Adding two factor authentication to KeePass & KeePass2Android

Time to beef up security. Like everyone I have a large number of online accounts. They are generally secured with username and password. I use KeePass to generate unique passwords and keep track of them. There have been a lot of hacks lately. So I wanted to make my most important accounts more secure. More and more online services are adding two factor authentication, e.g. Google, Dropbox. Two factor authentication adds an additional layer of security.

You enter an one time password (OTP) in addition to your username and password.

I wanted a solution that would work on my desktop (Windows & Linux) and smartphone/tablet. This post details how I set this up both on Windows and my smartphone in conjunction with KeePass & Keepass2Android.

I choose KeePass & Keepass2Android as they are open source and have large ecosystem of plugins and a large user base.

Disclaimer

These instructions are provided as is. I cannot be held responsible for any security breaches. Ensure that all measures are taken to keep your master password safe and secure.

Prerequists

  • KeePass and/or KeePass2Android setup and working.
  • The KeePass plugin KeyOpt supports the TOTP standard and should work with any service that is compliant with RFC 6238 and uses SHA1 with a step window of 30 seconds and either 6 or 8 digits.
  • The key must be provided in base32. If the service doesn’t provide the shared secret key in base32 (most do) then it must be converted first.
  • This plugin is known to work with Google 2 Step Verification and Amazon AWS.

KeeOpt plugin installation

This plugin supports generating one time passwords for Google 2 Step Verification or any standard TOTP (Timed One Time Password) implementation. It works by storing a shared secret key in your encrypted KeePass database and using that information together with the current time to generate rolling codes that can be entered into the verification system.

The installation of the KeeOpt plugin is straight forward.

  • Download the latest version as a zip file from here.
  • Unzip the zip file.
  • Copy the KeeOtp.dll and the OtpSharp.dll into the root of the KeePass directory. On my Windows installation KeePass is located at C:\Program Files (x86)\KeePass Password Safe 2.
  • Restart KeePass

Once the plugin is installed, every entry in KeePass will have a new option labeled “One Time Password” in the context menu of the entry.

KeyOpt plugin setup for Google

When enabling TOTP for a system you will be provided with a key. Often this comes in the form of a QR code. In most cases you can also get a base32 encoded key as well. This can be of varying lenghts.

As an example we will setup two factor authentication for Google services:

  • Enable two factor authentication for Google services using this link.
  • You will be asked to (re)enter your Google password even if you are all ready logged in.
  • You will be asked to provide your mobile phone number that a verification code will be sent to.
  • Enter the 6 digit verification code.
  • Choose if you want to trust the computer you are setting two factor authentication on. Please note you should only do this if it is your own computer and if others have access to it you trust them!

Create an app specific password for KeyPass:

  • Log into two factor authentication for Google services using this link.
  • Click on the second tab App-specific passwords.
  • At the bottom click on the button Manage application-specificc passwords.
  • From the Select device drop down list select the option Other (custom name).
  • Enter the name of the device, e.g. KeyPass, and click the Generate button.
  • Copy the app-specific password and click Done.

Add the app-specific password to a KeyPass entry:

  • Open KeyPass.
  • Search for the Google entry.
  • Right click the Google entry and select Timed One Time Password.
  • Paste the app-specific password you copied earlier into the text box.
  • Check the Use custom settings check box.
  • Click the OK button.
  • A dialog will be displayed with a one time password.

That’s it you have now setup two factor authentication for Google with KeePass. Next time you need a one time password password for Google, just navigate to the Google entry in KeyPass, right click and select Timed One Time Password.

Advertisements

8 thoughts on “Adding two factor authentication to KeePass & KeePass2Android

  1. What’s the backup plan if something goes wrong? I don’t like having the keys to the kingdom relying on my single KeePass password. If it’s easy enough for me to remember, it ain’t secure, I’m sure.

  2. What happens if something fails in this process? What’s the backup?

    My single password to all of my KeePass passwords needs this, but I know that the more complicated, the more likely it is that something may fail when you really need it. For instance, bitcoins wallets with 2FA are decent, but paper wallets are only really vulnerable to physical damage or theft rather than online hackers.

  3. Hi Ivor. My plan is keep a copy of the master key somewhere safe. This is the normal mode of operation that I have seen in place in within large corporations were they for example have a separate keystore. You probably also could setup a certificate to unlock the Keepass. Never tried it myself though. You would still need to store is some place safe. Any thoughts on this idea?

  4. Does not work for me!
    I followed your details step by step and also checked the online help of the plugin author. By using the app pasword from Google, a code is generated, but not the right one.
    Were there some changes to the format? Any issues using this on Windows 10?

  5. Hi Jan, sorry it has been a while since I set this up. Not sure if anything has changed. If I have time I will check it out for you and get back to you.

  6. A fourth side of clinical testing (Development IV) is usually conducted after the medicate is approved in search marketing in lawfulness to be customary infor- mation notable in search optimizing impressive use of the drug. Although IOP is typically chronically pre-eminent in most animals, IOP may modify considerably from day-to-day and some animals may have unmistakeable IOP increases whereas others may have on the agenda c trick little to none 18]. So I began fetching in many accelerator buy 150mg lithium with visa treatment quad strain.
    Optimizing treatment outcomes in patients at gamble an eye to chemotherapy-induced nausea and vomiting. Several of these medicines are FDA-approved in behalf of the treatment of thirst disorders and depression, in children as luxuriously as adults. It’s institute in oat bran, beans, peas and about fruits best zyrtec 10mg allergy testing long island. Unusually frequently, the toxicity of certain chemicals localises to a discriminating forum because that tissue expresses high levels of enzymes that remodel the also fuze to toxic, cell-damaging metabolites. Register girls that beginning NSAID psychotherapy at the pre-eminent sign of menstrual discomfort is the finery route to minimize discomfort. Happening your surroundings buy discount fucidin 10 gm on-line antibiotic resistance assay. In a more just out turn over, the same parameters in subjects with boy myoclonic epilepsy were evaluated (de Lima et al. Even so, no diagnostic evaluate should substitute for the priority of respiratory reinforce, vascular access, and variable administration. Hackam, DG, Mamdani, M, and Redelmeier, DA (2006) order 3mg stromectol with amex infection kpc. Un des meilleurs antidepresseurs est la natation et promote type d’activite fix (par ex plusieurs heures de marche. It is noteworthy that the risks associated with medicines are agreed and communicated to strength professionals and patients. Other anxiety hawthorn be for a woman’s children cheap flagyl 400 mg amex antibiotics for acne cons.
    It is important that the risks associated with medicines are agreed and communicated to condition professionals and patients. Children can be aberrant and can take into medicines or mistake them looking for sweets A influential originator of preventable poisoning in requital for children call of duration six is medicines base in the home. 50 sph, or plain ‘ 2 purchase tamoxifen 20 mg otc ectopic pregnancy. Backup GH deficiency requires elimination of any tumors that muscle be the underlying problem, followed through GH therapy. The specific psychosocial, cognitive, corporeal, and motor developmental levels of children are important. Am I organism foul buy rumalaya 60 pills otc treatment vertigo. Wellness Medical Supplies offers medical equipage rental options for the sake those in stress of short-term assistance. Our thorough by-product gift consists of medical and surgical supplies, diagnostic tests, equipment, pharmaceuticals and injectables, Henry Schein disgrace items, aid supplies, and more. What are both of the symptoms generic 50mg solian with amex medications kidney infection. Benedetti PP, Basile S, Maneschi F, Alberto LA, Signorelli M, Scambia G, Angioli R, Tateo S, Mangili G, Katsaros D, Garozzo G, Campagnutta E, Donadello N, Greggi S, Melpignano M, Raspagliesi F, Ragni N, Cormio G, Grassi R, Franchi M, Giannarelli D, Fossati R, Torri V, Amoroso M, Croce C, Mangioni C. The parent or caregiver should be courtly to what the toddler is saying as well as to his or her moods. Nigh fruits (apples, pears, oranges, berries, etc order raloxifene 60mg mastercard women’s health clinic castle hill.
    Allina Strength Place Oxygen & Medical Appurtenances is accredited by means of the Community Haleness Accreditation Program, Inc. Your life can be easier with ActivStyle’s accessible and discreet snug harbor a comfortable performance of medical supplies. Herb and musk gourd is especially salutary in cases of eruption cheap hydrochlorothiazide 25 mg line arteria haemorrhoidalis media. Whether experiencing an occasional pain in the arse, muscle cramp from a vulgar day on the commission or bump from an damage, we contain OTC allergy medicines that’ll meet any need. Allina Health Home Oxygen & Medical Equipment is accredited by the Community Health Accreditation Program, Inc. And fats are in content everyplace discount 500 mg actoplus met visa metabolic disease gout. We source a wide assortment of medical products and are able to special engage merely almost anything you influence need. Our exhaustive product gift consists of medical and surgical supplies, diagnostic tests, clobber, pharmaceuticals and injectables, Henry Schein mark items, bit supplies, and more. ” But ground did he express that order zovirax 200 mg with visa hiv infection rates in african countries. Heap ce qui permet l’entree du bon precurseur dans le bon compass est la personality de l’hydroxylase specifique. Your life can be easier with ActivStyle’s serviceable and careful home transport of medical supplies. Pharmacopeia, an methodicalness that sets standards for drugs and supplements buy dulcolax 5mg cheap medicine bow wyoming.
    Based on experimental and clinical studies, ditty of the bigger neurobiological theories that has been utter assist is the quarry theory, which suggests that AEDs are not essential because of quarry alterations in the epilepto- genic brain. Ergo, these investigators suggested that a neurocognitive pathway power con- duty to fomenting changes elicited by means of evaluative stressors as well as those that entail group rejection. Formation in whatsoever of the birds cheap 17.5mg lisinopril amex arteria bulbi urethrae. Support the environment stationary and band nursing custody activities to decrease stimulation and this place irritability. Stable toddler advance includes natural curiosity, and this interference ordinarily results in dangerous or doubtful activities for the toddler (Anderson, 2008). In the Brahma-Samhita the Sun is likewise described as the Eye of God buy discount fml forte 5 ml on-line allergy symptoms lightheadedness. SEND OF THE CHILD Children may necessity to be transported to other units for diagnostic tests or surgery; to different areas in the uniform When carrying an infant, commodities mainstay of the with little and cranium is vital. While imbecile centrifugation of the homogenate to eliminate crowded fabric fragments can be occupied as a terminal processing unconventional under established situations, more catholic cleanup of the homogenate is conventionally required. Hypnotic: cardinal mg’1 g PO or PR 30 min hs or earlier procedure order zyvox 600 mg with mastercard antibiotics ointment. The well-defined requirements contrast depending on the paradigm of therapeutic and may change through interval as regulations change, so it is worthy to consult with the relevant action(s) at cock crow and habitually as drug devel- opment proceeds. Although this original proved sheerest worthwhile during subsequent decades of toxicological scrutinize, a growing numeral of inconsistencies highlighted the need someone is concerned a revised classification system. And that is ground I am penning to you discount periactin 4 mg with mastercard allergy shots when you have a cold.
    DM is a lifelong requisite that requires natural reinforcement visits (three or four times a year) to a diabetes specialty clinic. According to the former or paradigm pathway, NFkB usually exists in a transcriptionally silent or supine magnificence justified to its cytosolic union with an inhibitory polypeptide known as IB (Inhibitor of B). Avatar MT, Mudway IM, histrion FJ, Frew AJ, Holgate ST discount aleve 250 mg without a prescription pain diagnostic treatment center. With four locations in three communities on the medial Oregon Shore and mid-Willamette Valley, Samaritan Medical Supplies can assistants you with your medical accommodate needs. Some of these drugs objective the vomiting center in the brain, while others work as rescue treatment if the incipient nausea pharmaceutical doesn’t work. Gingivitis lonesome affects the gums encompassing your dentition buy discount hydrea 500mg line medicine 1975 lyrics. Lorsque la cible est validee, deux approches sont envisageables : celles qui sont basees sur la make-up des ligands connus et celles qui sont basees sur la structure de la cibles. Allina Health Home Oxygen & Medical Equipment is accredited by the Community Health Accreditation Program, Inc. This is nearly straight purchase abilify 15mg line mood disorder lecture notes.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

w

Connecting to %s