KeePassXC with Seafile synchronization
Manage passwords with KeepassXC and backup them in Seafile at the same time.
Password management with KeepassXC enables secure use of passwords through encrypted storage, secure generation and the ability to save a separate password for each service without having to remember each one.
When using a password manager such as KeepassXC, regular data backups are necessary: If the password database is lost, you will lose all the accesses managed with it. This can happen, for example, if a computer breaks down or a laptop is stolen.
These instructions explain how to automatically back up the database on LUH's own servers with Seafile - both with the cloud version for every LUH member and with the project storage. The technical and security-related requirements are specified in each case.
Installation of the required software
Please install KeepassXC and Seafile.
You will find instructions on how to do this under the following links:
Security requirements
The most important requirement is a secure password for the KeepassXC database itself and for the access to Seafile.
You have to remember both passwords as well or alternatively save them outside of the KeepassXC password manager and outside of Seafile/other cloud services. Without these two passwords, you will otherwise no longer be able to access the content of the password manager.
Please follow the instructions for securely creating and handling passwords.
Technical requirements
You need a folder on your computer that is automatically synchronized with Seafile and a KeepassXC database file located in this folder.
Automatically synchronized folder
Make sure that the Seafile client is started automatically with your operating system. Under Windows or Linux, this can be recognized by the yellow or orange cloud symbol in the status icon bar.
Create KeepassXC file
Under this link you will find instructions on how to create a new password safe with KeepassXC. Make sure that the generated file ("password safe") is protected with a secure password. Select the folder synchronized with Seafile as the storage location for the password safe.
Under no circumstances may this password be saved in a file in Seafile or on your computer. This would undermine the entire security concept of a password safe!
It is necessary to check the setup. This is the only way to ensure that the passwords are stored securely and without risk of loss.
- Make an (unimportant) change in the password safe with KeepassXC. Then open the Seafile web interface and check whether the KeepassXC password safe file located there has just been changed.
- If this is not the case, changes will not be saved automatically and you should check your setup. Possible sources of error are:
- KeepassXC is saving to a folder that is not synchronized with Seafile.
- The Seafile client is not running.
- If this is not the case, changes will not be saved automatically and you should check your setup. Possible sources of error are:
Prevention of synchronisation errors
Make sure that the Seafile folder is always synchronized so that changes to the KeepassXC database are always made on the server. If the synchronization takes place later, synchronization conflicts may occur (especially if the file is synchronized from several end devices, e.g. in shared folders).