Guidance / Suggestions for KeePassXC sync with phone

General Discussion
, ,
1

Hello,

As I start using QuBes in my daily laptop, I need to maintain my KeePassXC up to date with phone.

Thus, I am reaching out to other more experienced users about their experience in doing so.
There are some other posts on this forum - but, I found these to be very convoluted.

I would hope for some high-levels steps and stragegy to be shared;
thus, facilitating the transition for newbies.

Thanks

2

If you don’t mind giving the VM direct network access, you can use Syncthing downloadable through apt, flatpak or as an executable, and Syncthing-Fork on the phone. Don’t modify the database on both devices at the same time and keep regular backups. Use Möbius Sync if iOS. KeePass for Android can be KeePassDX.

3

Thanks @tumble

It seems that your ‘Vault’ has full internet access.

I was trying to find a way to avoid giving full network connectivity.

But, if there is no better option - i may have to go with that

4

You will need an VM to run syncing software, which needs internet and would already have access to your password database. What is your concern? That the database password will be extracted through the memory? There are guides such as split-syncthing.

edit: depending on setup with Syncthing, firewall rules could be used to limit risk.

5

So, the problem is to share some data between your vault qube and a phone?

What’s wrong about manually copying them like this: vault qube → disposable with access to the phone → your phone?

The whole point of Qubes OS is to isolate things so I don’t understand why one would connect a vault qube to the internet.

6

Transfer through USB? The problem is inconvenience. If I create a new login, every time it has to go through the process again. At least using KeePass in this method is more secure than online password managers, who could modify the JS code at any point.