my O:\/kDrive drive<\/p>\r\n<p>At this point, I can close or open the database, it asks for the strong password defined at the installation.<\/p>\r\n<h4><span class=\"ez-toc-section\" id=\"Je_securise_louverture_de_la_base_de_donnees_avec_la_Yubikey\"><\/span>I secure the opening of the database with the Yubikey<span class=\"ez-toc-section-end\"><\/span><\/h4>\r\n<p>The dialogue between KeyPassXC and Yubikey takes place through what is called a Challenge-Response.<\/p>\r\n<p>So I'm going to start by defining the key to the Challenge-Response in <a href=\"https:\/\/www.yubico.com\/support\/download\/yubikey-personalization-tools\/\" target=\"_blank\" rel=\"noopener\">Yubikey Personalization Tool<\/a>.<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/yubikey.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-6010\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/yubikey.png\" alt=\"\" width=\"903\" height=\"322\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/yubikey.png 903w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/yubikey-600x214.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/yubikey-300x107.png 300w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/yubikey-768x274.png 768w\" sizes=\"auto, (max-width: 903px) 100vw, 903px\" \/><\/a><\/p>\r\n<p>On the Challenge-Response tab, I click on HMAC-SHA1.<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/yubikey2.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-6011\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/yubikey2.png\" alt=\"\" width=\"717\" height=\"547\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/yubikey2.png 717w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/yubikey2-600x458.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/yubikey2-300x229.png 300w\" sizes=\"auto, (max-width: 717px) 100vw, 717px\" \/><\/a><\/p>\r\n<p>On this screen, I check the slot2, In HMAC-SHA1, I click Generate to generate a secret key.<br \/>I don\u2019t want to have to press the Yubikey on every call, I don\u2019t tick \u2018Require user input\u2019 but it\u2019s my choice, everyone is free to decide. And finally, I click on Write Configuration to save the secret key in the Yubikey.<\/p>\r\n<p><em>Important: Note somewhere the secret key, indeed, in case of failure or loss of the Yubikey, I will simply put the same key in another Yubikey and I will not lose your access.<\/em><\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/yubikey3.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-6012\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/yubikey3.png\" alt=\"\" width=\"311\" height=\"71\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/yubikey3.png 311w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/yubikey3-300x68.png 300w\" sizes=\"auto, (max-width: 311px) 100vw, 311px\" \/><\/a><\/p>\r\n<p>I go back to KeyPassXC open my database then I go into <strong>database security.<\/strong><\/p>\r\n<p>Then <strong>Add another protection.<\/strong><\/p>\r\n<p>Then <strong>Add a question and answer.<\/strong><\/p>\r\n<p>The key is detected, just validate and close.<\/p>\r\n<p>First test, I close the database and reopen it. I have to type the password and insert the Yubikey key.<\/p>\r\n<p>I will delete the password to keep only the identification with the Yubikey, I will go to <strong>database security <\/strong>then I click on <strong>Delete the password.<\/strong><\/p>\r\n<p>The database now opens only if the Yubikey is inserted and without an additional password. That was my goal.<\/p>\r\n<h4><span class=\"ez-toc-section\" id=\"Jinterconnecte_de_maniere_securisee_KeypassXC_et_le_navigateur\"><\/span>I securely interconnect KeypassXC and the browser<span class=\"ez-toc-section-end\"><\/span><\/h4>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/keypass11.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-6018\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/keypass11.png\" alt=\"\" width=\"768\" height=\"541\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/keypass11.png 768w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/keypass11-600x423.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/keypass11-300x211.png 300w\" sizes=\"auto, (max-width: 768px) 100vw, 768px\" \/><\/a><\/p>\r\n<p>Everything is well planned, I go back to the KeyPassXC website and I go to Download \/ <a href=\"https:\/\/keepassxc.org\/download\/#browser\" target=\"_blank\" rel=\"noopener\">Browser extension<\/a><\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/keypass12.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-6019\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/keypass12.png\" alt=\"\" width=\"815\" height=\"74\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/keypass12.png 815w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/keypass12-600x54.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/keypass12-300x27.png 300w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/keypass12-768x70.png 768w\" sizes=\"auto, (max-width: 815px) 100vw, 815px\" \/><\/a><\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/brave.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone  wp-image-6020\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/brave.png\" alt=\"\" width=\"109\" height=\"99\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/brave.png 383w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/brave-300x273.png 300w\" sizes=\"auto, (max-width: 109px) 100vw, 109px\" \/><\/a><\/p>\r\n<p>My browser is Brave, so I will take the Chrome version of the extension.<\/p>\r\n<p>A link is established between Brave and KeypassXC, a name can be given to this link. This remains active and allowed in the database.<\/p>\r\n<p>To check these links, I go to <strong>Database<\/strong> \/ <strong>Database settings<\/strong> \/ <strong>Browser Integration tab<\/strong><\/p>\r\n<p>Of course, for security reasons, in the future, remove any KeyPassXC\/Browser links that become useless.<\/p>\r\n<h4><span class=\"ez-toc-section\" id=\"Je_reproduis_toute_cette_installation_sur_mon_ordinateur_portable\"><\/span>I reproduce all this installation on my laptop<span class=\"ez-toc-section-end\"><\/span><\/h4>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/keypass15.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-6017\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/keypass15.png\" alt=\"\" width=\"459\" height=\"262\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/keypass15.png 459w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/keypass15-300x171.png 300w\" sizes=\"auto, (max-width: 459px) 100vw, 459px\" \/><\/a><\/p>\r\n<p>Similar to the previous paragraph, I do the whole installation again on my laptop.<\/p>\r\n<p>The database is retrieved from the well-synchronised kDrive folder.<\/p>\r\n<p>I open without worry with the same Yubikey on the laptop.<\/p>\r\n<h4><span class=\"ez-toc-section\" id=\"Jinstalle_kDrive_sur_mon_SmartPhone\"><\/span>I install kDrive on my SmartPhone<span class=\"ez-toc-section-end\"><\/span><\/h4>\r\n<p>The kDrive application provided by Infomaniak is very simple to install.<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/kdrive453.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone  wp-image-6027\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/kdrive453.png\" alt=\"\" width=\"517\" height=\"254\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/kdrive453.png 1329w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/kdrive453-600x295.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/kdrive453-300x148.png 300w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/kdrive453-1024x504.png 1024w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/kdrive453-768x378.png 768w\" sizes=\"auto, (max-width: 517px) 100vw, 517px\" \/><\/a><\/p>\r\n<p>Once I am identified with my email\/worddepass and the second authentication, I have access to the KeyPass database file that has been registered on my phone.<\/p>\r\n<p>The only small manipulation I make is to check \u2018Available offline\u2019 to always have the latest version on my phone. I do not know if this is necessary, but in doubt it is a plus.<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/Screenshot_20231215_150446_kDrive.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone  wp-image-6026\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/Screenshot_20231215_150446_kDrive.jpg\" alt=\"\" width=\"258\" height=\"559\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/Screenshot_20231215_150446_kDrive.jpg 1080w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/Screenshot_20231215_150446_kDrive-600x1300.jpg 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/Screenshot_20231215_150446_kDrive-138x300.jpg 138w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/Screenshot_20231215_150446_kDrive-473x1024.jpg 473w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/Screenshot_20231215_150446_kDrive-768x1664.jpg 768w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/Screenshot_20231215_150446_kDrive-709x1536.jpg 709w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/Screenshot_20231215_150446_kDrive-945x2048.jpg 945w\" sizes=\"auto, (max-width: 258px) 100vw, 258px\" \/><\/a><\/p>\r\n<h4><span class=\"ez-toc-section\" id=\"Jinstalle_Keypass2Android_sur_mon_SmartPhone\"><\/span>I install Keypass2Android on my SmartPhone<span class=\"ez-toc-section-end\"><\/span><\/h4>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/2android.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-6028\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/2android.png\" alt=\"\" width=\"1110\" height=\"402\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/2android.png 1110w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/2android-600x217.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/2android-300x109.png 300w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/2android-1024x371.png 1024w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/2android-768x278.png 768w\" sizes=\"auto, (max-width: 1110px) 100vw, 1110px\" \/><\/a><\/p>\r\n<p>Once the installation is complete, I can open the database.<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/2android2.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-6029\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/2android2.png\" alt=\"\" width=\"295\" height=\"317\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/2android2.png 295w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/2android2-279x300.png 279w\" sizes=\"auto, (max-width: 295px) 100vw, 295px\" \/><\/a><\/p>\r\n<p>I will go to Open, select at the top left \u2018System file selector\u2019, because kDrive is not in the services integrated in the wizard (which is no problem).<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/KeePass3.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone  wp-image-6030\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/KeePass3.png\" alt=\"\" width=\"104\" height=\"185\" srcset=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/KeePass3.png 1080w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/KeePass3-600x1067.png 600w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/KeePass3-169x300.png 169w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/KeePass3-576x1024.png 576w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/KeePass3-768x1365.png 768w, https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/KeePass3-864x1536.png 864w\" sizes=\"auto, (max-width: 104px) 100vw, 104px\" \/><\/a><\/p>\r\n<p>When the selection window opens, I click on the 3 bars at the top left and select my kDrive from the list.<\/p>\r\n<p>I then navigate in my kDrive and I will select my base xxxx.kdbx<\/p>\r\n<p>To open my database, I must then select the way in which I will identify myself, so I take: \u2018\u00a0<strong>Password + Answer Challenge for KeepassXC<\/strong>\u2018\u00a0<\/p>\r\n<p>When I click on \"\u00a0<strong>Unlock<\/strong>\u2018, a small overprinted window is displayed with the words \u2018\u00a0<strong>Please attach or swipe your Yubikey now<\/strong>.<\/p>\r\n<p>I put the Yubikey on the back of my phone, the NFC reacts and the base opens.<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/61bb0248-8cfa-4f2a-836c-bb92da574fa8.__CR00300300_PT0_SX300_V1___.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-5979\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/61bb0248-8cfa-4f2a-836c-bb92da574fa8.__CR00300300_PT0_SX300_V1___.png\" alt=\"\" width=\"265\" height=\"242\" \/><\/a><\/p>\r\n<p><em>Note:<\/em> : For now, I have to pass the key twice, I don\u2019t know why, it\u2019s not very annoying but I wonder why it happens. If anyone knows, I am a taker.<\/p>\r\n<p>There are a lot of settings in Keepass2Android, everyone is free to choose their options.<\/p>\r\n<h3><span class=\"ez-toc-section\" id=\"Debat_questions_demandes_de_precisions\"><\/span>Debate, questions, requests for clarification<span class=\"ez-toc-section-end\"><\/span><\/h3>\r\n<p>I deactivated the comments on this blog, the ad bots saturated everything.<\/p>\r\n<p>I suggest you ask your questions or simply give me feedback if you have followed this tutorial on:<\/p>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/jeedom.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-6036\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/jeedom.png\" alt=\"\" width=\"89\" height=\"47\" \/><\/a><\/p>\r\n<ul>\r\n<li>The Forum of <a href=\"https:\/\/community.jeedom.com\/t\/retex-je-mets-en-place-mon-gestionnaire-de-mots-de-passe-sur-tous-mes-ordinateurs-et-smartphone\/117457\">Jeedom<\/a><\/li>\r\n<\/ul>\r\n<p><a href=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/hacf.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-6035\" src=\"https:\/\/www.sigalou-domotique.fr\/wp-content\/uploads\/2023\/12\/hacf.png\" alt=\"\" width=\"261\" height=\"55\" \/><\/a><\/p>\r\n<ul>\r\n<li>The Forum of <a href=\"https:\/\/forum.hacf.fr\/t\/retex-je-mets-en-place-mon-gestionnaire-de-mots-de-passe-sur-tous-mes-ordinateurs-et-smartphone\/32773\">HACF<\/a><\/li>\r\n<\/ul>\r\n<p>\u00a0<\/p>\r\n<p>\u00a0<\/p>\r\n<p>\u00a0<\/p>","protected":false},"excerpt":{"rendered":"<p>Edit : Attention, une solution diff\u00e9rente a \u00e9t\u00e9 \u00e9crite depuis la r\u00e9daction de cette page, mais les informations ici restent valables : J&rsquo;installe Vaultwarden (Bitwarden) sur mon NAS Synology J&rsquo;ai choisi KeepassXC + Keepass2Android avec authentification Yubikey Mon cahier des charges Choisir un gestionnaire de mot de passe gratuit et s\u00e9curis\u00e9 (encore mieux certifi\u00e9 ANSSI) [&hellip;]<\/p>","protected":false},"author":1,"featured_media":5970,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[70,166],"tags":[79],"class_list":["post-5968","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurite","category-retex","tag-keepass"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.sigalou-domotique.fr\/en\/wp-json\/wp\/v2\/posts\/5968","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.sigalou-domotique.fr\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.sigalou-domotique.fr\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.sigalou-domotique.fr\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.sigalou-domotique.fr\/en\/wp-json\/wp\/v2\/comments?post=5968"}],"version-history":[{"count":0,"href":"https:\/\/www.sigalou-domotique.fr\/en\/wp-json\/wp\/v2\/posts\/5968\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.sigalou-domotique.fr\/en\/wp-json\/wp\/v2\/media\/5970"}],"wp:attachment":[{"href":"https:\/\/www.sigalou-domotique.fr\/en\/wp-json\/wp\/v2\/media?parent=5968"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.sigalou-domotique.fr\/en\/wp-json\/wp\/v2\/categories?post=5968"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.sigalou-domotique.fr\/en\/wp-json\/wp\/v2\/tags?post=5968"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}