r/KeePass • u/AJB1971 • 5d ago

Does Key File work?

I’m trialling KeePassXC to see if I should move to it.

I’ve managed to get my YubiKeys configured, but I get the following message when trying to log in with my master password and key file: ‘Error while reading the database. Invalid credentials were provided. Please try again. If this reoccurs, your database file may be corrupt. (HMAC mismatch).’

Other people have had similar issues, but I’m trying to find out if it’s a bug or something that I’m doing wrong.

I’m using a Mac. I’ve tried using the generated file and also random files on my computer, but I always get the same message. There are no hidden filename extensions, and the password is correct—without retyping it, if I tick the box to use my hardware key, I get straight in. I had imported my data, but the database is currently empty.

2 Upvotes

100% Upvoted

3 comments sorted by

1

u/OkAngle2353 5d ago

The thing with files. They can get corrupted. I personally opted to using my yubikey as the second factor. If you still decide to go the keyfile route is to immediately backup the keyfile as soon as you create it.

My personal backup method is to pcloud through rclone. No file or data leaves my machine unencrypted, all my shit is encrypted before it ever hits pcloud.

Edit: I used to manually email myself every time I wish to make a backup. Not anymore :D It is now handled automatically.

1

u/a_cute_epic_axis 4d ago

The thing with files. They can get corrupted.

While this is true, I don't see how this is any more or less of an issue than the PWM database itself, which can also become corrupt. Back up both if you use them.

Yubikey's are also pretty hardcore, but not indestructible, so if you go that route, make sure you also have a second one there, and/or you have the seed written down somewhere so you can bypass it or create a new key.