Web KeePass Password Safe Reviews

Hello, I spent some time to migrate Webkeepass to a new server with Ubuntu20/Java8/Tomcat9 and Windows clients with JRE8. See "Discussion - Help" for more details.

repx: If you setup WebKeePass correctly, any user can't change the setting from LDAP to Local Authentication. If your worried about Staff compromising other users passwords, then you have a staffing issue. I am guessing the same person that can change the configuration file, can also change the users password in LDAP. If that's the case, they could easily compromise the password, and the user would just think their account was locked out, they mistyped their password, etc. Your mishap of an error is unfortunate, but can be compromised so many different ways. This program is wonderful!

There is a major flaw in this software. It does not distinguish between an LDAP user and a local user with the same name. This allows someone to access another persons passwords by modifying the configuration to use local authentication, creating a local user with the same name as an LDAP user, then creating a password, logging in as that user and seeing their passwords. After that, they can delete the local user and switch the configuration back to LDAP authentication without anyone knowing that their passwords have been compromised.

Nice, thank you

Very useful program. Thanks

Nice and Easy to use.

I think you are doing something great with this application. I can't tell you how many times I have searched for the mutli user version of keepass - where individuals can log in with their own account, and changes are audited. Fantastic - thank you!

It is a great software, but doesn't have a very intuitive interface. Technically is a full secure software to keep passwords.

nice app folks