rixxc/KeePassDX
1
0
Fork 0
mirror of https://github.com/Kunzisoft/KeePassDX.git synced 2025-12-04 15:49:33 +01:00
Code Issues Packages Projects Releases Wiki Activity

Reworked FAQ and changed title

Allan Nordhøy
2020-02-27 01:21:42 +01:00
parent 89d9534208
commit a7f5995928
2 changed files with 79 additions and 78 deletions
Download Patch File Download Diff File Expand all files Collapse all files

78
F.A.Q..md

@@ -1,78 +0,0 @@
## Why KeePass DX?
KeePass DX is an Android app implemented from Keepass password manager.
KeePass DX was created to meet the security and usability needs of a KeePass app on Android :
* To be easy to use with secure password management and form filling tools.
* To use only tools under open source license to guarantee the security of the app (With open source store and no closed API).
* To be in a native langage (java) for weight, security and a better integration of the app.
* To respect Android design, architecture and ergonomic.
## What makes KeePass DX stand out from other password managers?
* We do not recover your sensitive data on a private server or a closed cloud, you have control of your passwords.
* We respect KeePass file standards to maintain compatibility and data porting on different devices (computers and portable devices with different operating system).
* The code is open source, which implies increased security, you can check how the encryption algorithms are implemented.
* We remain attentive to your needs and we can even integrate the features that you have defined.
* We do not put advertising even in the free version.
## Can I open my database without my master key (master password and/or key file)?
**No**, you can not open a database file without the master password (and / or) the associated key file. Be sure to remember your master password and save the key file in a safe place.
## Can I open my database easily other than with a password?
**Yes**, we have integrated a secure openning option of fingerprint for android devices that support this feature, so no one can access the app without scanning his/her fingerprint or fill a master key. (You must always know your master password, the fingerprint is only a quick unlock tool.)
## How am I sure my passwords are safely stored on the app?
We allow users to save and use passwords, keys and digital identities in a secure way by **integrating the last encryption algorithms** and **Android architecture standards**.
You can increase the security of your database by changing the encryption algorythm and increasing the rounds of encryption keys. (In Settings -> Database Settings when your database is open) _Warning: Increase the number of rounds sparingly to have a reasonable opening time._
## Why not an online version?
The offline and online client concepts only exists with other apps because the file access network tools are directly integrated into the code of the main app. Which is a very dubious choice knowing that it **is not normally the purpose of an Android password management app to take care of external file synchronization on clouds** (which can be under closed licensed and recover your data base), it is rather the purpose of the [file managemer app](https://developer.android.com/guide/topics/providers/document-provider).
## Can I store my data on a cloud storage?
Yes this is possible. You can of course add the cloud app of your choice to your file manager ([NextCloud](https://f-droid.org/en/packages/com.nextcloud.client/), [Owncloud](https://search.f-droid.org/?q=owncloud), [Dropbox](https://play.google.com/store/apps/details?id=com.dropbox.android), [Google Drive](https://play.google.com/store/apps/details?id=com.google.android.apps.docs)...). We recommend using a cloud with personal server and open source license, like [NextCloud](https://f-droid.org/en/packages/com.nextcloud.client/) to be sure how your databases are stored.
## How to open my database file from a cloud?
Keepass DX uses the default file manager of your device. **If this manager is not connected to your cloud, you need to open your cloud app and select your database file.** The linked file provided by the content provider may have a strange name with series of numbers and letters (like eab4678a-33f1-4890-acba-42f1b5cbac13), the alias feature can be used for better visibility.
We're thinking about creating or modifying an open source file manager app to make it easier to open remote files.
## Why do I see an error asking me to re-open the database file from my file brower?
KeePass DX uses one of your device's file manager and stores the generated links in the "recent databases" list.
If the file manager used breaks the link, it is necessary to reopen the file from your manager because it does not have the functionality to keep the persistent links. (More information on [File Manager and Sync](https://github.com/Kunzisoft/KeePassDX/wiki/File-Manager-and-Sync))
## Can I recover my passwords on another device if I loose my main device?
**Yes** you can, but you **must first save the .kdb or .kdbx file from your database to an external storage** (like a hardrive or a cloud). We recommend you save your data after each modification so incase you loose your android device you could retrieve the data and import it into the new KeePass DX installed on the new android device.
## Does this app display attachments?
Not for the moment but it's planned. other features need to be done before.
## Why is the database file smaller after a save?
The code for the database is constantly optimized (by ordering the nodes, managing the compression, and using the adapted version of the base). The file size will be smaller but all data will be present.
## Why are updates not available at the same time on all stores?
- **PlayStore** only needs an APK generated and manually signed to be available on the store, it usually takes few hours to be available because it is deployed with fastlane. But the management of the APK and its data by the google servers is obscure.
- **F-Droid**, to ensure that the code is open source, checks the sources directly on git repository (by checking the presence of new tags) and builds itself the APK that the server signs during the compilation of code and dependencies. Updating the project will take 1-5 days for F-Droid to analyze all available repositories, build sources and deploy the generated APK. So F-Droid is slower for deployment but it is run by volunteers and guaranteed a clean APK. :)
## Why a Libre, Free and Pro version?
All versions currently have the same usage features.
* [The Libre version](https://www.f-droid.org/en/packages/com.kunzisoft.keepass.libre/), for paranoids, is the version provided by F-Droid, it is guaranteed without any proprietary code and is not linked to any closed service. The app is automatically signed and compiled from the github repository. It is possible to unlock the themes with a procedure.
* [The Free version](https://play.google.com/store/apps/details?id=com.kunzisoft.keepass.free), for everyday use, is the basic version of the Google Play Store. It is compiled and signed by the developers and sent to the Play Store to be cataloged by Google. It has the same features as other versions with alternative themes blocked.
* [The Pro version](https://play.google.com/store/apps/details?id=com.kunzisoft.keepass.pro), for people who want everything, is the unlocked version of the Google Play Store. It has unlocked themes and will have content to facilitate the integration of entries for commonly used services. (It is currently available only to assist developments.)
For the moment, there is no difference between Libre, Free and Pro versions code (except for access to the themes). Later, the pro version will offer content to easily fill in entries for the most used commercial services (mainly sign icons and templates for google, amazon ...) but no services in the background of the app.
The Libre version will remain a version without any proprietary content and will not offer basic tools facilitating the recording of commonly used inputs.
## Why not give direct access to alternative themes?
Alternative themes are present to encourage users to contribute. They might just not be there because they do not provide any usage feature but are rather cool and replace the advertisement.
The procedure to unlock these themes in KeePass Libre is sent by email manually so feel free to ask at [contact@kunzisoft.com](mailto:contact@kunzisoft.com) if you have made a contribution.
## Why KeePass DX is still in beta?
**Developments are not yet completed** and basic features such as managing attachments and synchronization are not yet integrated. Of course, the app respects a specific update workflow to avoid bugs even in its beta version.
## Is an IOS version planned?
**Yes**, but only if the Android version is used by a majority of users and if there is a high demand.
## Can I suggest features and report bugs for the app?
**Yes**, we welcome this you could go ahead and do that on our github: [https://github.com/Kunzisoft/KeePassDX/issues](https://github.com/Kunzisoft/KeePassDX/issues)

79
FAQ.md Normal file

@@ -0,0 +1,79 @@
## Why KeePassDX?
It is an Android app implementation of the KeePass password manager.
KeePassDX was created to meet the security and usability needs of having a KeePass app on Android:
* Easy secure password management and form filling tools.
* Only libre software tools to guarantee the security of the app.
* Libre software store and no closed API
* Native langage (Java) for weight, security and a better integration of the app.
* Android design, architecture and ergonomics.
## What makes KeePassDX stand out from other password managers?
* Your sensitive data is not stored on a private server or in a closed cloud. You have control of your passwords.
* KeePass file standards are used to maintain compatibility and portability with different devices (computers and portable devices with different operating systems).
* The code is libre software, meaning you can check how the encryption algorithms are implemented.
* The developers are attentive to your needs, and can even integrate the features you define.
* No advertising. Not even in the free version.
## Can I open my database without my master key (master password and/or keyfile)?
**No**, you can not open a database file without the master password (and/or) the associated keyfile. Be sure to remember your master password and save the keyfile in a safe place.
## Can I open my database easily other than with a password?
**Yes**, there is a secure fingerprint opening option for Android devices that support this feature, so no one can access the app without scanning your fingerprint or enter your master key. (You must always know your master password, the fingerprint is only a quick unlock tool.)
## How am I sure my passwords are safely stored in the app?
Users are allowed to save and use passwords, keys and digital identities in a secure way by **integrating the last encryption algorithms** and **Android architecture standards**. All the source-code can be used, studied, changed, and distributed freely.
You can increase the security of your database by changing the encryption algorithm and increase the rounds of encryption keys. (In Settings → Database Settings when your database is open) _Warning: Increase the number of rounds sparingly to maintain a reasonable opening time._
## Why not an online version?
The offline and online client concepts only exists ih other apps because the file access network tools are directly integrated into the code of the main app. This is a very dubious choice considering **it is not normally the purpose of an Android password management app to take care of external file synchronization on clouds** (which can be under closed licensed and recover your database), it is rather the purpose of the [file manager app](https://developer.android.com/guide/topics/providers/document-provider).
## Can I store my data in cloud storage?
Yes. You can of course add the cloud app of your choice to your file manager ([NextCloud](https://f-droid.org/en/packages/com.nextcloud.client/). We recommend using a cloud with a personal server and AGPLv3+ license, like [NextCloud](https://f-droid.org/en/packages/com.nextcloud.client/). If you want a minimal tool, use [BorgBackup](https://borgbackup.readthedocs.io/en/stable/).
## How do I open my database file from a cloud?
KeepassDX uses the default file manager on your device. **If this manager is not connected to your cloud, you need to open your cloud app and select your database file.** The linked file provided by the content provider may have a strange name with a series of numbers and letters (like eab4678a-33f1-4890-acba-42f1b5cbac13), the alias feature can be used for better visibility.
Creating or modifying an existing libre file manager app would make it easier to open remote files.
## Why do I see an error asking me to re-open the database file from my file browser?
KeePassDX uses one of your device's file manager and stores the generated links in the "recent databases" list.
If the selected file manager breaks the link, it is necessary to re-open the file from your manager because it does not have the functionality to keep the persistent links. (More info on this in [File Manager and Sync](https://github.com/Kunzisoft/KeePassDX/wiki/File-Manager-and-Sync))
## Can I recover my passwords on another device if I loose my main device?
**Yes**, but you **must save the .kdb or .kdbx file from your database to external storage first** (like a hard-drive or to a secure cloud). It is recommended to save your data after each modification in case you loose your Android device. That way you can retrieve the data and import it into a new installation of KeePass DX on your new Android device.
## Does this app display attachments?
Not at the moment, but it's planned. Other features take precedence.
## Why is the database file smaller after a save?
The code for the database is constantly optimized (by ordering the nodes, managing the compression, and using the adapted version of the base). The filesize will be smaller, but all data will be present.
## Why are updates not available at the same time on all stores?
- the **Play Store** only needs an APK to be generated and manually signed to be added, it usually takes a few hours to be available because it is deployed with Fastlane. The management of the APK and its data by the Google servers is obscure.
- On **F-Droid**, to ensure the code is libre, it checks the sources of the Git repository directly (by checking the presence of new tags). Then an APK is built that the server signs during the compilation of the code and dependencies. Updating the project takes 1-5 days for F-Droid to analyze all available repositories, build sources and deploy the generated APK. So F-Droid is slower for deployment, but is run by volunteers and guaranteed to be a clean APK. :)
## Why a Libre, Free and Pro version?
All versions currently have the same usage features.
* [The Libre version](https://www.f-droid.org/en/packages/com.kunzisoft.keepass.libre/) is the version provided by F-Droid, it is guaranteed to have no proprietary code, and is not linked to any closed services. The app is automatically signed and compiled from the GitHub repository. It is possible to unlock the themes with a procedure.
* [The Free version](https://play.google.com/store/apps/details?id=com.kunzisoft.keepass.free), for everyday use, is the basic version at the Google Play Store. It is compiled and signed by the developers, and sent to the Play Store to be cataloged by Google. It has the same features as other versions with alternative themes blocked.
* [The Pro version](https://play.google.com/store/apps/details?id=com.kunzisoft.keepass.pro), is for people who want everything, is the unlocked version of the Google Play Store. It has unlocked themes and will have content to facilitate the integration of entries for commonly used services. (It is currently available only to assist development.)
For the moment, there is no difference between the Libre, Free and Pro version of the code (except for access to the alternative themes). Later, the pro version will offer content to easily fill in entries for the most used commercial services, (mainly sign-in icons and templates for Google, Amazon …) but no services in the background of the app.
The Libre version will remain a version without any proprietary content and will not offer basic tools facilitating the recording of commonly used inputs.
## Why not give direct access to alternative themes?
Instead of providing any functionality, they are a cool incentive to contribute, and replace the advertisement.
The procedure to unlock these themes in KeePass Libre is sent by e-mail manually so feel free to ask at [contact@kunzisoft.com](mailto:contact@kunzisoft.com) if you have made a contribution.
## Why is KeePassDX still in beta?
**Developments are not yet completed** and basic features such as managing attachments and synchronization are not yet integrated. Of course, the app respects a specific update workflow to avoid bugs even in its beta version.
## Is an iOS version planned?
**Yes**, but the Android version is used by a majority of users and only if there is high demand.
## Can I suggest features and report bugs for the app?
**Yes**, do so on GitHub: [https://github.com/Kunzisoft/KeePassDX/issues](https://github.com/Kunzisoft/KeePassDX/issues)