Note: The PPA will install a whole bunch of mono libraries in your system. If you are not comfortable with it, this is not for you.

Install KeePass 2 in Ubuntu

Open a terminal and type:

sudo apt-add-repository ppa:jtaylor/keepass
sudo apt-get update
sudo apt-get install keepass2

That’s all you need to get KeePass 2 working in Ubuntu.

Importing KeePassX database to KeePass 2

If you have been using KeePassX, your password database will be in .kdb form which is incompatible with KeePass2 .kdbx. Furthermore, when you try to import in your .kdb database to KeePass 2, it will show an error stating that the importing is only supported in Windows.

A way to get around this is to first export your .kdb database to KeePassX XML file.

Next, in your KeePass2, go to FIle -> Import. Select KeePassX XML as the format and choose the XML file that you have earlier exported.

Done.

Now, if you are like me, already have a huge database of password stored in your KeePass (or KeePassX), you won’t want to enter individually to LastPass. Similarly, if you are using LastPass and intend to switch to KeePassX (because LastPass don’t support desktop app password), you will be looking for ways to import/export your password database from one to another.

Import KeePassX password to LastPass

Note: I am using KeePassX (the Linux port of KeePass), so this tutorial will be based on KeePassX.

Open your KeePassX and log into your database. Go to “File -> Export to -> KeePassX XML File“. Save the file to your desktop or Home directory.

Open a Firefox browser and make sure you have LastPass installed. Click on the LastPass button and go to “Tools -> Import From -> KeePass -> Import”.

When prompted, select the keepass.xml file that you have just exported. LastPass will scan the XML file and ask you which passwords you want to import.

Select the password(s) you want to import and click “Import”. That’s it. Your KeePassX password is in LastPass now.

Note: I have tested it on Google Chrome and it doesn’t work. It could be due to my browser configuration or issue with the LastPass extension. I didn’t verify it. I got it working fine in Firefox.

Import LastPass password to KeePassX

The method to import LastPass password to KeePassX is not as straighforward because the LastPass export format is not supported by KeePassX. We can however use a conversion script lastpass2keepass to convert the password format.

First, in Firefox browser, click on the LastPass icon and go to “Tools -> Export to -> LastPass CSV file“. Save the file to your Home folder.

Next, download the lastpass2keepass script, extract the files and move the lastpass2keepass.py file to your Home folder. (You must make sure that the LastPass export file and the lastpass2keepass.py file are in the same folder)

Open a terminal and type:

chmod +x lastpass2keepass.py
python lastpass2keepass.py lastpassexport keepass.xml

Remember to replace the lastpassexport to the Lastpass export filename.

If everything goes smoothly, you should have a lastpassexport.export.xml file in the same folder. This will be in KeePassX format. Now open your KeePassX and import this XML file in.

Reference: LastPass forums

If you’re like me, you cheat a little. You probably use your e-mail address as a username whenever you can (or recycle the same username), re-use the same password depending on the sensitivity of whatever you’re logging into, and save certain passwords on the sites you visit frequently. Let’s not kid ourselves- we know in the back of our minds that this isn’t the best way to do it, but everybody does it anyways. But is there a better way? Can we keep our really sensitive information safe with the same kind of convenience given by saved passwords, recycled usernames, and re-used passwords?

Well in a word, “no,” but we can come close. Password management applications offer a compromise between convenience and security by storing an encrypted database of your usernames and passwords behind one master password.

Enter KeePassX, a cross-platform password manager based on the old Windows Keepass Password Safe. While not as polished as the commercial alternatives like 1Password, KeePassX is no less functional and comes without the rather hefty $39.95 price tag.

The main window of KeyPassX is simple and intuitive- 3 different panes containing the list of password groups, the list of passwords within the active group, and a sort of “card” showing the basic information for each password entry. I’m partial to the 3-column layout of Apple’s Address Book and the various Apple Mail plugins that do the same thing, but that’s a minor issue. Passwords and usernames are blocked out with asterisks, which you can view by opening the entry.

Creating a new entry brings up a window in which you enter a Title, Username, URL, password, and a comment. You can get to the highly customizable password generator from here; which allows you to select the type of characters to include, the length, and various options for character selection. As you can see from the screen shot, nobody is ever going to guess “~pE2%*dp=*K=?W7$J1,Kmo@;|“. You can set a password to expire after a certain amount of time, as well as choose an icon for each entry.

Worried about security?

KeePassX’s databases are stored locally and protected by 256-bit AES or Twofish encryption. Even 128-bit encryption like that used by 1Password would take millions of years to crack via brute-force, so you’ve really got nothing to worry about on that front.

Other nice features of KeePassX are cross-platform database formats and my personal favorite- the ability to use a key file to unlock the database. So if you wanted you could only unlock your database by inserting a USB stick containing the key file.

There are some issues I have with KeePassX.  First of all it’s still in beta (version 0.4.0 as of this writing). While I have not experienced any crashes after a couple days of use, stability is something I consider of paramount importance for a program that handles such sensitive information. While the main screen has a “New Entry” button, a “New Group” button would be nice also. Safari or FireFox integration would be nice, but since it’s open source maybe someone much smarter than I am will create a plugin.  The Settings are a little sparse- for example, it would be nice to be able to make the username visible in the Entry list. Lastly, the program could be a little more robust by offering different categories of entries such as Credit Card numbers and software license information, both of which have fields not necessarily applicable to logins and passwords.

Minor quibbles aside, KeePassX is a promising alternative to storing a text file in an encrypted disk image or shelling out $40 for commercial software. I am very impressed with the program so far, and plan to use it extensively.

Do you know of any other password managers?  Leave a note in the comments.