Windows alternative setup with KeePassXC

Attention:

  • If a computer is used by several people, it is essential that each user has their own local user account.
  • No MFA login may be set up with a technical account.

Important notice:

  • KeePassXC is offered as an alternative to standard keychain applications in the following cases:
    • with Windows operating system: If an earlier version than specification version 2.0 is specified in the information on the TRM (Trusted Platform Module), please follow these instructions so that you can use KeePassXC as an alternative application. Information on the specification version can be found here.
  • To set up the passkey, install KeePassXC and the KeepassXC extension for your browser (e.g. Firefox, Chrome, Edge).

Install KeePassXC for the desktop

For installation on service devices with a Windows operating system, you will find KeepassXC as a standard installation in the Softwarecenter.

Otherwise you will find the installation under the following link: KeePassXC for Windows. Here you can download the file using the green Download for Windows button. Under See more options you will find the download files for older Windows versions

 

The next step is to create a new database in the program.

In the installed KeePassXC desktop version, open the menu. There you can access New database via the Database option. Enter the desired database name here and click Next. Then click through the next steps by confirming with Next.

Now create a password that is rated as at least good or secure and confirm with Done. Finally, save the new database to a location of your choice. On computers that are managed centrally by the IT service, e.g. on the personal network drive.

Next, open the Tools option in the menu. Then go to Browser integration via Settings and then to Activatebrowser integration. Now select the browser (we recommend Google Chrome) that you want to use and activate the points in the General tab:

  • Request correspondence if the database is locked
  • Compare URL scheme

Select the following points in the Advanced tab:

  • Also extended attributes Displays beginning with “KPH: ”
  • Allow use of localhost with passkeys
  • Update native messaging manifest at startup

Finally, confirm with OK.

Leave the KeepassXC open, do not close it!

 

Activate KeePassXC browser extension

In the next step, activate the web browser extensions.

You will find three bars in the top right-hand corner of the web browser. After you have opened these, follow the Extensions option. Then open Manage extensions so that the KeePass browser option appears. Add it to the web browser via Add and confirm in the opened window with Add extension.

 

KeepassXC is now displayed under the extensions. Please click on the 3 dots on the right-hand side and on Settings in the menu that appears.

In the settings, scroll down to the Passkey section. Here, check both Enable passkeys and Enable passkeys fallback.

Next, click on the puzzle icon (Extensions) in the top right corner and then on KeePassXC Browser. In the new dialog window, click on Connect.

Sie haben noch Fragen?

IT-Support
Telephone: +49 951 863-1333
E-Mail: it-support(at)uni-bamberg.de