pinentry-keepassxc

A pinentry program that automatically gets gpg passphrase from KeePassXC.

Setup

1. enable logging (for example by uncommenting line 12 in main.rs)
2. compile this program and add it as an pinentry program GnuPG Manual / ArchWiki
3. invoke gpg such that a signing request is triggered
4. your keepassxc should ask for a connection name => choose one (here I choose: connectionname)
5. sh cat ~/.cache/pinentry-keepassxc.log and look for a message with entry example output: json {"action":"get-logins","url":"gpg://THIS_IS_A_URL","keys":[{"id":"CONNECTION_NAME","key":"KEY_FIELD_IN_ENTRY_MESSAGE_ABOVE"}]}
6. create a config file nano ~/.config/pinentry-keepassxcrc content: ```json { "id": "CONNECTION_NAME" "idKey": "KEY_FIELD_IN_ENTRY_MESSAGE_ABOVE" }

7. add for the entry in your database add this as an url: gpg://THIS_IS_A_URL
8. DISABLE LOGGING AGAIN - otherwise password will be logged in clear text to the above mentioned file

Usage

How it works

See: docs

Other integration utilities for KeePassXC

• git-credential-keepassxc: Git credential helper
• keepassxc-browser: Integrate KeePassXC with web browsers