How to Protect Your Tracker Credentials with KeePass

KeePass Tutorial

So I'm sure some of you have seen in the tracker news that some have had their userbase credentials stolen and some have put in extra security to prevent this in the future. It's also important for us as users to also take measures to protect our credentials, especially those of you who have numerous trackers. In this tutorial I will be going through how to configure KeePass, a free, open source, local password manager. It's a great way to never forget your passwords!


Overview:
KeePass is a free opensource local password safe/manager. Passwords are stored in a database which is locked with a master key or key file which is then used to see all other passwords for the information you have stored in the encrypted database. The databases are encrypted using the AES and Twofish encryption algorithms.
Key Features:
- The complete database is encrypted, not only the password fields. So, your user names, notes, etc. are encrypted, too.
- SHA-256 is used as password hash. SHA-256 is a 256-bit cryptographically secure one-way hash function. Your master password is hashed using this algorithm and its output is used as key for the encryption algorithms.
- In-Memory Passwords Protection: Your passwords are encrypted while KeePass is running, so even when the operating system caches the KeePass process to disk, this wouldn't reveal your passwords anyway.
- One master password decrypts the complete database.
- Can lock the database to the current Windows user account. The database can then only be opened by the same person who created it.
- KeePass is portable: it can be carried on an USB stick and runs on Windows systems without being installed.
- The password list can be exported to various formats like TXT, HTML, XML and CSV.
- KeePass uses the common CSV export format of various passwords safes like Password Keeper and Password Agent. Exports from these programs can be easily imported to your KeePass databases.
- Timed clipboard clearing: KeePass can clear the clipboard automatically some time after you've copied one of your passwords into it.
- Over 30 different languages are available!
- KeePass can generate strong random passwords for you.
- Plugin Architecture, plugins can extend the functionality of KeePass, like providing additional import/export methods for other file formats.
- KeePass free and you have full access to its source code!


Tips and Tricks:
1. Use a different password for every tracker!
2. Don't use skeleton keys/passwords (e.g. ipttrack3r, gfttrack3r, scctrack3r)
3. Use password phrases with minimum 18 chars (e.g. myfavoritesongisdustinthewind1977)
4. Sync/backup your KeePass encrypted database to the cloud (Dropbox/Sugarsync/Box)
5. Access your KeePass database on other devices such as iPad or Android using free KeePass apps
How to Configure KeePass:
1. Download KeePass
Visit the KeePass download page here:http://keepass.info/download.htmland download your desired version
- Get the 2.x versions
2. Create a New Database!
- Create a new KeePass database, give it a name, and select the location you want to save it (note: you can save it to an online storage dir like Dropbox)
- Set the master password and/or Key file (This is your master password to access all other passwords don't forget it!)
- Choose whether you also want to use a key file and restrict it to a particular Windows account (Click the "..." to display password)
3. Pick your Options in Database Settings
- The most notable option here is the Master Key force change.
4. Adding an Entry
- Add an entry for each tracker you wish, the Internet section is recommended to work with some available plugins
- Right click and Select "Add Entry"
- In the "Title" box enter the tracker URL without the pre-fix (e.g. tracker.net)
- Add your username in the "User Name" field
- Enter your password for the tracker and repeat (click the "..." button to show the password)
- You can choose to use the built-in password generated here if you would like, see the pic below
- In the "URL" field enter the full tracker urls (e.g.w.ww.tracker.net) Note: This helps with some plugins if you choose.
5. Save your Database / Exit / and Access
- You can hit Ctrl+S or manually File-Save
- Close KeePass and reopen.
6. Download and Configure Plugins (Optional)
- Visit the KeePass plugin page Plugins - KeePass and download the plugins of your choice, I recommend the following:
1. Sync to Cloud Providers - Plugins - KeePass
2. On Screen Virtual Keyboard - Plugins - KeePass
3. Dropbox Plugin - Plugins - KeePass
4. Autoform Filler - Plugins - KeePass
5. Automatically Pass Info to Chrome - Plugins - KeePass
6. Putty Plugin Plugins - KeePass
7. Import/Export Passwords (Optional)
- KeePass supports a ton of import options including from other password managers
- Choose your desired import/export functionality.