Keywi per LEDfan

You can find the latest version of this information on https://github.com/LEDfan/keywi/blob/master/amo/DESCRIPTION-EN.html


Goals

• Minimalistic password integration in Firefox
  
• Fill username and password in login form, using context menu and keyboard shortcut
  
• Use [Keepass HTTP](https://github.com/pfn/keepasshttp)
  
• No editing of the Keepass database
  
• Using the Firefox web extensions API, to support Electrolysis
  
• Support Keepass, later maybe [Pass](https://www.passwordstore.org/)
  
• Minimal amount of libraries (aes, cryptoheplers and reqwest)
  
• no automatic form filling, i.e. only when the user wants to. This is very important because:
  
  • crendetials can be filled in the sign up form
    
  • credentials can be filled in a hidden form
    
  • you don't want to log in on this website now
    
  • there are multiple forms on the website (unlikely)
    
• no injecting of buttons or icons into forms
  

Usage

Keywi uses the local storage mechanism of the browser to store some information needed to connect to Keepass. This information includes the key used to authenticate and encrypt the communication with Keepass. The information stored in the local storage of the browser is stored unencrypted.
Therefore Keywi encrypts this information (database.key, database.id and database.hash) using 256-bit AES key derived from a user-provided password.

This password is asked to the user the first time Keywi is used for encrypting the information. Every time you start Firefox it's asked to decrypt the information.

Keywi requires Firefox 51 or later.


First time

1. Install the KeepassHTTP plugin in Keepass. See: https://github.com/pfn/keepasshttp
   
2. make sure the correct Keepass database is open
   
3. install the addon
   
4. you'll be asked to enter a password for secure storage. You should **not** use the same password as used in Keepass. Make sure it's a secure and strong password. Screenshot
   
5. keepass will ask to confirm the association
   Screenshot
   

When Firefox starts

You will be asked to unlock the Secure Storage using the same password as during the setup.
Screenshot


Fill in credentials

1. elect the username input field
   
2. right click and choose "Fill username and password" inside the "Keywi" submenu. It's possible to only fill your username or password.
   Screenshot
   
3. click "Allow" when keepass asks permission for the request to the credentials
   
4. the username and password are filled
   

Keyboard shortcuts

The following shortcuts are supported:

• Ctrl + Shift + F Fill username and password in the current active input field (only the username will be filled when no password field is found)
  
• Ctrl + Shift + D Fill only password in the current active input field
  

Multiple Credentials for one URL

When Keepass finds multiple Credentials for one URL, it will ask you to select one:
Screenshot


Disable "Remember for logins" in Firefox

To provide a better user experience we advise to disable the feature in Firefox to remember logins.