Home Explore Help
Sign In
sl1nk
/
keepassxc
mirror of https://github.com/keepassxreboot/keepassxc.git
Watch 1
Star 0
Fork 0
Files Issues 0 Wiki
Branch: develop
Branches Tags
keepassxc
/
utils
/
keepassxc-cr-recovery
dependabot[bot] cdbff32f25 Bump golang.org/x/crypto in /utils/keepassxc-cr-recovery (#11557) 2 months ago
..
.gitignore 0c252b6ed4 add challenge-response recovery tool (see keepassxreboot/keepassxc#1734) 5 years ago
README.md e3c7b570ae Minor documentation and script cleanups (#6868) 3 years ago
go.mod cdbff32f25 Bump golang.org/x/crypto in /utils/keepassxc-cr-recovery (#11557) 2 months ago
go.sum cdbff32f25 Bump golang.org/x/crypto in /utils/keepassxc-cr-recovery (#11557) 2 months ago
main.go e6a6ba7d63 Fix keepass-cr-recovery 2 years ago

README.md

keepassxc-cr-recovery

A small tool that helps you regain access to your KeePassXC password database in case you have it protected with YubiKey challenge-response and lost your key. Currently supports KDBX4 databases with Argon2 hashing.

Building

Tested with Go 1.13. Just run go build.

Usage

What you need:

  • your KeePassXC database
  • your challenge-response secret. This cannot be retrieved from the YubiKey, it needs to be saved upon initial configuration of the key.

Then just run

keepass-cr-recovery path-to-your-password-database path-of-the-new-keyfile

It will prompt for the challenge-response secret. You will get a keyfile at the specified destination path. Then, to unlock your database in KeePassXC, you need to check "key file" instead of "challenge response" and load the file.