Using the KeePassXC password manager you can:

  • Memorizzare molte password in un database criptato protetto da una singola frase d'accesso a vostra scelta.
  • Utilizzare sempre password diverse e più resistenti, dal momento che vi dovrete ricordare una singola frase d'accesso per sbloccare l'intero database.
  • Generare password casuali molto forti.

Creating and saving a password database

Follow these steps to create a new password database and save it in the Persistent Storage for use in future working sessions.

To learn how to create and configure the Persistent Storage, read the documentation on the Persistent Storage.

  1. When starting Tails, unlock the Persistent Storage.

  2. In the Persistent Storage settings, verify that the Personal Data feature is turned on.

    Otherwise, turn it on, restart Tails, and unlock the Persistent Storage.

  3. To start KeePassXC, choose Applications ▸ Accessories ▸ KeePassXC.

  4. To create a new database, click Create new database.

  5. Continue with the defaults settings in the configuration screens General Database Information and Encryption Settings.

  6. The database is encrypted and protected by a passphrase. In the configuration screen Database Credentials:

    • Specify a passphrase of your choice in the Enter password text box.
    • Type the same passphrase again in the Confirm password text box.
    • Click Done.
  7. Save the database as Passwords.kdbx in the Persistent folder.

Restoring and unlocking the password database

Follow these steps to unlock the password database saved in the Persistent Storage from a previous working session.

  1. When starting Tails, unlock the Persistent Storage.

  2. To start KeePassXC, choose Applications ▸ Accessories ▸ KeePassXC.

  3. If you have a database named Passwords.kdbx in your Persistent folder, KeePassXC automatically displays a dialog to unlock that database.

    Inserite la frase d'accesso per questo database e cliccate OK.

  4. If you enter a wrong passphrase the following error message appears:

    Error while reading the database: Invalid credentials were provided, please try again.

Storing your KeePassXC settings in the Persistent Storage

To store your KeePassXC settings in the Persistent Storage, in addition to the password database:

  1. Turn on the Dotfiles feature of the Persistent Storage.

  2. Restart Tails.

  3. Unlock the Persistent Storage in the Welcome Screen.

  4. Choose Places ▸ Dotfiles.

  5. Create the folder /live/persistence/TailsData_unlocked/dotfiles/.config/keepassxc/.

  6. Copy the file ~/.config/keepassxc/keepassxc.ini to /live/persistence/TailsData_unlocked/dotfiles/.config/keepassxc/keepassxc.ini.

Migrating a password database from Tails 2.12 and earlier

The database format of KeePass 1 (Tails 2.12 and earlier) is incompatible with the database format of KeePassXC (Tails 4.0 and later).

To migrate your database to the new format:

  1. Start KeePassXC.

  2. Choose Database ▸ Import ▸ Import KeePass 1 Database.

  3. Select your database, for example keepassx.kdb.

  4. After your database is open, save it to the new format:

    • Choose Database ▸ Save Database.

    • Save the database as Passwords.kdbx in the Persistent folder.

    Note that only the file extension is different:

    • kdb for the old format.
    • kdbx for the new format.
  5. This operation does not delete your old database from your Persistent folder.

    You can now delete your old database or keep it as a backup.

Additional documentation

For more detailed instructions on how to use KeePassXC, refer to the KeePassXC guide of the Electronic Frontier Foundation.