{"id":46755,"date":"2019-03-11T14:53:48","date_gmt":"2019-03-11T14:53:48","guid":{"rendered":"https:\/\/owncloud.com\/?p=46755"},"modified":"2020-08-17T14:50:47","modified_gmt":"2020-08-17T14:50:47","slug":"all-your-passwords-everywhere-with-a-secure-password-manager-in-owncloud","status":"publish","type":"post","link":"https:\/\/owncloud.com\/de\/blogs\/all-your-passwords-everywhere-with-a-secure-password-manager-in-owncloud\/","title":{"rendered":"All Your Passwords, Everywhere \u2013 With a Secure Password Manager in ownCloud"},"content":{"rendered":"
\n

All Your Passwords, Everywhere \u2013 With a Secure Password Manager in ownCloud<\/h1>\n
\n

Weak passwords are one of the main reasons for successful hacking attacks \u2013 password managers can protect you. With ownCloud, you can even share your passwords between devices.<\/p>\n<\/div>\n<\/div>\n

\n

Usually, security comes with a price. Most tools which can protect your online security, like javascript blockers or GPG, get in the way of your tasks. Password managers are an exception.<\/p>\n

A password manager is one of the few tools which both protect you\u00a0and<\/em>\u00a0make your life easier. You only need to remember one passphrase to decrypt your vault \u2013 then you can copy-paste all other passwords from there.<\/p>\n

No reason to keep weird username\/passphrase combinations in mind. No reason for 4 different passwords, of which one contains a * and two $$ characters, but another doesn\u2019t, because the platform forbid it. No reason to type out all those passwords ever again.<\/p>\n

 <\/p>\n

Why Put Your Passwords in the Cloud?<\/h2>\n

One problem with password managers is that they usually stay on one device. This is more secure, but inconvenient \u2013 you may need your bank credentials on your phone one day, e.g. during vacations.<\/p>\n

If only you had an ownCloud account to synchronize your passwords between all your devices, just as you are used to with your files. Fortunately, this is possible.<\/p>\n

 <\/p>\n

\n

\"A<\/a><\/p>\n

Don\u2019t be fooled \u2013 not all hackers wear a black hoodie or a mask. At least not all the time.<\/em><\/p>\n<\/div>\n

 <\/p>\n

If you store your passwords in the cloud, you have to worry about who owns the server, of course. Here comes the ownCloud bonus: in contrast to other cloud storage providers, with ownCloud you know which admin you trust with protecting your passphrases.<\/p>\n

With most password managers, and definitely with the two tools I\u2019m showing today, you don\u2019t even have to worry about that. The password vaults are encrypted with your master passphrase, so the admin can\u2019t access them.<\/p>\n

There are several password managers out there \u2013 the tools with the best integration into ownCloud are KeePassXC and Passman.<\/p>\n

 <\/p>\n

KeePassXC \u2013 All Your Passwords in One File<\/h2>\n

KeePassXC stores all of your passphrases in one file, the password database. It\u2019s easy: you just download KeePassXC from\u00a0the official website<\/a>\u00a0or the packages for your distribution, install it, and create a database.<\/p>\n

The best way is to use the\u00a0ownCloud desktop client<\/a>. Then you can save it in your synchronization folder, so it stays in sync with your other devices.<\/p>\n

If you want to access it on mobile, you have to install the ownCloud\u00a0Android<\/a>\u00a0or\u00a0iOS<\/a>\u00a0app, and a KeePass app like\u00a0KeePassDroid<\/a>. Then you can import the KeePass database from the ownCloud directory.<\/p>\n

 <\/p>\n

Add a Passphrase to Your KeePass Store<\/h3>\n

Pick a strong, long passphrase which you can definitely remember.\u00a0This XKCD comic<\/a>\u00a0is very good advice on how to create strong passwords, which are easy to remember. Then you can start to save your passwords:<\/p>\n

 <\/p>\n

\n

\"ownCloud<\/a><\/p>\n

Create a new password entry in KeePassXC.<\/em><\/p>\n<\/div>\n

 <\/p>\n

Built-in Password Generator<\/h3>\n

When you need a new passphrase though, you better use the built-in password generator. It creates random passwords, which are nearly impossible to guess. This is what it looks like in KeePassXC:<\/p>\n

 <\/p>\n

\n

\"ownCloud<\/a><\/p>\n

Use the built-in password generator of KeePassXC to generate a password.<\/em><\/p>\n<\/div>\n

 <\/p>\n

Export Your Credentials to Other Password Managers<\/h3>\n

KeePassXC is a great tool to start, and has almost all features you need. If you miss something and find another password manager which supports it, you can still export all your passwords to a .csv file and import it somewhere else.<\/p>\n

 <\/p>\n

\n

\"ownCloud<\/a><\/p>\n

You can export you passwords from KeePass into a csv file.<\/em><\/p>\n<\/div>\n

 <\/p>\n

For example into Passman, the second password manager I want to introduce:<\/p>\n

 <\/p>\n

Passman \u2013 a Password Manager Integrated Into ownCloud<\/h2>\n

If you don\u2019t have admin rights and can\u2019t install KeePassXC on your computer, then\u00a0Passman<\/a>\u00a0might be the solution for you. It is an ownCloud app, the ownCloud admin installs it to the server.<\/p>\n

Then it works in the browser \u2013 you can open it via the app tray in ownCloud. The first step is, as with KeePassXC, to create a password vault. Choose a strong passphrase:<\/p>\n

 <\/p>\n

\n

\"ownCloud<\/a><\/p>\n

You can create a Passman vault directly in the web interface.<\/em><\/p>\n<\/div>\n

 <\/p>\n

Add Passwords to Passman<\/h3>\n

Then you can add passphrases to the password manager. It really works similar as KeePassXC, just the interface looks slightly different:<\/p>\n

 <\/p>\n

\n

\"ownCloud<\/a><\/p>\n

When you add a passphrase to Passman, you can also link a username and a login URL to it, even notes and tags.<\/em><\/p>\n<\/div>\n

 <\/p>\n

Of course a password generator is included in Passman, too. You can generate really secure passwords with one button. No one will ever be able to guess them (except quantum computers, maybe).<\/p>\n

In the settings you can find some options how those passwords should look like. The default option (12 chars) is a bit short \u2013 you should pick something above 30. You will only copy-paste them anyway:<\/p>\n

 <\/p>\n

\n

\"ownCloud<\/a><\/p>\n

You can specify how many different kinds of special characters will be in your generated passwords.<\/em><\/p>\n<\/div>\n

 <\/p>\n

Optional: Import Your Credentials From Other Password Managers<\/h3>\n

Passman also has an import & export function \u2013 this makes migrating from something like KeePassXC a lot easier. It supports many different password managers. If you exported your KeePassXC passwords to a .csv file, you can import them like this:<\/p>\n

 <\/p>\n

\n

\"ownCloud<\/a><\/p>\n

In the settings, you can choose to import passwords from many different password managers.<\/em><\/p>\n<\/div>\n

 <\/p>\n

You can also use the export and import feature to make backups from your passphrases \u2013 this way you can be sure you have a backup on your PC when the ownCloud goes down, or when you are offline. You can also import it into several other password managers.<\/p>\n

This backup will be unencrypted though \u2013 if you don\u2019t want to trust your admin with all of your passwords, you should not sync the backup to your ownCloud. Why would you? The passwords are already there, encrypted and secure.<\/p>\n

 <\/p>\n

What Is the Best Solution? What Is Most Secure? Pick Yourself!<\/h2>\n

There is no solution which fits everyone\u2019s requirements \u2013 do you have admin rights at your work computer? Does your admin refuse to install the Passman app? Do you have an ownCloud mobile app? Do you use a Linux flavor where KeePassXC doesn\u2019t run?<\/p>\n

Try them out and choose the solution which fits for you. ownCloud is about customizability \u2013 you should be able to adjust it to your needs. If you find another tool which works better, tell us. But for now, you can try one of those:<\/p>\n

 <\/p>\n

Install KeePassXC on your computer!<\/a><\/p>\n

Install Passman to your ownCloud!<\/a><\/p>\n

 <\/p>\n

Do you have other password managers to recommend? Leave a comment!<\/p>\n

And feel free to show this post to your family & friends, if their bad passwords don\u2019t let you sleep at night.<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

Weak passwords are one of the main reasons for successful hacking attacks \u2013 password managers can protect you. With ownCloud, you can even share your passwords between devices.<\/p>\n","protected":false},"author":7,"featured_media":46756,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","inline_featured_image":false,"footnotes":""},"categories":[43],"tags":[],"class_list":["post-46755","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog"],"acf":[],"_links":{"self":[{"href":"https:\/\/owncloud.com\/de\/wp-json\/wp\/v2\/posts\/46755","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/owncloud.com\/de\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/owncloud.com\/de\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/owncloud.com\/de\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/owncloud.com\/de\/wp-json\/wp\/v2\/comments?post=46755"}],"version-history":[{"count":0,"href":"https:\/\/owncloud.com\/de\/wp-json\/wp\/v2\/posts\/46755\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/owncloud.com\/de\/wp-json\/wp\/v2\/media\/46756"}],"wp:attachment":[{"href":"https:\/\/owncloud.com\/de\/wp-json\/wp\/v2\/media?parent=46755"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/owncloud.com\/de\/wp-json\/wp\/v2\/categories?post=46755"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/owncloud.com\/de\/wp-json\/wp\/v2\/tags?post=46755"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}