hot-autofill-browser-keepass

We at TechNorms love KeePass. It’s a free (as in beer and as in freedom) and open-source password manager that also happens to be available on every major computing platform. What’s not to love? Well, there is one thing that needs some work. It’s browser integration.

One of the more popular options for browser-based password management is Lastpass. Despite its propensity for being hacked, it’s great at auto-filling your passwords within your browser, no input needed. That’s damn convenient.

Turns out KeePass has a similar feature – it just takes some setting up. Here’s how to autofill KeePass passwords in a browser.

Also Read: Battle of the Password Managers: KeePass vs Dashlane vs LastPass

How to Autofill KeePass Passwords in a Browser

Edit Entries

have-add-urls-entries

Here’s the not fun part. In order to use the login data within your KeePass database, it means adding information to the URL field for every login entry.

Go to whatever page you login to a website on. For example, mine would be this one for Yahoo. Copy that URL. Open your KeePass database and enter that into the URL field.

Do that for whatever login entries you want to use within a browser.

Setup KeePass Data Transfer

For this tutorial, we’ll assume you’re using KeePassX. It’s the free, cross platform version that runs on Windows, Mac and Linux. You’ll also need the alpha version that creates KeePass 2.0 databases.

To transfer data from KeePassX to a browser, it means keeping your database open. This is also a security issue, so be careful with what you leave running.

Next, you need keepasshttp, a bit of software that securely transfers password data by http. Installation varies by platform.

On Windows, download Chocolatey. It’s a command-line package manager for Microsoft’s OS and it’s much easier than doing the manual installation of keepasshttp.

Once that’s installed, enter:

choco install keepass-keepasshttp

And let it do its thing.

For Linux and Mac, you need to run KeePass under Mono. Downloading a 2.0 version of KeePass should do the trick there.

Next, download keepasshtml. This will give you a .plgx file, which is a KeePass plugin. To install, you drop it in the KeePass directory. This is located wherever you keep the KeePass executable.

On Windows, that is under Program Files (unless you have the portable version). On Mac, it’s under Applications. On Linux, it’s /usr/lib/keepass2/ by default.

Browser Extensions

safari-keepass-extension-autofill

I dug up compatible browser extensions for Chrome, Firefox, and Safari. All three do more or less the same thing- auto-filling your password data.

Chrome has chromeIPass. It’s free, useful and functional. No complaints there.

ChromeIPass autofills a page if it’s your only login. If you have multiple accounts, it’ll let you choose an account by clicking the icon in the menu bar. You can also add login data to your database when you enter a password at a URL that’s not stored in KeePass, which is neat. Just be sure not to add duplicate entries for previous entries that don’t have a URL.

Firefox has PassIFox. Users have mixed reviews of it, but it’s also the only game in town for Firefox people.

Safari offers passafari. It’s functional, but development looks frozen with no sign of continuing. Even the documentation isn’t finished.

Final Thoughts

Honestly, all the setup and janky extensions and needing to fill in URLs makes KeePass a less attractive prospect than something like LastPass. LastPass might charge you money, but at least it abstracts away login data and makes it even more convenient.

There’s also no good way to implement this kind of setup on mobile. Android, maybe. iOS, never. Your best bet there is still to use a basic KeePass app and copy and paste your data into the form. You’d get good apps like the KyPass on iOS to manage your KeePass database, but you’d need to copy-paste your passwords. It won’t be a browser-based integration like LastPass provides.

However, for people who don’t mind putting in a little elbow grease, KeePass and keepasshttp is a viable alternative. Plus, it’s open source, and who doesn’t like that?