hi, the only plugin I know doing that is : https://implogy.de/CryptokiKeyProvider/ personally using it, since a long time, no issue. it can read/generate/import a keepass composite master key as an object on a token/smartcard. multiple drawbacks : 1) no more maintained, maybe security issue (code review needed) 2) working only on Windows. there is a feature request for keepassxc, to add pkcs11 read capability. It's actually just a project, nothing real. It's really a lack for keepass not having pkcs11...