• Rootiest@lemm.ee
      link
      fedilink
      English
      arrow-up
      6
      ·
      edit-2
      1 year ago

      YubiKey works for me, both on desktop with KeePassXC and on Android with KeePassDX to the same DB

      • chockblock@lemmy.world
        link
        fedilink
        arrow-up
        3
        ·
        1 year ago

        I like the look of KeePassDX but I was bothered by the fact that I have to use the yubikey every single time to unlock the database, unlike keepass2android which allows me to store the yubikey credential with biometric lock until the phone restarts. Keepass2android is not as nice of an app but that feature was really required for me.

        • Rootiest@lemm.ee
          link
          fedilink
          English
          arrow-up
          3
          ·
          1 year ago

          KeepPassXC can do this as well, but it does require the yubikey to be inserted every time you want to save a change to the database.

          Look under Settings -> Security -> Convenience -> Enable database quick unlock (Touch ID/Windows Hello)

          Using that I can quick-unlock my database using my laptop’s fingerprint scanner, just like how KeepPassDX works on Android.

          • chockblock@lemmy.world
            link
            fedilink
            arrow-up
            3
            ·
            1 year ago

            its not a huge issue on KeePassXC because I keep a yubikey nano plugged into my laptop, but for my phone, I haven’t been able to make this work reliably with KeePassDX. I’ll have to give it another go.

            • Rootiest@lemm.ee
              link
              fedilink
              English
              arrow-up
              2
              ·
              1 year ago

              Ah yeah you are right, it makes me tap my key every time I open the app.

              The biometrics seem to only replace the master password.

              I do wish it worked more like KeePassXC where the key is only needed to save the database after unlocking and confirming with fingerprint

    • chockblock@lemmy.world
      link
      fedilink
      arrow-up
      4
      ·
      1 year ago

      It does require some configuration within yubikey manager. I did not find it straightforward but once set up its really reliable.