Just noticed that KeePass 2.37 now has the option to create an "emergency sheet", which I would lock away in my (extremely strong steel) safe. But, the master password and backup location are blank, and the only information on it are the location of the database and key file. So, not a very useful function. I would think those two fields would be filled in by the program when the sheet is generated, but both are blank.
Is this working as designed, with the user needing to manually fill those fields in on the hard copy? The issue here becomes the inability to edit a PDF with the free version of Adobe, since I store stuff like this soft-copy on a USB stick or SD card that I keep in my safe.
Thanks!
- Craig
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
I think the new "emergency sheet" is a great new feature. Keepass also has the ability to print a hardcopy of your database. I do not completely trust electronic storage of information that is so valuable. I print 2 copies, one copy is stored at my home in a secure location and the other copy is stored "offsite" in my bank's safety deposit box.
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
The issue here becomes the inability to edit a PDF with the free version of Adobe, since I store stuff like this soft-copy on a USB stick or SD card that I keep in my safe.
You should resist the temptation to make an electronic copy of your emergency sheet as that undermines security by creating a copy of your secrets (e.g. master password) that is accessible to malware.
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Attached is an example Emergency Sheet for a database that has a master key consisting of a master password, key file, and Windows User Account.
The Emergency Sheet does not print any secret information. It leaves space on the printed form where the user can fill in the:
Master password
The Emergency Sheet prints the the following important information if it is needed by the user to recover passwords from the password database:
Pasword database file path and name
Key file path and name
Windows User Account name
The Emergency Sheet also does not print the following important information because KeePass does not have it. Instead it leaves space, if it is needed by the user to recover passwords from a backup, where the user can fill in this information after printing:
Database backup path
Key file backup path (If a key file is part of the database master key)
User Account backup path (If the Windows User Account is part of the database master key)
Additional key providers are typically implemented as KeePass plugins and are listed in the Cryptography & Key Providers section of the page. You need only find someone with the skills and interest to implement Shamir's Shared Secret.
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Just noticed that KeePass 2.37 now has the option to create an "emergency sheet", which I would lock away in my (extremely strong steel) safe. But, the master password and backup location are blank, and the only information on it are the location of the database and key file. So, not a very useful function. I would think those two fields would be filled in by the program when the sheet is generated, but both are blank.
Is this working as designed, with the user needing to manually fill those fields in on the hard copy? The issue here becomes the inability to edit a PDF with the free version of Adobe, since I store stuff like this soft-copy on a USB stick or SD card that I keep in my safe.
Thanks!
- Craig
I think the new "emergency sheet" is a great new feature. Keepass also has the ability to print a hardcopy of your database. I do not completely trust electronic storage of information that is so valuable. I print 2 copies, one copy is stored at my home in a secure location and the other copy is stored "offsite" in my bank's safety deposit box.
You are supposed to fill these out by hand (as indicated by the pencil on the right of the fields).
The master password field is not filled out already due to security reasons, and KeePass doesn't know your backup location.
Best regards,
Dominik
You should resist the temptation to make an electronic copy of your emergency sheet as that undermines security by creating a copy of your secrets (e.g. master password) that is accessible to malware.
If you really want a soft copy print the page, fill out the required bits, take a picture of it and save.
cheers, Paul
That would see me visiting the bank every other week. Is that what you do?
cheers, Paul
Since there is no preview in Print dialog, could you be so kind to provide a screenshot of this feature?
Attached is an example Emergency Sheet for a database that has a master key consisting of a master password, key file, and Windows User Account.
The Emergency Sheet does not print any secret information. It leaves space on the printed form where the user can fill in the:
The Emergency Sheet prints the the following important information if it is needed by the user to recover passwords from the password database:
The Emergency Sheet also does not print the following important information because KeePass does not have it. Instead it leaves space, if it is needed by the user to recover passwords from a backup, where the user can fill in this information after printing:
Last edit: wellread1 2017-10-14
I came here for the same reason as OP - to see why my emergency sheet was blank. Now I realise, of course, that this is by design. Weird feature.
While on the topic, I would also like to reiterate the request that I posted a while back for an implementation of "ssss" (Shamir's Shared Secret) as an emergency access mechanism (thread here: https://sourceforge.net/p/keepass/discussion/329220/thread/8b9fcfbc/)
Additional key providers are typically implemented as KeePass plugins and are listed in the Cryptography & Key Providers section of the page. You need only find someone with the skills and interest to implement Shamir's Shared Secret.