Question Changing KeePass’ database is impossible & risky (07 Nov 2023)

[beginner-mt]

(desktop PC, Windows 10)

I wonder whether anyone could help, please

A few months ago, I wanted to change my desktop KeePass 2.54’s master-password. A nightmare that nearly locked me out of my own encrypted stuff.

For some unknown reason, the new master-password was invalid. Or so KeePass said. I nearly had a stroke.

Thank goodness I had kept an old copy of the database (with the old password) so I could access my encrypted stuff.

Yesterday, months later, I tried again (KeePass 2.55). Same scary problem.

I created a password (72 characters). I eliminated all apostrophes, commas, etc etc

The new password was on a (disposable) document (something I never do, but I wanted to make sure I wasn’t making any mistake)

I copied+pasted the new password onto KeePass’ password-replacement dialogue-box, etc etc.

I logged out of KeePass and then, to log in, I (again) copied+pasted the new password. KeePass told me the password was invalid. Which is impossible. I always copied+pasted the newly created password, throughout the whole procedure. From the very beginning.

After reinstalling KeePass, scanning (repeatedly) this PC for malware, etc, I asked a few friends for help. They couldn’t find anything wrong with what I was doing.

We even typed the new password, character-by-character, all of us checking and double checking to ensure we were doing the right things.

They told me to ditch KeePass, and use another program. The main reason why I use KeePass is that it’s NOT an online/cloud app. I hate cloud apps.

Anyway, before I’m forced to replace KeePass with something else, has anyone got any idea what the problem might be??

It’s the only program I've got problems with.

In advance, thank you very much for your kind help

Christian


​

 

[silversurfer]

(desktop PC, Windows 10)

I wonder whether anyone could help, please

A few months ago, I wanted to change my desktop KeePass 2.54’s master-password. A nightmare that nearly locked me out of my own encrypted stuff.

For some unknown reason, the new master-password was invalid. Or so KeePass said. I nearly had a stroke.

Thank goodness I had kept an old copy of the database (with the old password) so I could access my encrypted stuff.

Yesterday, months later, I tried again (KeePass 2.55). Same scary problem.

I created a password (72 characters). I eliminated all apostrophes, commas, etc etc

The new password was on a (disposable) document (something I never do, but I wanted to make sure I wasn’t making any mistake)

I copied+pasted the new password onto KeePass’ password-replacement dialogue-box, etc etc.

I logged out of KeePass and then, to log in, I (again) copied+pasted the new password. KeePass told me the password was invalid. Which is impossible. I always copied+pasted the newly created password, throughout the whole procedure. From the very beginning.

After reinstalling KeePass, scanning (repeatedly) this PC for malware, etc, I asked a few friends for help. They couldn’t find anything wrong with what I was doing.

We even typed the new password, character-by-character, all of us checking and double checking to ensure we were doing the right things.

They told me to ditch KeePass, and use another program. The main reason why I use KeePass is that it’s NOT an online/cloud app. I hate cloud apps.

Anyway, before I’m forced to replace KeePass with something else, has anyone got any idea what the problem might be??

It’s the only program I've got problems with.

In advance, thank you very much for your kind help

Christian


​

I had in the past once a similar situation, but that might been my own mistake with my database-file of KeePass. In short, my solution is the following: I have setup my database for the original KeePass, and I use additional the fork KeePassXC as backup method to be prepared if one database might be ending up broken for some reason...

Another way for same purpose, if you would just create two of your KeePass databases but the 2nd one with a different Master-Password.

 

[ForgottenSeer 103564]

Over complicating things for yourself will result in what you have here. Keepass as you pointed out is not cloud based, and a person would have to access directly to attempt to breach it. You do not need a 80 character ridiculous to remember master password.

Utilize a password only you would know, and if necessary get a cheap closet safe and write it down and place it in there. Keep backups of your kdbx or kdb files on a flashdrive or if like me, use the portable on a flashdrive for plug and use scenarios. Its just as easy to update and use on a flash drive than having it on the system. Lot less chance of someone physically accessing it as well.

 

[Ink]

I created a password (72 characters). I eliminated all apostrophes, commas, etc etc

What's the maximum length master password allowed with KeePass v2.54 vs v2.55?

Does the new password work if you create a new temporary database?

• Master Key - KeePass
• Security - KeePass

I copied+pasted the new password onto KeePass’ password-replacement dialogue-box, etc etc.

Isn't a virtual keyboard (OSK) safer than copy+paste when the clipboard contents can be shared online.

 

[ForgottenSeer 103564]

Isn't a virtual keyboard (OSK) safer than copy+paste when the clipboard contents can be shared online.

You got bigger problems than a password if your clipboard contents were intercepted. Seriously, there is a point where this becomes ridiculous scarring users instead of teaching them direct knowledge. Obviously password manager servers are not kept as secure as they should be, we all know why that is, because to take time down to constantly patch CVE's and other issues is expensive and what are most companies concerned with?

 

[JustInTime]

Just changed database master password (34Chr) and it all went smoothly. I use KeePassXC though.