The use of strong encryption does not detract from the need for a sufficiently complex password, since an attacker with a pilfered copy the KeePass database can attempt to crack it using dictionary and password guessing tools. And AES-256 is mathematical equivalent of 2 256 key possibilities. AES (Advanced Encryption Standard) is a cipher (secret code, in other words) used widely across the internet, and is, in theory, uncrackable, given the number of keys used. SHA-256 is an almost unique 256-bit hash. It’s a one-way state: It can’t be decrypted. To unpack that a bit for the layperson, SHA (Secure Hash Algorithm) is a type of cryptographic hash, or “signature” for a computer file (text or data). A master key generated from the user password is hashed using SHA-256, which is subsequently used to encrypt the password database with AES-256. (There are two versions of KeePass that are maintained concurrently we will be focusing our attention on KeePass 2.)Īt its core, KeePass is straightforward to understand. Here, we take a closer look at how you can securely set up KeePass – a highly rated open-source password manager – in a way that keeps your passwords within easy reach. And, if you don’t mind putting in a modicum of effort, you can still establish a non-cloud-based password manager that can be utilized across multiple devices. Those incidents aside, password managers remain the best way to avoid reusing weak passwords which is as commonplace as the number of password leaks that happen every year, even on large, reputable websites. However, the compromise of at least one cloud-based password manager last year and recent actions by a government agency may have given you second thoughts about using the cloud for something that instinctively feels like it should be managed locally.

Nothing helps strong passwords become a central tenet of your electronic life than conscientious use of a password manager.

Keepass 2 portable