KeePass on Android

Topic

New Reply

I’ve been using KeePass on my Windows PC for several years and am very content with it.
I want to use it on an Android phone and/or Tablet; can anyone recommend a safe Android App for KeePass?
The website showed several, but I am unsure which to use.

Reply | Quote

Replies

I use KeePass on both PC and Android. AFAIK, there are only three real choices of android apps that are compatible with KeePass PC databases: KeePassDroid, Keepass2Android, and KeepShare.

I know nothing about KeepShare other than it costs money. (There is a crippled, “Lite” version, but why bother with crippled when the other two are free and work quite well?)

I’ve tried both of the others and they are quite similar, though I find KeePassDroid easier to use. OTOH, that may be because Keepass2Android is arguably a little more secure.

With KPD you open the database and select an entry, and it copies the username and password to the android notification shade, where you can then copy/paste into websites or password entry boxes in other apps. K2A instead copies the credentials to its own, secure keyboard, so when you open your web browser it takes a few more steps to select the keyboard and then select the username/password to paste. It’s a little less convenient, though supposedly prevents the possibility of other apps snooping on the cut/paste operation without your knowledge.

K2A comes in two flavors–one version that only opens a local db and another that will directly open cloud dbs, such as a KeePass db stored in gdrive or dropbox. The latter can be used even if you haven’t installed the cloud provider’s android app, because it accesses the cloud directly. OTOH, that’s a slower way of getting at your stored passwords. (Of course, this assumes you have a cloud account.)

KPD only opens a local db, though you can use it with gdrive or dropbox if you install one of those apps on your android device and sync a folder on your device to the cloud. KPD accesses the local copy of your db, and the cloud provider’s app keeps it in sync with the cloud.

Bear in mind that if you use a strong master password to open your KeePass db, that can be a hassle on your mobile, where keyboards are harder to use. That might give K2A an edge, because it has a quick-reopen feature that allows you to use a shorter password to reopen the db if you’ve already opened it (with the full password) recently.

OTOH, there’s a companion app to KPD that allows you to open it via a NFC tag (assuming your device is NFC-enabled) and thus avoid having to wrestle with a entering a complicated master password.

(For myself, I settled on KPD with NFC.)

Reply | Quote

K2A instead copies the credentials to its own, secure keyboard, so when you open your web browser it takes a few more steps to select the keyboard and then select the username/password to paste. It’s a little less convenient, though supposedly prevents the possibility of other apps snooping on the cut/paste operation without your knowledge.

In my experience K2A also has the ability to copy either the user name or password to the clipboard from the notification shade. You look up the site/account you need to sign in to and the notification shade will automatically have the two options available to you.

Also, if you forgot to look up the account before you go to the web site you can select Share and then select “Keepass2Android: Find password” and K2A will automatically start up and look up the web site you are on and see if you have an entry already entered. If so, it sets up the user name and password in the notification shade as mentioned above.

HTH

Reply | Quote

I use KeePass on both PC and Android. AFAIK, there are only three real choices of android apps that are compatible with KeePass PC databases: KeePassDroid, Keepass2Android, and KeepShare.

I know nothing about KeepShare other than it costs money. (There is a crippled, “Lite” version, but why bother with crippled when the other two are free and work quite well?)

…

To clarify on KeepShare, since you don’t know anything about it: it adds usability and features that KeePassDroid and Keepass2Android both lack. Namely, a secure PIN unlock mechanism, and auto-fill. Yes, AUTO-FILL.

Auto-fill of usernames and passwords works across all apps, chrome and the built-in web browser (for those of you not using chrome, but no other browser support).

The Lite version is crippled? No, it’s read-only. It does everything else the paid version does. KeepShare, like the other two is also fully open source. If you wanted to not pay, you can build it yourself. I’m not stopping you. On top of this, nothing’s stopping you from using KeePassDroid and/or Keepass2Android for all your writing needs; I’ve just put a lot more effort and thought into how the UI should work vis-a-vis the others. Most people don’t even want write support.

PIN unlock is also secure as it is used in a form of 2FA. In order to unlock the database, you must have access to your Google Drive for some app-private data, and the PIN. Neither one individually can unlock your passwords.

Oh, and a random bit of trivia, KeepShare isn’t my only security-related piece of software (nor is it my only KeePass-related). I am also the creator of chromeIPass and passIFox for those that use it (although I neglect those pretty badly).

Reply | Quote

KeepShare […] adds usability and features that KeePassDroid and Keepass2Android both lack. Namely, a secure PIN unlock mechanism, and auto-fill. Yes, AUTO-FILL.[/quote]
Thanks, Perry! As it is one of the few android apps compatible with a KeePass db, your information about it is both relevant and welcome in this thread.

Autofill is handy. The PC version of KeePass has autofill, but AFAIK the android versions of K2A and KPD do not have that feature.

The Lite version is crippled? No, it’s read-only. It does everything else the paid version does.

Well . . . that kind of meets the definition of crippled, doesn’t it? Or are you saying the paid version is also read-only?

Reply | Quote

Well . . . that kind of meets the definition of crippled, doesn’t it? Or are you saying the paid version is also read-only?

Up until write support was added, the paid version was read only. The free version currently has more features than the paid version for the previous 2 years

To be clear, the lite version came about as a result of write support being added to the paid version. Thus, the lite version isn’t crippled, but the paid version is enhanced

Reply | Quote

Up until write support was added, the paid version was read only. The free version currently has more features than the paid version for the previous 2 years

To be clear, the lite version came about as a result of write support being added to the paid version. Thus, the lite version isn’t crippled, but the paid version is enhanced

Thanks for the clarification. And thanks for the earlier details, which I’m sure will help readers choose between the three KeePass-compatible android options.

Reply | Quote

Thanks very much for such a detailed reply.

Reply | Quote

My Pwd. Mgr. on my Tablet,
is:
– “SafeInCloud” 4.8 stars overall
at Google Play Store: https://goo.gl/jnXeb

and read the user comments there.

At the end, bought the PRO version
for extra interesting features.

It has a cut & paste PWD feature,
just like the K2D app, mentioned above.

I believe you can import
your existing KeePass format pwds.

On my desktop PC
I use LastPass.
Brilliant!

I wish I could use LastPass on my Android tablet.
Tried it, but had problems
with the LP Tablet version…

Anybody else wants to share their experience
with “SafeinCloud” and “LastPass” on Android?

SF99
– Pale Moon 25.4.1 and FF 37.0.2
– Ubuntu Linux 12.04 (32-bit)
– Samsung Tablet Galaxy Tab3 / Android 4.2.2

Reply | Quote

My Pwd. Mgr. on my Tablet,
is:
– “SafeInCloud” 4.8 stars overall
at Google Play Store: https://goo.gl/jnXeb

and read the user comments there.

At the end, bought the PRO version
for extra interesting features.
You may

Reply | Quote

I’ve used LastPass for years on multiple Android phones and tablets including my Color Nook which I set up with a dual boot ICS android option. Currently using Samsung Galaxy S5 phone and Tab 4 Tablet. Never had a problem with any device and chose LastPass for it’s compatibility with Yubi Key. https://www.yubico.com/products/yubikey-hardware/

My Pwd. Mgr. on my Tablet,
is:
– “SafeInCloud” 4.8 stars overall
at Google Play Store: https://goo.gl/jnXeb

and read the user comments there.

At the end, bought the PRO version
for extra interesting features.

It has a cut & paste PWD feature,
just like the K2D app, mentioned above.

I believe you can import
your existing KeePass format pwds.

On my desktop PC
I use LastPass.
Brilliant!

I wish I could use LastPass on my Android tablet.
Tried it, but had problems
with the LP Tablet version…

Anybody else wants to share their experience
with “SafeinCloud” and “LastPass” on Android?

SF99
– Pale Moon 25.4.1 and FF 37.0.2
– Ubuntu Linux 12.04 (32-bit)
– Samsung Tablet Galaxy Tab3 / Android 4.2.2

Reply | Quote

“On my desktop PC
I use LastPass.
Brilliant!

I wish I could use LastPass on my Android tablet.
Tried it, but had problems
with the LP Tablet version…

Anybody else wants to share their experience
with “SafeinCloud” and “LastPass” on Android?”

I have been running LastPass the past three months on three different devices (two Androids) using the same account and minimal issues. Having easy access to all my passwords on all of them is why I got LastPass. I used KeePass for many years and it served me well but I needed to access passwords from my smartphone. It may not be the most secure approach and it is a bit unsettling to trust the cloud with my valuable information, but simplicity of the solution won out. Happy so far.

Joe R.

– HP Elitebook 8560w / Windows 7 Pro
– Samsung Tablet Galaxy Tab 4 10.1 / Android 5.0.2
– Samsung Galaxy Note 4 / Android 5.0.1

Reply | Quote

Keepass2Android uses the same base code as KeePass so it includes the KeePass sync functions. This is great for keeping everything up to date.

cheers, Paul

Reply | Quote

I went for KeePassDroid and am very satisfied, it fulfills the functions I require, not needing any synchronisation function.

Reply | Quote

It should be noted that the SafeInCloud Password Manager does have a Windows version also, so syncing is superb between android & windows directly. Almost all existing password manager databases can also be imported (or exported back from) SafeInCloud. Have been using it for years. I unusually found a database of another password manager which did not import, & worked with the developer who went to the trouble of specifically updating the app to accept it’s particular format.

Reply | Quote

Why should we use SafeInCloud over KeePass? It’s not open source or free and the website is light on detail about the encryption.

cheers, Paul

Reply | Quote

On the contrary, I believe the website (not necessarily the Google play store front) is just as detailed if not more professional in appearance than the keepass site https://safe-in-cloud.com/en/

Moreover, whereas keepass appears to offer near exact same 256 AES encryption, not certain that it offers full cloud synchronisation too enabling all cross platform devices like PC, Mac, tablet (android or iOS) & phone to be restored from encrypted cloud database if the device(s) themselves are lost or stolen. Just depending on a local copy of the encrypted database only for example can be risky. SafeInCloud also seems to have similar portable tools. No not open source but just a one off (very inexpensive) support payment instead.

Reply | Quote

I DO NOT synchronize password managers between my Desktop and Tablets.

I NEVER take my Desktop with me when I am in public places,
so it is safe from pickpockets etc. – it is physically secure in my home with those I trust.

If someone steals my tablet and gains full access before I realize my loss,
I will not worry.
There is no tablet access to my bank etc.
My tablet does NOT have passwords etc. to my Desktop email accounts.

Reply | Quote

Physical security of the database itself might be the worry, if for example the database got lost or corrupted. Like any cloud backup, it can be a godsend when a local copy is destroyed or lost for whatever reason. It is only the database that syncs encrypted to any cloud of your choice, not to other devices. Naturally the whole thing is protected same as keepass with single master password of your choosing. Ability to use portable devices (in themselves encrypted totally) with the same password vault is extremely useful. Driving licence copies, passport copies, notes you name it can also be synced. Not sure if keepass can store images & important personal ‘copies’ of documents too. The user interface of SafeInCloud appears less ‘verbose’ than keypass & has material design. But you pays your money, you takes your choice. The good thing is that it is easy to change from either to either with the superb import export capability.

Reply | Quote

I went through this exercise when I bought my first Android phone 18 months ago. In the end I chose to store my password database on OneDrive and use it via Keepass2Android on my phone. This has worked brilliantly.

The data are maintained using KeePass on my Windows PC – I wouldn’t want to have to do this on the phone. It is very convenient to be able to open the same db file from the two programs (desktop & phone).

However, the main password manager on my PC, which is used for all my passwords and is the master, is separate (a different program entirely). The cloud db is restricted to a small subset (common, non-financial passwords), only 10% or so of the total in the master db.

Reply | Quote

The cloud db is restricted to a small subset (common, non-financial passwords), only 10% or so of the total in the master db.

I use just KeePass. Do you know if there’s a way for the master db to automatically keep the cloud db up to date? I’d rather not have to maintain two databases, and it would be great if when I update the master it would also update the 10% subset in the cloud.

Reply | Quote

I use just KeePass. Do you know if there’s a way for the master db to automatically keep the cloud db up to date? I’d rather not have to maintain two databases, and it would be great if when I update the master it would also update the 10% subset in the cloud.

There is no way to do this automatically, but you can do it in a couple of ways.
1. Move the portable entries into a new database and sync that database. KeePass allows you to open several databases at once, automatically with the KeeAutoExec plug-in.
2. Move the portable entries into a new folder in your database and export them to a new database. The downside is there is no sync for the exported entries.

cheers, Paul

Reply | Quote

we have our master db in the cloud since both my wife and I use it

Reply | Quote

I haven’t had time to experiment yet, but this:
http://keepass.info/help/v2/sync.html
appears to indicate it would be possible to sync a native file with a more limited file stored on the cloud. I am saying again I have not experimented with it, but if you feel a need to, flame away. Please try to make the sarcasm at least mildly amusing, though, because petulance just makes me regret following threads.

Reply | Quote

we have our master db in the cloud since both my wife and I use it

Do you both modify the database? If so you should consider using the scenario described here: http://keepass.info/help/kb/trigger_examples.html#dbsync

cheers, Paul

Reply | Quote

We both modify it. I don’t know what the settngs are , but if either make a change in Keepass we are prompted on exit to save changes to db, then it syncs with Dropbox and we get a Dropbox not change was made.

Reply | Quote

Browser extension capability works well too with SafeInCloud, pulling in the individual specific URL related encrypted database either with Chrome or Firefox, it’s a pity though, as neither Internet explorer is covered, or Windows phone, but I have every suspicion the developer will tackle a Windows 10 Microsoft Edge extension or perhaps support a Windows 10 universal app too.

Reply | Quote

Browser extension capability works well too with SafeInCloud, pulling in the individual specific URL related encrypted database either with Chrome or Firefox, it’s a pity though, as neither Internet explorer is covered, or Windows phone, but I have every suspicion the developer will tackle a Windows 10 Microsoft Edge extension or perhaps support a Windows 10 universal app too.

On the basis that my Thread was specifically about KeePass, I think you’ve pushed your product sufficiently…you could always start another Thread of course. :huh:

Reply | Quote

On the basis that my Thread was specifically about KeePass, I think you’ve pushed your product sufficiently…you could always start another Thread of course. :huh:

Apologies. Just attempting to justify some kind of answer to Paul T’s comment on why anyone would want to use SafeInCloud over KeePass, & of course your original incorrect statement that there are only three real choices of android apps that are compatible with KeePass PC databases. It’s not my product. I only have a licence to use it & much prefer it over Keepass, for just some of the reasons mentioned. I’ll refrain from going into any other reasons in your thread.

Reply | Quote

, & of course your original incorrect statement that there are only three real choices of android apps that are compatible with KeePass PC databases.

I made no statement, incorrect or otherwise, I was asking about KeePass for Android.

Reply | Quote

….I made no statement, incorrect or otherwise, I was asking about KeePass for Android.

So I read.

Reply | Quote

, & of course your original incorrect statement that there are only three real choices of android apps that are compatible with KeePass PC databases.

I made no statement, incorrect or otherwise, I was asking about KeePass for Android.

Apologies. Please substitute/correct the word “your” above with the word “the”.
But purely to answer a previous question elsewhere within the thread. KeePass databases are ‘compatible’ in that they can be easily imported (or exported out) into or from Safe-In-Cloud.

Reply | Quote

Just attempting to justify some kind of answer to Paul T’s comment on why anyone would want to use SafeInCloud over KeePass, & of course your original incorrect statement that there are only three real choices of android apps that are compatible with KeePass PC databases.

To be precise, the OP asked about android apps compatible with a KeePass database. I see no indication that SafeInCloud can natively use a KeePass database. Accordingly, it hasn’t been established that my post was incorrect regarding apps known to be compatible with KeePass databases.

Again, the OP asked about android apps compatible with a KeePass database, not alternatives to KeePass, so this thread has really gone off the rails.

Reply | Quote

To be precise, the OP asked about android apps compatible with a KeePass database. I see no indication that SafeInCloud can natively use a KeePass database. Accordingly, it hasn’t been established that my post was incorrect regarding apps known to be compatible with KeePass databases.

Again, the OP asked about android apps compatible with a KeePass database, not alternatives to KeePass, so this thread has really gone off the rails.

And turned from an interesting dialogue/discourse into an insufferably uninteresting/uninformative semantic harangue of a cat fight! KeePass is cool!

Reply | Quote

I use Last Pass on all my devices. I have Windows 8.1 desktops, home and work, a 10.1″ Nextbook Tablet with Windows 8.1, Tab 3 with Android 4.2 and Galaxy S4 with Lollipop. I never have an issue with any of these platforms. I love it so much that I recommend it to customers and friends. All of my kids are using it and we are all happy with the results. For mobile devices there is a charge, $12 a year for unlimited devices. Amazing value!

Reply | Quote

Ditto. Well worth the $12 for Lastpass Pro. Implementation on Android is hugely improved from when they introduced the Android app.

Reply | Quote

I use Last Pass on all my devices. I have Windows 8.1 desktops, home and work, a 10.1″ Nextbook Tablet with Windows 8.1, Tab 3 with Android 4.2 and Galaxy S4 with Lollipop.

Ditto. Well worth the $12 for Lastpass Pro. Implementation on Android is hugely improved from when they introduced the Android app.

Reply | Quote

I’ve been using KeePass on all of my Android devices (2 phones and a tablet) as well as all of my Windows PCs (3 of them) for about 3 1/2 years. I couldn’t be more satisfied with the product. In fact, I was so satisfied with it that I actually sent the author a donation!!

What I especially like about the product is that the data base is encrypted so I have no qualms about storing it in my non-public area in DropBox. It really simplfies synchronization between devices.

You won’t go wrong with it – and it’s free!!!

Reply | Quote

I’ve been using KeePass on Windows and K2A for years with no problems. Some great tips in this thread, so I don’t have much useful to add other than “works for me”!

Reply | Quote

I have had great luck with Dashlane. On my android phone and windows laptop and desktop. All work well, not synced since I did not buy premium service. You can export/import from/to different devices.

Reply | Quote

I use SplashID Safe Pro ($1.99 a month or $19.99 per year). There’s a free version too. It works across Apple Iphone/iPad/Mac, and Windows (I’m using it on Windows 8.1, Windows 7 and Windows phone 8.1), Android and Chrome. You can sync via the cloud (encrypted) or you can sync device to device. Ticks all my boxes.
Paul

Reply | Quote

I’ve been using KeePassDroid in conjunction with the PC version for about a year now. Works great!

Reply | Quote

LastPass hacked.
http://www.securityweek.com/lastpass-breached-users-advised-update-master-passwords

cheers, Paul

Reply | Quote

LastPass hacked.
http://www.securityweek.com/lastpass-breached-users-advised-update-master-passwords

cheers, Paul

Not for the first time , either; will continue to steer clear.
http://windowssecrets.com/forums/showthread//157676-Opinions-of-Last-Pass/page2

Reply | Quote

That is not the case, sync is whole of database only.
To use a subset database you need to move the subset to another database and use that database to sync with the cloud / other subset database.
To open more than one database in KeePass use the KeeAutoExec plug-in and associated triggers from the trigger example page.

cheers, Paul

Reply | Quote

There is a possibility of data loss doing it that way. Consider this scenario:
1. You both change something in KeePass but the DB sync fails on the machine that made the change first.
2. The DB sync re-starts and finds a newer file which it downloads.
3. The first KeePass change is now lost in the sync.
You can recover the change by going back to the DB conflicted copies, but that is a manual process.
The link in post #37 shows you how to avoid that clash.

cheers, Paul

Reply | Quote

I’ve been doing it this way for about a year without issue. Thanks for the tip, though.

Reply | Quote

Well worth the $12 for Lastpass Pro

Pity their site has been hacked twice. Not paying attention to their own security!

cheers, Paul

Reply | Quote

KeePass works on your smartphone with either KeePass2Android, KeepShare or KeePassDroid. Why couldn’t you access your passwords?

cheers, Paul

Reply | Quote

I have been following this thread with interest since I use Lastpass and yes, I am concerned with the recent hacks to their servers. My only consolation is that my master password is NOT stored on their server and the database with my passwords is encrypted. I was looking at Keepass as an alternative but I also enjoy the ability to access my passwords on whatever platform I am on. (Linux, Windows, Android). When checking out Keepass I did not see an option to keep a database I could access from all of those devices without manually copying from device to device. Am I wrong or can you do the same with Keepass as I currently do with Lastpass? Also, if I can do that and decide to switch, can I export my database from Lastpass and store it for importing into KeePass?

Reply | Quote

You certainly can export it – see https://helpdesk.lastpass.com/your-lastpass-icon/#Export+To for more info

Eliminate spare time: start programming PowerShell

Reply | Quote

KeePass (and variants) can access any of the traditional file repositories, disk, cloud, flash.
If you want an encrypted cloud store, al la Lastpass, try TeamDrive – it’s free for private use.
KeePass will import Lastpass data. http://keepass.info/help/base/importexport.html

cheers, Paul

Reply | Quote

Paul and access-mdb, thanks for the response. It’s good to know I can save my database of passwords. The solution to use TeamDrive looks like just a cloud set up for my use. That’s not exactly what I’m looking for. I would like to have the storage provided by the password generator/storage solution. I have also been looking at Roboform. Does anyone have experience with that?

Thanks
Rick

Reply | Quote

Why would you trust the password manager provider to store your data? Lastpass have shown they can’t be trusted with the task. Just use your own web space and a proper password on your database.

There are plenty of reports here of Roboform being very good, but you have to use the paid version to store more than a few passwords.

cheers, Paul

Reply | Quote

Paul, thank you for your response. I use only Linux at home and have test Roboform on it. Linux Roboform is only a plugin for my browser (Firefox) and does not allow importing my LastPass database. I only use Windows at work and I use Android on my phone. For me it looks like RoboForm is not an option. My thought are turning to KeePass with the database on an encrypted thumb drive. The first thought that comes to mind would be how to get my database onto my Android phone? The first thing that comes to mind is to use the USB cable that came with the charger to transfer from my computer to the phone. Would this be a viable option?

Reply | Quote

Yes, you can copy the file via USB. The downside is it’s a pain to update.
I save a copy of my database to the web and use KeePass2Android to open it from there – KP2A caches a copy. Then I always have a copy available, no matter what.

cheers, Paul

Reply | Quote