KeePass: use a key file or a regular password?

Posted by RCIX on Super User See other posts from Super User or by RCIX
Published on 2009-08-14T02:16:19Z Indexed on 2010/04/10 20:03 UTC
Read the original article Hit count: 344

Filed under:

keepass

|

password-management

|

passwords

|

encryption

I'm setting up a KeePass database and it offers the ability to use a key file, which it says is more secure because it can use a longer and more complex password but is easier to break because you only need the key file to open the database. I'll only be using the key file on 2 computers (one desktop and one laptop), wo which is the best option?

Note that it's definitely more appealing to use the key file for me because i have a hard time remembering anything close to a random password.

© Super User or respective owner

Related posts about keepass

keepass not working with wine

as seen on Super User - Search for 'Super User'
I installed Keepass 1.16 in my thumbdrive, which reportedly works with wine (as per Keepass homepage), but after entering the master password it just hangs and shows the "The program keepass has encountered a serious problem and needs to close" screen. I got this error msg among the stack trace on… >>> More
Installing the Newest KeePass for MacOSX from Source

as seen on Super User - Search for 'Super User'
I've transitioned our passwords to KeePass. LastPass looks cool, but I prefer a system where we control the database locally rather than it being kept in the cloud. I have a windows and Linux system and both are able to access our KeePass database easily. On my Linux system (Ubuntu), I simply installed… >>> More
How to brute force keepass with certain letters and characters

as seen on Super User - Search for 'Super User'
I forgot my password to keepass but I know pretty much what letters and the order they go in, but I'm not sure if I put anything before or after my "main" password or capitalized anything. I tried every combo I could think of but I still can't get in (invalid/wrong key error). I also enabled use master… >>> More
KeePass justification

as seen on Super User - Search for 'Super User'
I work at a place that tries to take security seriously, but sadly, they often fail. Currently, one of the major ways they fail is password management. I personally have about 20 accounts (my personal user id on lots of machines). For shared "system" accounts, there are about 45 per environment;… >>> More
GnuPG Command Line - Verifying KeePass Signature

as seen on Super User - Search for 'Super User'
I'm trying to verify the PGP Signature of the latest version of KeePass 2.14's setup file against this signature, but this is the output I receive: C:\Program Files (x86)\GNU\GnuPG>gpg.exe --verify C:\Users\User\Desktop\KeePass-2.14-Setup.exe gpg: no valid OpenPGP data found. gpg: the signature… >>> More

Related posts about password-management

Company Password Management

as seen on Server Fault - Search for 'Server Fault'
The topic of personal password management has been covered in great detail time after time. This question is aimed at the business or organization that needs to keep track of many unique passwords for many clients. What are some strategies/tools or ideas you all have for accomplishing this task? I… >>> More
Company Password Management

as seen on Server Fault - Search for 'Server Fault'
The topic of personal password management has been covered in great detail time after time. This question is aimed at the business or organization that needs to keep track of many unique passwords for many clients. What are some strategies/tools or ideas you all have for accomplishing this task? I… >>> More
Unix Password Management Keyring

as seen on Super User - Search for 'Super User'
I am looking for a password manager for a command-line Unix environment. So far all I can find are keyring applications for Windows, Linux, and Mac. But no command-line Unix interfaces. My main goal is to be able to access a password keyring through an SSH connection to a machine that has no graphical… >>> More
Password Management for Oracle WebLogic customers

as seen on Oracle Blogs - Search for 'Oracle Blogs'
One of the most common requests for enhancements I get across my desk is that customers wish to allow end users to change their passwords from our products. Now, typically password management is not in the realm of individual applications but it is an infrastructure requirement, so we don't usually… >>> More
Local Password Management

as seen on Super User - Search for 'Super User'
In our office (and I am sure many others) we access various websites and tend to share one account with our team. For example, we share credentials to Ebay and change them every few weeks to maintain some sense of security. However, we know this does not allow for any type of accountability for… >>> More