keepassxc/utils/keepassxc-cr-recovery
dependabot[bot] c0b71126bd Bump golang.org/x/crypto in /utils/keepassxc-cr-recovery
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.1.0 to 0.17.0.
- [Commits](https://github.com/golang/crypto/compare/v0.1.0...v0.17.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-12-18 19:09:51 -05:00
..
.gitignore add challenge-response recovery tool (see keepassxreboot/keepassxc#1734) 2020-01-27 17:55:53 -05:00
go.mod Bump golang.org/x/crypto in /utils/keepassxc-cr-recovery 2023-12-18 19:09:51 -05:00
go.sum Bump golang.org/x/crypto in /utils/keepassxc-cr-recovery 2023-12-18 19:09:51 -05:00
main.go Fix keepass-cr-recovery 2022-03-11 10:51:50 -05:00
README.md Minor documentation and script cleanups (#6868) 2021-09-21 00:17:46 -04:00

keepassxc-cr-recovery

A small tool that helps you regain access to your KeePassXC password database in case you have it protected with YubiKey challenge-response and lost your key. Currently supports KDBX4 databases with Argon2 hashing.

Building

Tested with Go 1.13. Just run go build.

Usage

What you need:

  • your KeePassXC database
  • your challenge-response secret. This cannot be retrieved from the YubiKey, it needs to be saved upon initial configuration of the key.

Then just run

keepass-cr-recovery path-to-your-password-database path-of-the-new-keyfile

It will prompt for the challenge-response secret. You will get a keyfile at the specified destination path. Then, to unlock your database in KeePassXC, you need to check "key file" instead of "challenge response" and load the file.