sysadmin black magick


Recent Posts

Welcome to Linux  (tty1)

khitomer login: root
Password: yomommasofat

Last login: Thu Apr 20 16:20:00 -0400 2017 on /dev/tty1.
You have mail.

   Chaos is King and Magick is loose in the world.


Ditching LastPass - part 2

This is part two of a tutorial in which I talk about my escape from the clutches of LastPass. You can read part one here.



KeePassXC is a community fork of KeePassX, the cross-platform port of KeePass for Windows. KeePassXC can store your passwords safely, and they can be accessed without an Internet connection. It is open source and is published under the terms of the GNU General Public License.

Downloads are available for Windows, macOS, and various Linux distributions. If you happen to be running Mageia, I have an RPM you can use here.

Installing on Linux

This varies depending on your distro of course. For an RPM based distribution, you can download the package and run:

$ dnf install keepassxc-2.*rpm

Older RPM based distros may not have "dnf" yet, so you will need to use "yum":

$ yum localinstall keepassxc-2*rpm

If you're using a Debian/Ubuntu derivative, you need to add the repository to sources.list and then install with apt-get install.

Export the LastPass database

If you're currently using LastPass, you will need to export its database to a CSV file. Take note! The exported database is not encrypted!! On most recent Linux distros, /tmp is a RAM disk, so that's probably the safest place to put it while you're working on converting. Keep in mind though, that if you reboot for any reason you will lose the file that you're working on.

In LastPass, bring up the menu, then select More options, followed by Export.

LastPass export

When you're presented with the CSV data, I suggest copying and pasting the output into any plain text editor. If you choose to save the page to disk, you'll wind up with some funky HTML and will have to clean it up before importing into KeePassXC.

Don't worry about column names or order, leave the column names in tact, and make sure you have valid CSV data like this:

CSV in text editor

First run

The first time you run KeePassXC, you will be prompted to create a new database. Click "Import from CSV" on this screen.

first run keepassxc

After providing a CSV file, you need to set a password for your new database. This password should be something you can remember and type as you'll be entering it on a regular basis. Alternatively, you can use a Key file, or use both. I tend to stick with just a password personally.

import csv

The next screen allows you to set how the data is imported. First, click the checkbox for "First record has field names". Then set the Column layout as shown.

column layout

finished import

Finally, save your database to the sync'd folder you set up in Part One of this tutorial.

Configure KeePassXC

I suggest going to the KeePassXC Application Settings (Tools->Settings) and checking off "Automatically save on exit" and "Automatically save after every change". This will save some of your sanity.

KeePass Tusk

Tusk adds read-only KeePass functionality to recent versions of Firefox. Install it like any other Firefox Addon from the Addons site.

tusk setup

In the Tusk settings, navigate to "Manage Databases". At the bottom is a "File System" option. Enable that, then click "ADD URL SOURCE" to use your local KeePass database.

tusk filesystem

Now when you need to log into a web site using one of your saved passwords, click the Tusk icon. You will be prompted to enter your database password.

enter database password in tusk

Then you are presented with a list of matching sites to choose from. Click the magic wand icon for the right site.

site list

The form should automagically fill in. If it doesn't you can use the Copy icon to copy the password to the clipboard and enter it that way.

yahoo login

Next up... Android

Part Three of this tutorial will focus on setting up SyncThing and KeeShare on an Android device.