Get started with Keepass on EndeavourOS - safe the kdbx-file on GDrive - would you reccommend Rclone on LXQt!?

General system Applications
1

…get started with Keepass on EndeavourOS - safe the kdbx-file on GDrive - would you reccommend Rclone on LXQt!? :melting_face:

good day dear experts,

well i want to get started with Keepass on EndeavourOS.

And that said: i want to store the .kdbx file from Keepass on GDrive - i have no other Option. OR do you have some recommendations!?

some assumptions: I guess that it is encrypted in the keepass-installation on my device just before it even lands in Google Drive.

So i guess that this file will be on Google Drive encrypted — completely :wink: :grinning_face:

…subsequently the content can only be decrypted with my so alled:

  • Master password,
  • optional Keyfile,
  • and AES-256 encryption

that means that Google CANNOT see the passwords.
They only see “an encrypted file”.

Ths is good for the security-Level

The password database is then (consequently) protected by:

  • AES-256 or ChaCha20 (depending on the setting)
  • Key Derivation Function (Argon2 or AES-KDF)
  • Key transformation rounds
  • Option: additionally Keyfile for 2-factor encryption

that makes me lucky - cause: even if someone steals the file from Google Drive:

now the question: whats your recommendation for the setup: i want to use EndeavourOS, then what is the best solution to connect to Google Drive!?

whats your recommendation No. 1:

should i use → Rclone + systemd mount (stable, secure, 100% controllable)**

some of my friends told me that i should go with Rclone: They are convinces by Rclone since it

  • Works perfectly on EndeavourOS
  • Extremely reliable
  • Very actively maintained
  • Encryption optional possible
  • Independent of KDE versions
  • Sync or mount possible
  • Ideal for KeePass, as Rclone handles conflicts cleanly

The question is: Can i use it with LXQT too - or do i have to use KDE (or such things!?)

i look forward to hear from you

regards

2

Hi,

Regarding keepass, I would recommend you to use keepassxc, more modern and updated.

For GDrive, you may look at this : Which are the best tools to use Google Drive on Linux?

3

I use rclone with One Drive for work stuff and its been solid! I used it in KDE and Gnome without issues.

ps: I’m not the one paying $ to Microsoft, my boss is :sweat_smile:

4

thank you so much - awesome

5

For all of you storing your keypass database on commercial cloud drives like google, Microsoft etc. I recommend to have a look into bitwarden.

Bitwarden is also for free and it comes with the cloud service included. The bitwarden database is stored in the bitwarden cloud. bitwarden software is open source(!) and has been audited several times (anual audits by third parties). Database is encrypted on the client and then uploaded to the cloud. That is pretty much what you intend to do with keypass and GDrive or Microsoft cloud.

Positive side effect with bitwarden:

  • no extra cloud provider needed
  • excellent clients and browser extensions for various operating systems incl. iphone, android, windows, etc..
  • Database is kept in sync automatically by the client. No extra effort with rclone or such.
  • clients work with local copy of the database and do not need internet to operate
  • extra features like “emergency access” (only for premium accounts for 10 USD/yr)

I am not affiliated with bitwarden. I am just saying. :wink:

6

If you want a “serverless” sync of your kbdx file (and other files of course, too if you like) you should have a look on https://syncthing.net/

The service once set up is running in the background and you can sync whatever directory with other syncthing clients - directly, P2P, no server needed. Theres also a syncthing-fork android client on f-droid.

I use it to sync 4 laptop devices and 2 androids (and for availability 1 always on debian-home server on a HP t630 thin client. Along with security related kbdx I sync my 500 GB media files and some other stuff. Real cool. Take a bit to get familiar with, but absolutely worth it!!

7

good day dear PeterRies and mbod

many thanks for the answers - and for the sharing of these ideas. This is very good! THANKS

i am glad to see all these awesome ideas - regarding the usage of Keepass.

greetings :upside_down_face: :grinning_face: