Archives For November 30, 1999

This tutorial shows how to install and setup howdy to get Windows Hello™ style authentication in Ubuntu 24.04 and Ubuntu 24.10.

Howdy is a free open-source Python program, that can use your built-in IR emitters and camera in combination with facial recognition to prove who you are.

With it, you will no longer need to type password anymore for login, un-lock screen, sudo commands, or launching apps that need root permission (e.g., Grub Customizer and Synaptic).

Continue Reading…

When launching some apps (e.g., GParted, Synaptic, or Grub Customizer), install/uninstall packages with App Center or Software Updater, it always pops-up a dialog asking for admin password to authenticate.

This is great for security! But for lazy men those who don’t want to type user password again and again after logged in (or unlocked screen), it may be OK to disable the authentication window when using their computers at home or other safe places.

Password Authentication Pop-up in Ubuntu

Continue Reading…

This tutorial shows how to enable One Time PassWord in Ubuntu 24.04 for either local or remote SSH login.

One Time PassWord, OTPW in short, is a PAM module which is useful for allowing a user to login public or shared computer/server using a single-use password, that works only for one time.

By generating a list OTPW passwords, and configuring your system to allow OTPW logins, it will ask random one of the OTPW passwords on every login. And, that password will never work again once logged in successfully with it.

Continue Reading…

KeePassXC, the popular free open-source KeePass and KeePassX based password manager, released version 2.7.9 few days ago.

The new KeePassXC 2.7.9 installed as Snap finally uses new desktop portal for native messaging integration. Meaning without using an external script, it now has out-of-the-box browser integration support. However, KeePassXC seems no longer provides official support for Snap package.

So far, Firefox (native + Snap), Chromium Snap, Google Chrome native, Brave native are tested and work with KeePassXC installed as Snap. Though, user may need to grant permission by running the command below in terminal:

sudo snap connect keepassxc:browser-native-messaging

Since version 2.7.7, the password manager added basic Passkeys/WebAuthn support, and added a context menu option to import passkeys. In the new release, it improved the feature by adding a new “Remove Passkey from Entry” context menu option.

Continue Reading…

The KeePass password manager now is at version 2.55. Here are the new features and PPA repository for all current Ubuntu releases.

KeePass 2.54 now uses the enforced configuration file for the triggers, global URL overrides, password generator profiles and a few more settings. See more about enforced configuration.

As well, there’s now new ‘Enforced Options’ dialog for storing certain options in the enforced configuration file. User can open it by going to menu 'Tools' -> 'Advanced Tools' -> 'Enforce Options'.

The ‘Print’ and ‘Export’ command in most report dialogs now requires the ‘Print’ application policy and ‘Export’ application policy flag, and the master key must be entered.

Other changes in KeePass 2.54 include:

  • Hide passwords and other sensitive data by default in report dialogs.
  • Support hiding the value via asterisk in single line edit dialogs
  • Like on Windows, commands that require elevation now have a shield icon in Linux/macOS.
  • add ‘Move Selected Unused Text to Dialog Control’ command.
  • Redesign export confirm dialog.
  • Disable the clipboard workarounds by default in Linux, macOS, etc.
  • Various other improvements.

How to Install KeePass 2.55 (updated) in Ubuntu via PPA

Besides building from source code, I’ve uploaded the package into this unofficial PPA for Ubuntu 18.04, Ubuntu 20.04, Ubuntu 22.04, Ubuntu 23.10, Ubuntu 23.04 and their derivatives.

NOTE: Thanks to @AnonTester, there should be no longer “invalid data format” pop-up in every app launch. Because, I’ve made small script to sync the version number between KeePass.exe and KeePass.exe.config files during the building process.

1. First, press Ctrl+Alt+T on keyboard to open terminal. Then, run the command below to add the PPA:

sudo add-apt-repository ppa:ubuntuhandbook1/keepass2

2. For old Ubuntu 18.04 & Linux Mint, you need to manually refresh package cache though it’s done automatically in Ubuntu 20.04+:

sudo apt update

3. Finally, either run the apt command below to install the package:

sudo apt install keepass2

Or use Software Updater (Update Manager) to update the package if an old version was installed on your system.

Uninstall:

To remove the software package, also open terminal (Ctrl+Alt+T) and run command:

sudo apt remove --autoremove keepass2

And, remove the PPA, either by going to “Software & Updates -> Other Software” and remove the source line, or run the command below in terminal:

sudo add-apt-repository --remove ppa:ubuntuhandbook1/keepass2

The KeePassXC password manager application released version 2.7.5 today! Here are the new features and how to install guide for Ubuntu / Linux Mint users.

KeePassXC 2.7.5 add a new “Allow Screen Capture” option under “View” menu, though it seems to be for Microsoft Windows only. By enabling this option, allows to temporarily take screenshot of the app window.

Allow screenshot option for Windows.

For Linux, the release added a new rule “SingleMainWindow=true” and “X-GNOME-SingleWindow=true” in the .desktop app shortcut file. So, there will be no longer “New Window” option when right-clicking the KeePassXC shortcut icon.

Other change in KeePassXC 2.7.5 include:

  • Add support for compiling with Botan 3
  • New shortcut “Ctrl + ,” to open Settings.
  • Greatly improved performance when having large amount of entries.
  • Increase max TOTP step to 24 hours
  • Improve HTML export layout
  • Turn search reset off by default
  • Various stability and other fixes.

How to Install KeePassXC 2.7.5 via PPA in Ubuntu/Linux Mint

For all current Ubuntu releases, including Ubuntu 18.04, Ubuntu 20.04, Ubuntu 22.04, Ubuntu 22.10, Ubuntu 23.10, and Linux Mint 20/21, and their based systems, KeePassXC 2.7.5 is available to install via its Official PPA repository.

1. First, press Ctrl+Alt+T on keyboard to open terminal and run command to add the PPA:

sudo add-apt-repository ppa:phoerious/keepassxc

Type user password when it asks (no asterisk feedback) and hit Enter to continue.

2. If you have an old version of KeePassXC installed as .deb package, simply launch “Software Updater” or Update Manager to update it to the latest.

Or, run the apt command below in terminal to install the password manager:

sudo apt install keepassxc

NOTE: Linux Mint has to run sudo apt update first to update cache.

After installation, search for and open the tool either from ‘Activities’ overview or system start menu depends on your desktop environment.

Uninstall KeePassXC

To uninstall the password manager installed as native .deb package, either use Ubuntu Software app or open terminal and run command:

sudo apt remove --autoremove keepassxc

And remove the PPA repository either via ‘Software & Updates‘ tool under ‘Other Software‘ tab,

or command below in terminal:

sudo add-apt-repository --remove ppa:phoerious/keepassxc

That’s all. Enjoy!

KeePass password manager released new 2.53 version a few days ago. Here are the new features as well as PPA packages for Ubuntu users.

The new release enhanced the History tab in Edit Entry. When editing an entry, the History tab contains the ‘Dialog (unsaved)’ to represent all data entered in the current dialog, and ‘Current (TIME)’, for currently stored in the database.

As you see in the screenshot above, when selecting 2 history entries, user can click “Compare” button to get a detailed comparison between them in a new “Compare Entries” dialog.

As well, there’s now a ‘History’ option in the ‘Find’ main menu, allows to get a overview of all edit histories.

The release also added filter box, Print and Export buttons to most report dialogs (see the last 2 screenshots), including last modified entries, history, large entries, similar password clusters, password quality, history entry comparison, database file search.

Other changes in KeePass 2.53 inlcude:

  • Support for running KeePass in FIPS mode.
  • Add access keys in the ‘View’ -> ‘Sort By’ menu, entry templates menu, ‘Perform Auto-Type’ menu, and
  • Ctrl+T for the ‘Copy Time-Based OTP’, and Ctrl+Shift+T for the ‘Show Time-Based OTP’ entry data command
  • Enhance Password Depot XML import module to support the new format
  • Improvements to integrate with Edge browser.

How to Install KeePass 2.53 in Ubuntu:

For native Linux password manager, I would recommend KeePassXC. Though, it’s always good to have more choices!

There’s an unofficial PPA maintains the software package, for all current Ubuntu releases (Ubuntu 18.04, 20.04, 22.04, and 22.10) and their based systems.

1. First, press Ctrl+Alt+T on keyboard to open terminal. Then run the command below to add the PPA:

sudo add-apt-repository ppa:ubuntuhandbook1/keepass2

2. For old Ubuntu 18.04 & Linux Mint, you need to manually refresh package cache though it’s done automatically in Ubuntu 20.04+:

sudo apt update

3. Finally, either run the apt command below to install the package:

sudo apt install keepass2

Or use Software Updater (Update Manager) to update the package if an old version was installed on your system.

4. Since KeePass 2.52, it checks ‘KeePass.exe.config’ file on every app startup. And, it will pop-up a warning dialog due to version mis-match. The exe version number (the last 5 numbers in 2.53.0.13788) auto-generates depends on when you build the package. It cannot be totally same to the one in KeePass.exe.config file, unless it happened to build at exact same time when the official KeePass team compiled the package.

  1. I can’t figure out this issue due to poor bash scripting skill, but you can workaround the issue by checking version number via command:
    monodis --assembly /usr/lib/keepass2/KeePass.exe
  2. Then edit the KeePass.exe.config file via command:
    sudo gedit /usr/lib/keepass2/KeePass.exe.config

    Replace gedit depends on your DE, or use nano that works in most Linux.

  3. In the pop-up text editor, replace “newVersion” value with the one you got in the monodis command out.

Finally, save the file and enjoy! For nano text editor, press Ctrl+X, type y and hit Enter to save.

Uninstall:

To remove the software package, also open terminal (Ctrl+Alt+T) and run command:

sudo apt remove --autoremove keepass2

And, remove the PPA, either by going to “Software & Updates -> Other Software” and remove the source line, or run the command below in terminal:

sudo add-apt-repository --remove ppa:ubuntuhandbook1/keepass2

This tutorial shows how to install the latest version of KeePassXC password manager (v2.7.9 so far) and keep it up-to-date in Ubuntu 24.04, Ubuntu 22.04, and Ubuntu 20.04

The popular KeePassXC password manager now is at 2.7.0 release series with many exciting new features. Here’s are some of them according to the release note:

  • Entry tagging
  • Unlock via Windows Hello and macOS Touch ID
  • Auto-Type overhaul.
  • Improvements to Secret Service integration (Linux)
  • Change the crypto backend from libgcrypt to Botan

KeePass 2.7 Entry tags

To get the most recent KeePass in Ubuntu, you have 4 choices:

  • Snap package – runs in sandbox environment.
  • AppImage – no installation required. Just run to launch the app.
  • Ubuntu PPA – contains native .deb package.
  • Flatpak package – runs in sandbox environment.

All of them are official! Choose one that you prefer.

Option 1: KeePassXC Snap package

Snap is the easiest way to install the app in Ubuntu, however, it runs in sandbox and so far it’s a bit lag behind. The snap is at v2.7.8 while the latest has reached v2.7.9.

To install it, just launch App Center (or Ubuntu Software), then search and click install KeePassXC filtered by Snap package.

Or, press Ctrl+Alt+T on keyboard to open terminal, and run command to install the package:

sudo snap install keepassxc

Snap package installs updates automatically, though you may run the command below to check updates manually:

sudo snap refresh keepassxc

Option 2: KeePassXC AppImage package

The software website provides Linux package via AppImage. It’s available to download via the link button below:

No installation required, after downloaded the AppImage, just go to its ‘Properties’ dialog, enable “Executable as Program” permission. Finally, click Run will launch the password manager.

NOTE: Ubuntu 22.04 and higher does NOT support AppImage out-of-the-box, due to miss libfuse2 library. Open terminal (Ctrl+Alt+T) and run command to get it:

sudo apt install libfuse2

Option 3: Install KeePassXC via Ubuntu PPA

For native .deb package, the official PPA contains the package for Ubuntu 20.04, Ubuntu 22.04, Ubuntu 24.04. So far, it supports amd64, arm64, armhf, and riscv64 CPU architecture types.

1. Add the PPA

Firstly, press Ctrl+Alt+T on keyboard to open terminal window. When it opens, paste the command below and hit Enter to add PPA:

sudo add-apt-repository ppa:phoerious/keepassxc

Type user password (no asterisk feedback) and hit Enter to continue.

2. Update package cache.

Ubuntu now automatically refresh package cache while adding PPA, but some Ubuntu based systems (e.g., Linux Mint) does NOT.

To manually refresh system package cache, run command:

sudo apt update

3. Install / upgrade KeePassXC

Finally, install the password manager by running command in terminal:

sudo apt install keepassxc

If you already have an old version of the package installed, then just launch “Software Updater” to check and install updates.

Option 4: Install KeePassXC via Flatpak package

Flatpak is another universal Linux package format that runs in sandbox. KeePassXC is available to install as Flatpak package through the Flathub repository. So far, it supports code>amd64, arm64 CPU architecture types.

For Linux Mint 21/22, and Fedora Workstation (with 3rd party repository enabled), simply search for and install the package from either Software Manager or GNOME Software.

While Ubuntu and other Linux can install the package by following steps below one by one:

  • First, open terminal (Ctrl+Alt+T) and run command to enable Flatpak support:
    sudo apt install flatpak

    Old Ubuntu 18.04 user may need to add this PPA first for most recent daemon package.

  • Then, add the Flathub repository which hosts the software package:
    flatpak remote-add --if-not-exists flathub https://dl.flathub.org/repo/flathub.flatpakrepo

    For other Linux, follow the official setup guide to enable Flatpak support.

  • Finally, run command to install the password manager as Flatpak package:
    flatpak install flathub org.keepassxc.KeePassXC

    As it runs in sandbox, it also needs lots of downloads for run-time libraries as the screenshot below shows you.

After installed the package, search for and launch the app from either start menu or GNOME overview depends on your desktop.


If app icon not visible, try either log out and back in, or run the command below instead to launch it:

flatpak run org.keepassxc.KeePassXC

And, to check updates for the Flatpak package, use command:

flatpak update org.keepassxc.KeePassXC

Uninstall KeePassXC:

For any reason, you may remove the password manager by running one of the commands below in terminal:

  • To remove the snap package, either use App Center (or Ubuntu Software) or run command in terminal:
    sudo snap remove --purge keepassxc
  • To remove the native .deb package, use command:
    sudo apt remove --autoremove keepassxc

    And, remove the Ubuntu PPA by using command:

    sudo add-apt-repository --remove ppa:phoerious/keepassxc
  • For the Flatpak package, use the command below instead to uninstall:
    flatpak uninstall --delete-data org.keepassxc.KeePassXC

    Also run flatpak uninstall --unused to clear useless runtime libraries.

Using KeePassXC to store your passwords? By releasing v2.7.0 (Beta at the moment), the popular password manager introduced many exciting new features!

KDBX 4.1. The new release finally implements the KDBX 4.1 which was introduced 10 months ago via KeePass 2.48. The new version of the KDBX file format features

  • assign tags to groups;
  • optional password quality estimation;
  • remember previous parent group;
  • custom icons with names and last modification/deletion times;
  • custom data items with last modification times.

Replace all crypto libraries with Botan. Due to feature list and maintainer support, the release now replaces Argon2 library with Botan on all platforms. And, the minimum requirement is Botan 2.11.0.

Quick unlock database via Windows Hello / Apple Watch. If you’re using the software in Windows 10+, then you’re able to unlock KeePassXC database easily via a PIN, facial recognition, or fingerprint. And, macOS Catalina (10.15)+ may use TouchID or Apple Watch to get access.

Security improvements. Also in Windows and macOS, the new release now make KeePassXC (main & child windows) invisible for screen recording and screen shooting. It prevents malware from looking at your screen by recording your desktop or taking screenshots.

Other changes in KeePassXC 2.7.0 (Beta) include:

  • Direct write save option, which my solve problems for cloud storage and GVFS
  • Allow to specify custom backup location & filename.
  • Add group clone action.
  • Add tag functionality.
  • Implement support for hardware keys via wireless NFC
  • Add support for OpenSSH 8.2 FIDO/U2F keys
  • Add Microsoft Edge support for Linux
  • Bulk-delete and purge unused custom icons
  • Support adding custom passphrase wordlists
  • Improve attachment handling and security
  • Add option to double-click copying some entry columns.

Download / Install KeePassXC:

As the release is in beta stage, it’s not available in the official download page so far.

However, you may download the packages for Linux, Windows, and macOS from ‘Assets‘ section via the release page:

For Linux user, grab the ‘.AppImage‘ package. Add executable permission by right-clicking and going to ‘Properties -> Permissions’. And finally run it to launch the password manager.

Looking for an app to store your passwords? Secrets is a good choice for those using GNOME desktop.

“Secrets” is a free open-source password manager that integrates perfectly with GNOME desktop and provides a modern and easy to use user interface. It’s formerly Password Safe (nothing to do with pwsafe). Since v6.0, it’s called Secrets.

Secrets:

Secrets is a GTK4 app using libadwaita library to provide an adaptive UI. With it, user may create or open KeePass v4 format database in “.kdbx” files. And, it supports AES, Twofish, and ChaCha20 256-bit encryption algorithms.

Secrets add new or open database

The “.kdbx” file is used to store your passwords. While creating it, user may choose to secure it via password, key file, or password and key combination.

Secure database with password, key, or their combination

Then, each time you open the database or back from inactive, it asks for unlock the database before accessing your passwords.

Need to unlock when back from inactive

After creating / opening a database, user may add as many password entries or groups as possible. It allows to assign a color, icon, and add attachments for each entry. As well, it supports OTP tokens and expiration dates.

Assign color, icon, add attachments, & support one-time password, expiration date

All password entries are listed in the home of the database, with buttons to quickly copy username or password into clipboard. And, the data will be cleared from clipboard 30 seconds later.

Password Entries

Install Secrets:

Actually I don’t use a password manager app, because I use similar accounts and passwords in different websites. And, I wrote them down in plain text 😓. The Gnome Secrets looks really good. Maybe I’ll store passwords with it. The only downside however is that it’s only available via Flatpak package.

1. Open terminal by searching from ‘Activities’ overview. When it opens, run command to install the flatpak daemon:

sudo apt install flatpak

2. Next, install the app via command:

flatpak install https://dl.flathub.org/repo/appstream/org.gnome.World.Secrets.flatpakref

There will be hundreds of MB more install, if you’re first time installing GTK apps via Flatpak.

Once installed, search for and open it from ‘Activities’ overview and enjoy!

Uninstall Secrets:

To remove the app, simply open terminal and run command:

flatpak uninstall --delete-data org.gnome.World.Secrets

And run flatpak uninstall --unused to remove useless runtime libraries.