davidedg / keepassxc-cr-recovery

Helps with regaining access to your CR protected KeePassXC database in case of a lost YubiKey

keepassxc-cr-recovery

A small tool that helps you regain access to your KeePassXC password database in case you have it protected with YubiKey challenge-response and lost your key. Currently supports KDBX4 databases with Argon2 hashing.

Building

Tested with Go 1.16. Just run go build.

Usage

What you need:

• your KeePassXC database
• your challenge-response secret. This cannot be retrieved from the YubiKey, it needs to be saved upon initial configuration of the key.

Then just run

keepass-cr-recovery path-to-your-password-database path-of-the-new-keyfile

It will prompt for the challenge-response secret. You will get a keyfile at the specified destination path. Then, to unlock your database in KeePassXC, you need to check "key file" instead of "challenge response" and load the file.