Getting Started

This is a Plugin for KeePass Password Safe >= v2.18. It allows to synchronize
the currently open database with a Google Drive Account.

It supports three modes of operation:

• Synchronize: The remote version of the open database is downloaded to a
  temporary file in the same directory as the open database.
  The remote version is then merged into the open database by KeePass'
  "Synchronize with File" feature. The updated database is saved and uploaded
  to the Google Drive, replacing the old version.
• Upload: The open database is uploaded to the Google Drive creating a new
  file or replacing an existing version.
• Download: The remote version of the open database is downloaded replacing
  the open database.

The "Synchronize" mode can be configured to run automatically when an open
database is saved, a database is opened or both. Databases which have no
matching configuration will be ignored.

The Plugin matches the remote file by the file name of the open database. The
remote file can be moved to any folder within the Google Drive, but the file
name must be unique within the Drive and match the local file name.

New release available
Changes made in this release: [GoogleSyncPlugin-2.1.0]

Upgrade from v1.x

This version of plugin is compatible for KeePass Password Safe >= v2.09. It allows to synchronize
the currently open database with a Google Drive Account.

Version 2.0 of this Plugin is not compatible with the configuration of previous versions.

Discussion: [81f69f55]

When upgrading from version 1.x you should first remove all old configuration
settings and revoke the API access.

1. Exit and Close KeePass. Make sure it is not running at all (in case it is minimized to tray instead of taskbar).
2. Locate your keepass.config.xml.
   • e.g. C:\Users[User]\AppData\Roaming\KeePass
   • For portable versions, look in the same directory as KeePass.exe executable
3. Edit your keepass.config.xml file and remove all <item> entries in the
   <custom> group for the old Plugin. Those are items with <key>
   "EnableAutoSync", "GoogleSyncKeePassUID", "GoogleSyncClientID"
   and "GoogleSyncClientSecret". Delete from <item> to </item> (including).</key></custom></item>
4. Save your changes to keepass.config.xml and close the file
5. Go to https://security.google.com/settings/security/permissions
6. Select your KeePass Google Sync Plugin from the list of Account Permissions.
   It may be called "KeePassPlugin" or whatever you named it initially.
7. Click on "Revoke access".

Requirements

The Plugin requires the .NET Framework 4.0 on the system. (The .NET Client Profile does not suffice)

The Plugin requires OAuth 2.0 credentials to access the Google Drive API.
Starting with v2.1 it has it's own credentials built in, but still allows you
to provide your own as with previous versions.

In case you would like to provide your own OAuth 2.0 credentials, you can
create a Project with the Google Developers Console:

1. Go to the Google Developers Console in your Google Account:
   https://console.developers.google.com/project
2. Create a new project called: "KeePass Google Sync Plugin"
3. Enable the Google Drive API at "APIs & auth" > "APIs".
4. Choose an e-mail address at "APIs & auth" > "Consent screen".
5. Set the product name for the consent screen to "KeePass Google Sync Plugin".
6. Create OAuth 2.0 credentials for an "Installed application" with application type "Other". ("APIs & auth" > "Credentials")

You should now have a "CLIENT ID" and "CLIENT SECRET".

Installation

1. Place the "GoogleSyncPlugin.plgx" file into the "plugins" directory of your
   KeePass installation. For portable version, place the "GoogleSyncPlugin.plgx" directly into the KeePass directory
2. Open a KeePass database.
3. Make sure you have a password entry for your Google Account. If that entry
   has the URL "accounts.google.com" associated, you can skip the next step.
4. Go to the "Properties" tab of that entry and copy the UUID at the bottom.
5. Go to "Tools" > "Google Sync Plugin" > "Configuration".
6. Either select your Google Account from the drop-down list or paste the UUID
   into the "KeePass UUID" field.
7. Provide the OAuth 2.0 "CLIENT ID" and "CLIENT SECRET" you created earlier.

The Plugin is now ready to work. On first use Google will ask for your consent to access your Google Drive.

Portable Mode

The reference to your Google Account (UUID) as well as your preference for
AutoSync are saved in your KeePass config file.
The OAuth 2.0 credentials are saved securely inside the encrypted database.
You can use the compiled version of the Plugin instead of the .plgx file which
creates temporary files on the host system.
You should clear KeePass' Plugin Cache first ("Tools" > "Plugins" > "Clear")
and then restart KeePass with the .plgx Plugin installed.
The compiled version can then be found inside KePass' Plugin Cache folder.
e.g.: C:\Users[User]\AppData\Local\KeePass\PluginCache
Inside one of the cryptically named folders is a file named
"GoogleSyncPlugin.dll". Copy that folder with all it's files into the "plugins"
folder of your Portable KeePass installation. You may rename the cryptic folder
name to "GoogleSyncPlugin". Delete the GoogleSyncPlugin.plgx file from your
Portable KeePass installation if present.

Compatibility

The Plugin has only been tested with the .NET 4.0 Framework for Windows.
Linux and Mac OS X are not supported.
However, the Plugin does seem work limited with Linux: [19cca399]

The complete credit for the above instructions as well as v2.x changes goes to Paul Voegler. Thank you for all your contributions!

The old instructions for v1.x can be found here [1.x Installation Instructions]

Previous release logs

• [GoogleSyncPlugin-2.0.0]
• [GoogleSyncPlugin-1.6.0]
• [GoogleSyncPlugin-1.5.1]
• [GoogleSyncPlugin-1.5.x]
• [GoogleSyncPlugin-1.1.x]