KeePassXC with Seafile synchronization

Manage passwords with KeepassXC and backup them in Seafile at the same time.

Password management with KeepassXC enables secure use of passwords through encrypted storage, secure generation and the ability to save a separate password for each service without having to remember each one.

When using a password manager such as KeepassXC, regular data backups are necessary: If the password database is lost, you will lose all the accesses managed with it. This can happen, for example, if a computer breaks down or a laptop is stolen.

These instructions explain how to automatically back up the database on LUH's own servers with Seafile - both with the cloud version for every LUH member and with the project storage. The technical and security-related requirements are specified in each case.

Installation of the required software

Please install KeepassXC and Seafile.

You will find instructions on how to do this under the following links:

Security requirements

The most important requirement is a secure password for the KeepassXC database itself and for the access to Seafile.

You have to remember both passwords as well or alternatively save them outside of the KeepassXC password manager and outside of Seafile/other cloud services. Without these two passwords, you will otherwise no longer be able to access the content of the password manager.

Please follow the instructions for securely creating and handling passwords.

Technical requirements

You need a folder on your computer that is automatically synchronized with Seafile and a KeepassXC database file located in this folder.

Automatically synchronized folder

Make sure that the Seafile client is started automatically with your operating system. Under Windows or Linux, this can be recognized by the yellow or orange cloud symbol in the status icon bar.

  • Seafiles Icon: Examples
    This video explains how to find the Seafile icon in case Seafile is running.
    Seafile's icon in the taskbar of Linux (KDE in this example).

Create KeepassXC file

Under this link you will find instructions on how to create a new password safe with KeepassXC. Make sure that the generated file ("password safe") is protected with a secure password. Select the folder synchronized with Seafile as the storage location for the password safe.

 

Warnung:

Under no circumstances may this password be saved in a file in Seafile or on your computer. This would undermine the entire security concept of a password safe!

It is necessary to check the setup. This is the only way to ensure that the passwords are stored securely and without risk of loss.

 

  • Make an (unimportant) change in the password safe with KeepassXC. Then open the Seafile web interface and check whether the KeepassXC password safe file located there has just been changed.
    • If this is not the case, changes will not be saved automatically and you should check your setup. Possible sources of error are:
      • KeepassXC is saving to a folder that is not synchronized with Seafile.
      • The Seafile client is not running.

Prevention of synchronisation errors

Make sure that the Seafile folder is always synchronized so that changes to the KeepassXC database are always made on the server. If the synchronization takes place later, synchronization conflicts may occur (especially if the file is synchronized from several end devices, e.g. in shared folders).

Contact us

IT Security
Security team
IT Security
Security team