This tutorial shows how to install and setup howdy to get Windows Hello™ style authentication in Ubuntu 24.04 and Ubuntu 24.10.
Howdy is a free open-source Python program, that can use your built-in IR emitters and camera in combination with facial recognition to prove who you are.
With it, you will no longer need to type password anymore for login, un-lock screen, sudo commands, or launching apps that need root permission (e.g., Grub Customizer and Synaptic).
When launching some apps (e.g., GParted, Synaptic, or Grub Customizer), install/uninstall packages with App Center or Software Updater, it always pops-up a dialog asking for admin password to authenticate.
This is great for security! But for lazy men those who don’t want to type user password again and again after logged in (or unlocked screen), it may be OK to disable the authentication window when using their computers at home or other safe places.
This tutorial shows how to enable One Time PassWord in Ubuntu 24.04 for either local or remote SSH login.
One Time PassWord, OTPW in short, is a PAM module which is useful for allowing a user to login public or shared computer/server using a single-use password, that works only for one time.
By generating a list OTPW passwords, and configuring your system to allow OTPW logins, it will ask random one of the OTPW passwords on every login. And, that password will never work again once logged in successfully with it.
KeePassXC, the popular free open-source KeePass and KeePassX based password manager, released version 2.7.9 few days ago.
The new KeePassXC 2.7.9 installed as Snap finally uses new desktop portal for native messaging integration. Meaning without using an external script, it now has out-of-the-box browser integration support. However, KeePassXC seems no longer provides official support for Snap package.
So far, Firefox (native + Snap), Chromium Snap, Google Chrome native, Brave native are tested and work with KeePassXC installed as Snap. Though, user may need to grant permission by running the command below in terminal:
Since version 2.7.7, the password manager added basic Passkeys/WebAuthn support, and added a context menu option to import passkeys. In the new release, it improved the feature by adding a new “Remove Passkey from Entry” context menu option.
The KeePass password manager now is at version 2.55. Here are the new features and PPA repository for all current Ubuntu releases.
KeePass 2.54 now uses the enforced configuration file for the triggers, global URL overrides, password generator profiles and a few more settings. See more about enforced configuration.
As well, there’s now new ‘Enforced Options’ dialog for storing certain options in the enforced configuration file. User can open it by going to menu 'Tools' -> 'Advanced Tools' -> 'Enforce Options'.
The ‘Print’ and ‘Export’ command in most report dialogs now requires the ‘Print’ application policy and ‘Export’ application policy flag, and the master key must be entered.
Hide passwords and other sensitive data by default in report dialogs.
Support hiding the value via asterisk in single line edit dialogs
Like on Windows, commands that require elevation now have a shield icon in Linux/macOS.
add ‘Move Selected Unused Text to Dialog Control’ command.
Redesign export confirm dialog.
Disable the clipboard workarounds by default in Linux, macOS, etc.
Various other improvements.
How to Install KeePass 2.55 (updated) in Ubuntu via PPA
Besides building from source code, I’ve uploaded the package into this unofficial PPA for Ubuntu 18.04, Ubuntu 20.04, Ubuntu 22.04, Ubuntu 23.10, Ubuntu 23.04 and their derivatives.
NOTE: Thanks to @AnonTester, there should be no longer “invalid data format” pop-up in every app launch. Because, I’ve made small script to sync the version number between KeePass.exe and KeePass.exe.config files during the building process.
1. First, press Ctrl+Alt+T on keyboard to open terminal. Then, run the command below to add the PPA:
The KeePassXC password manager application released version 2.7.5 today! Here are the new features and how to install guide for Ubuntu / Linux Mint users.
KeePassXC 2.7.5 add a new “Allow Screen Capture” option under “View” menu, though it seems to be for Microsoft Windows only. By enabling this option, allows to temporarily take screenshot of the app window.
Allow screenshot option for Windows.
For Linux, the release added a new rule “SingleMainWindow=true” and “X-GNOME-SingleWindow=true” in the .desktop app shortcut file. So, there will be no longer “New Window” option when right-clicking the KeePassXC shortcut icon.
Greatly improved performance when having large amount of entries.
Increase max TOTP step to 24 hours
Improve HTML export layout
Turn search reset off by default
Various stability and other fixes.
How to Install KeePassXC 2.7.5 via PPA in Ubuntu/Linux Mint
For all current Ubuntu releases, including Ubuntu 18.04, Ubuntu 20.04, Ubuntu 22.04, Ubuntu 22.10, Ubuntu 23.10, and Linux Mint 20/21, and their based systems, KeePassXC 2.7.5 is available to install via its Official PPA repository.
1. First, press Ctrl+Alt+T on keyboard to open terminal and run command to add the PPA:
sudo add-apt-repository ppa:phoerious/keepassxc
Type user password when it asks (no asterisk feedback) and hit Enter to continue.
2. If you have an old version of KeePassXC installed as .deb package, simply launch “Software Updater” or Update Manager to update it to the latest.
Or, run the apt command below in terminal to install the password manager:
sudo apt install keepassxc
NOTE: Linux Mint has to run sudo apt update first to update cache.
After installation, search for and open the tool either from ‘Activities’ overview or system start menu depends on your desktop environment.
Uninstall KeePassXC
To uninstall the password manager installed as native .deb package, either use Ubuntu Software app or open terminal and run command:
sudo apt remove --autoremove keepassxc
And remove the PPA repository either via ‘Software & Updates‘ tool under ‘Other Software‘ tab,
KeePass password manager released new 2.53 version a few days ago. Here are the new features as well as PPA packages for Ubuntu users.
The new release enhanced the History tab in Edit Entry. When editing an entry, the History tab contains the ‘Dialog (unsaved)’ to represent all data entered in the current dialog, and ‘Current (TIME)’, for currently stored in the database.
As you see in the screenshot above, when selecting 2 history entries, user can click “Compare” button to get a detailed comparison between them in a new “Compare Entries” dialog.
As well, there’s now a ‘History’ option in the ‘Find’ main menu, allows to get a overview of all edit histories.
The release also added filter box, Print and Export buttons to most report dialogs (see the last 2 screenshots), including last modified entries, history, large entries, similar password clusters, password quality, history entry comparison, database file search.
Add access keys in the ‘View’ -> ‘Sort By’ menu, entry templates menu, ‘Perform Auto-Type’ menu, and
Ctrl+T for the ‘Copy Time-Based OTP’, and Ctrl+Shift+T for the ‘Show Time-Based OTP’ entry data command
Enhance Password Depot XML import module to support the new format
Improvements to integrate with Edge browser.
How to Install KeePass 2.53 in Ubuntu:
For native Linux password manager, I would recommend KeePassXC. Though, it’s always good to have more choices!
There’s an unofficial PPA maintains the software package, for all current Ubuntu releases (Ubuntu 18.04, 20.04, 22.04, and 22.10) and their based systems.
1. First, press Ctrl+Alt+T on keyboard to open terminal. Then run the command below to add the PPA:
2. For old Ubuntu 18.04 & Linux Mint, you need to manually refresh package cache though it’s done automatically in Ubuntu 20.04+:
sudo apt update
3. Finally, either run the apt command below to install the package:
sudo apt install keepass2
Or use Software Updater (Update Manager) to update the package if an old version was installed on your system.
4. Since KeePass 2.52, it checks ‘KeePass.exe.config’ file on every app startup. And, it will pop-up a warning dialog due to version mis-match. The exe version number (the last 5 numbers in 2.53.0.13788) auto-generates depends on when you build the package. It cannot be totally same to the one in KeePass.exe.config file, unless it happened to build at exact same time when the official KeePass team compiled the package.
I can’t figure out this issue due to poor bash scripting skill, but you can workaround the issue by checking version number via command:
monodis --assembly /usr/lib/keepass2/KeePass.exe
Then edit the KeePass.exe.config file via command:
sudo gedit /usr/lib/keepass2/KeePass.exe.config
Replace gedit depends on your DE, or use nano that works in most Linux.
In the pop-up text editor, replace “newVersion” value with the one you got in the monodis command out.
Finally, save the file and enjoy! For nano text editor, press Ctrl+X, type y and hit Enter to save.
Uninstall:
To remove the software package, also open terminal (Ctrl+Alt+T) and run command:
sudo apt remove --autoremove keepass2
And, remove the PPA, either by going to “Software & Updates -> Other Software” and remove the source line, or run the command below in terminal:
This tutorial shows how to install the latest version of KeePassXC password manager (v2.7.9 so far) and keep it up-to-date in Ubuntu 24.04, Ubuntu 22.04, and Ubuntu 20.04
The popular KeePassXC password manager now is at 2.7.0 release series with many exciting new features. Here’s are some of them according to the release note:
Entry tagging
Unlock via Windows Hello and macOS Touch ID
Auto-Type overhaul.
Improvements to Secret Service integration (Linux)
Change the crypto backend from libgcrypt to Botan
KeePass 2.7 Entry tags
To get the most recent KeePass in Ubuntu, you have 4 choices:
Snap package – runs in sandbox environment.
AppImage – no installation required. Just run to launch the app.
Ubuntu PPA – contains native .deb package.
Flatpak package – runs in sandbox environment.
All of them are official! Choose one that you prefer.
Option 1: KeePassXC Snap package
Snap is the easiest way to install the app in Ubuntu, however, it runs in sandbox and so far it’s a bit lag behind. The snap is at v2.7.8 while the latest has reached v2.7.9.
To install it, just launch App Center (or Ubuntu Software), then search and click install KeePassXC filtered by Snap package.
Or, press Ctrl+Alt+T on keyboard to open terminal, and run command to install the package:
sudo snap install keepassxc
Snap package installs updates automatically, though you may run the command below to check updates manually:
sudo snap refresh keepassxc
Option 2: KeePassXC AppImage package
The software website provides Linux package via AppImage. It’s available to download via the link button below:
No installation required, after downloaded the AppImage, just go to its ‘Properties’ dialog, enable “Executable as Program” permission. Finally, click Run will launch the password manager.
NOTE: Ubuntu 22.04 and higher does NOT support AppImage out-of-the-box, due to miss libfuse2 library. Open terminal (Ctrl+Alt+T) and run command to get it:
sudo apt install libfuse2
Option 3: Install KeePassXC via Ubuntu PPA
For native .deb package, the official PPA contains the package for Ubuntu 20.04, Ubuntu 22.04, Ubuntu 24.04. So far, it supports amd64, arm64, armhf, and riscv64 CPU architecture types.
1. Add the PPA
Firstly, press Ctrl+Alt+T on keyboard to open terminal window. When it opens, paste the command below and hit Enter to add PPA:
sudo add-apt-repository ppa:phoerious/keepassxc
Type user password (no asterisk feedback) and hit Enter to continue.
2. Update package cache.
Ubuntu now automatically refresh package cache while adding PPA, but some Ubuntu based systems (e.g., Linux Mint) does NOT.
To manually refresh system package cache, run command:
sudo apt update
3. Install / upgrade KeePassXC
Finally, install the password manager by running command in terminal:
sudo apt install keepassxc
If you already have an old version of the package installed, then just launch “Software Updater” to check and install updates.
Option 4: Install KeePassXC via Flatpak package
Flatpak is another universal Linux package format that runs in sandbox. KeePassXC is available to install as Flatpak package through the Flathub repository. So far, it supports code>amd64, arm64 CPU architecture types.
For Linux Mint 21/22, and Fedora Workstation (with 3rd party repository enabled), simply search for and install the package from either Software Manager or GNOME Software.
While Ubuntu and other Linux can install the package by following steps below one by one:
First, open terminal (Ctrl+Alt+T) and run command to enable Flatpak support:
sudo apt install flatpak
Old Ubuntu 18.04 user may need to add this PPA first for most recent daemon package.
Then, add the Flathub repository which hosts the software package:
Using KeePassXC to store your passwords? By releasing v2.7.0 (Beta at the moment), the popular password manager introduced many exciting new features!
KDBX 4.1. The new release finally implements the KDBX 4.1 which was introduced 10 months ago via KeePass 2.48. The new version of the KDBX file format features
assign tags to groups;
optional password quality estimation;
remember previous parent group;
custom icons with names and last modification/deletion times;
custom data items with last modification times.
Replace all crypto libraries with Botan. Due to feature list and maintainer support, the release now replaces Argon2 library with Botan on all platforms. And, the minimum requirement is Botan 2.11.0.
Quick unlock database via Windows Hello / Apple Watch. If you’re using the software in Windows 10+, then you’re able to unlock KeePassXC database easily via a PIN, facial recognition, or fingerprint. And, macOS Catalina (10.15)+ may use TouchID or Apple Watch to get access.
Security improvements. Also in Windows and macOS, the new release now make KeePassXC (main & child windows) invisible for screen recording and screen shooting. It prevents malware from looking at your screen by recording your desktop or taking screenshots.
For Linux user, grab the ‘.AppImage‘ package. Add executable permission by right-clicking and going to ‘Properties -> Permissions’. And finally run it to launch the password manager.
Looking for an app to store your passwords? Secrets is a good choice for those using GNOME desktop.
“Secrets” is a free open-source password manager that integrates perfectly with GNOME desktop and provides a modern and easy to use user interface. It’s formerly Password Safe (nothing to do with pwsafe). Since v6.0, it’s called Secrets.
Secrets:
Secrets is a GTK4 app using libadwaita library to provide an adaptive UI. With it, user may create or open KeePass v4 format database in “.kdbx” files. And, it supports AES, Twofish, and ChaCha20 256-bit encryption algorithms.
Secrets add new or open database
The “.kdbx” file is used to store your passwords. While creating it, user may choose to secure it via password, key file, or password and key combination.
Secure database with password, key, or their combination
Then, each time you open the database or back from inactive, it asks for unlock the database before accessing your passwords.
Need to unlock when back from inactive
After creating / opening a database, user may add as many password entries or groups as possible. It allows to assign a color, icon, and add attachments for each entry. As well, it supports OTP tokens and expiration dates.
Assign color, icon, add attachments, & support one-time password, expiration date
All password entries are listed in the home of the database, with buttons to quickly copy username or password into clipboard. And, the data will be cleared from clipboard 30 seconds later.
Password Entries
Install Secrets:
Actually I don’t use a password manager app, because I use similar accounts and passwords in different websites. And, I wrote them down in plain text 😓. The Gnome Secrets looks really good. Maybe I’ll store passwords with it. The only downside however is that it’s only available via Flatpak package.
1. Open terminal by searching from ‘Activities’ overview. When it opens, run command to install the flatpak daemon: