It's quite nice and still under active development.ĭragging-and-dropping the username icon to the username field and the 'key' icon to the password field (preferably in the reverse order, but sometimes that's not possible, and sometimes I have to use the clipboard instead of drag and drop) then clicking the 'clear clipboard' button in pwsafe is easy. android, Windows, Linux, etc., and it has an auto-sync feature which ensures I have the latest version of my encrypted passwords file on every device. I like it because it's compatible with every OS I use. I use Password Safe also (Bruce Schneier's program which encrypts the password database with at least Twofish), but I never use the auto-type feature. Yubikeys are not designed to act as a proxy (with the possible exception of the FIDO modes, but those modes were designed for online use with a 3rd party too.)

you need a password supplied in order to use it, or you need a device that can proxy the use of the password. (As far as I know, there aren't many publicly available apps or tools that use it because of the cost.)

Check out the Yubico HSM (hardware security module) if you have the programming chops to create an app with it. Yubico does make a device that does this, but it's very expensive in comparison to a Yubikey. The only way this could be avoided would be if the Yubikey stored a password that the password manager could use to do crypto with in secret. Since you want to use local authentication, you do realize that anyone who copied your data offsite, could work around the local authentication by bypassing it. Of course if your focus is not right (say you have a Word document focused) then the Yubikey can't know this, and there goes your password rapidly typed into the wrong place (like in the middle of that Word document.)Īlso, Yubikey in most of its modes is only about authentication. Basically you preload it with a password, and when you use this mode, it will simulate your keyboard typing that password in. One of the other ways it can work is to manually type a password for you. (There is a way to replace it, but you still have to send it to them.) they preloaded it in their server when they built your key. The initial Yubikey authentication method REQUIRES online access to Yubikey's server (or one of your own if you want to totally forgo Yubikey working anywhere but with your server.) The way this mode works is with a secret shared between your key and their server. Click to expand.Yes one claims to exist, no it doesn't do what you want and gives a false sense of security.

Keepass yubikey