mirror of
https://github.com/keepassxreboot/keepassxc.git
synced 2024-12-25 23:39:45 -05:00
e6a6ba7d63
keepass-cr-recovery used the challenge unpadded, add padding as in https://github.com/keepassxreboot/keepassxc/blob/develop/src/keys/drivers/YubiKeyInterfaceUSB.cpp\#L291 https://github.com/keepassxreboot/keepassxc/blob/develop/src/keys/drivers/YubiKeyInterfacePCSC.cpp\#L747 Closes #4744 |
||
---|---|---|
.. | ||
.gitignore | ||
go.mod | ||
go.sum | ||
main.go | ||
README.md |
keepassxc-cr-recovery
A small tool that helps you regain access to your KeePassXC password database in case you have it protected with YubiKey challenge-response and lost your key. Currently supports KDBX4 databases with Argon2 hashing.
Building
Tested with Go 1.13. Just run go build
.
Usage
What you need:
- your KeePassXC database
- your challenge-response secret. This cannot be retrieved from the YubiKey, it needs to be saved upon initial configuration of the key.
Then just run
keepass-cr-recovery path-to-your-password-database path-of-the-new-keyfile
It will prompt for the challenge-response secret. You will get a keyfile at the specified destination path. Then, to unlock your database in KeePassXC, you need to check "key file" instead of "challenge response" and load the file.