Repository navigation
Can I share one KeePass database with friends/co-workers/family without having to share my credentials to my OneDrive?
Yes! You can simply share the KeePass database on your OneDrive Personal, OneDrive for Business or SharePoint Online site. You can do this using the standard built in "Copy link" or "Share" functionality. Share it with the people you want to share the KeePass database with by entering their e-mail addresses, providing "Edit" access. Choose to copy the link coming forward from the sharing and pass that link on to the people you would like to have access to your KeePass database.
Now simply have the other person do a File -> Open -> Open from OneDrive (ctrl+alt+o), have them choose the OneDrive & OneDrive for Business option, authenticate using their own credentials and click on the "Shared through URL" tab in the OneDrive file picker dialog. Paste in the sharing link that was the result of your action above and click Validate to ensure that the user has access to your KeePass database through the sharing link you created.
For SharePoint On-premises, if the SharePoint farm is set up to suppors ACS / Low Trust, this will be the only option to share the KeePass database. You can then just share the Client ID / Client Secret which gives access to the database location to give others access to it as well.
See the Proxy Issues section in Troubleshooting
No I cannot.
No I will not. Lots of functionality inside the plugin depends on the async development patterns introduced in the .NET 4.8 framework. I will not take the extreme efforts to use alternative approaches for this. Just install .NET 4.8 or later. If you can't because you're still on Windows XP: dude, upgrade your operating system!
When triggering a save (ctrl+s) or opening a KeePass database, the plugin will automatically verify against OneDrive Personal / OneDrive for Business if the file hosted there has been updated since the last time that specific client downloaded it. If not, it will not do anything. If so, it will download a copy of that KeePass database to a temporary location on your harddrive and merge all changes from the downloaded copy with your local KeePass database. So changes in both the version stored online as well as in your local copy will be retained. Not at any time will one overwrite the other. This is ideal in situations where you're using KeePass on clients that are not always online (i.e. laptops). As soon as you get online and trigger a sync, everything will be merged again. Once the changes are merged, an updated copy of the KeePass database will automatically be uploaded to OneDrive / OneDrive for Business again so your other devices can grab the updated copy.
It is by design that when you reset your OneDrive (Microsoft Account) password, all active refresh tokens will be invalidated. This is a security measure as the reason for changing the password could be that somebody gained access to it. In this scenario your KeePass sync will stop working. You can easily resolve this by going Tools -> OneDriveSync Options -> delete the entry with the database you're having problems with. This will not delete the KeePass file, just the configuration for the plugin for it. Now if you save your KeePass database again (ctrl+s) you will receive the wizard again to set up your sync. After going through this again all should work well again.
If you have downloaded the PLGX and placed it inside the KeePass/Plugins folder (typically C:\Program Files (x86)\KeePass Password Safe 2\Plugins) and it doesn't show its functionality, ensure that the PLGX file is not blocked. By default it will be. Go to the Plugins folder, right click the KeeOneDriveSync-<version>.plgx file and go to its properties. If it shows an option to Unblock it at the bottom right of the General tab, check the box and hit OK. Restart KeePass. It should now properly load the plugin.
No. There is no data that flows in any way to or through any service I host or own for this plugin. All communication goes directly between the KeePass client and the cloud provider where the data is hosted, such as Microsoft OneDrive for Business. The traffic between KeePass and Microsoft is encrypted through HTTPS encryption. The refresh token which could give access to the storage provider, such as OneDrive for Business, is stored to prevent having to authenticate over and over again on each synchronization. This token is stored either in the KeePass database, thus encrypted and secured in the same ways as everything else in your KeePass database is, or on your local file system in the user profile folder:
C:\Users<username>\AppData\Roaming\KeePass
The token in this config file is encrypted using built-in Windows encryption and only can be decrypted if you are logged on to Windows with the same user as under which this data is stored.
Communication with the storage providers happens via my OneDriveAPI open source API, as you can see in the package reference. If you want to see exactly where it specifies which services to communicate with, see here:
You will find the URLs of the services it communicates with at the top of each file. You can see that these are all Microsoft owned and managed services and all communicate through HTTPS.
I recommend you to read up on the oAuth flow which will show you that all communication will always go between the client and the oAuth server directly, without having any third parties in between:
As of version 2.0.8.0 you can use these shortcut keys to quickly find your way in the OneDriveSync dialog box
- F1: Opens the sync details screen. Only works when one KeePass database is selected.
- F2: Allows renaming of the storage name for the KeePass database(s) you have selected
- F4: Starts syncing the selected entries, if those databases are currently open in KeePass
- F5: Refreshes the list with configuration entries
- F7: Open the local file locations of the KeePass database(s) you have selected
- F8: Open the selected KeePass database(s) in KeePass (new feature)
- DEL: Remove the KeePass OneDriveSync configuration entries for the selected KeePass database(s). It will not remove the KeePass database itself, just the KeePass OneDriveSync configuration for it.
- CTRL+A: Select all KeePass databases
- CTRL+SHIFT+A: Select all KeePass databases that no longer exist locally (red colored background)
- CTRL+Click: Select another KeePass database
- SHIFT+Click: Select all KeePass databases between the currently selected one and the one you're clicking on
- Use the right click menu to select all KeePass databases that haven't synced in either the last 24 hours, last week, last 2 weeks or last month
Feel free to e-mail me at koen@zomers.eu or open a GitHub Issue