Keepass is my personal’s choice password manger software. Keepass is free and open source software that let you securely store all your passwords in one database with only one master key or a key file. The databases are encrypted with AES (Advanced Encryption Standard) and Twofish encryption algorithms. I will show you how to install and use keepass2 on Ubuntu 18.04 in this tutorial. I have not test on other Ubuntu based distributions but most likely this tutorial will also work on most of the newest order ubuntu based distributions like Linuxmint, xubuntu, kubuntu,…etc.
To install keepass2 on Ubuntu
$ sudo apt install keepass2 -y
You will be asked to install additional packages, most of them are mono packages. Mono is an open source project sponsored by Microsoft which let you create and run cross platform softwares that need Microsoft’s .NET Framework on Linux, MacOS, BSD.
Reading package lists... Done Building dependency tree Reading state information... Done The following additional packages will be installed: binfmt-support ca-certificates-mono cli-common libgdiplus libmono-accessibility4.0-cil libmono-corlib4.5-cil libmono-data-tds4.0-cil libmono-i18n-west4.0-cil libmono-i18n4.0-cil libmono-posix4.0-cil libmono-security4.0-cil libmono-system-configuration4.0-cil libmono-system-core4.0-cil libmono-system-data4.0-cil libmono-system-drawing4.0-cil libmono-system-enterpriseservices4.0-cil libmono-system-numerics4.0-cil libmono-system-runtime-serialization-formatters-soap4.0-cil libmono-system-security4.0-cil libmono-system-transactions4.0-cil libmono-system-windows-forms4.0-cil libmono-system-xml4.0-cil libmono-system4.0-cil libmono-webbrowser4.0-cil mono-4.0-gac mono-gac mono-runtime mono-runtime-common mono-runtime-sgen xsel Suggested packages: keepass2-doc mono-dmcs xdotool libmono-i18n4.0-all libgnomeui-0 libgamin0 Recommended packages: libgluezilla The following NEW packages will be installed: binfmt-support ca-certificates-mono cli-common keepass2 libgdiplus libmono-accessibility4.0-cil libmono-corlib4.5-cil libmono-data-tds4.0-cil libmono-i18n-west4.0-cil libmono-i18n4.0-cil libmono-posix4.0-cil libmono-security4.0-cil libmono-system-configuration4.0-cil libmono-system-core4.0-cil libmono-system-data4.0-cil libmono-system-drawing4.0-cil libmono-system-enterpriseservices4.0-cil libmono-system-numerics4.0-cil libmono-system-runtime-serialization-formatters-soap4.0-cil libmono-system-security4.0-cil libmono-system-transactions4.0-cil libmono-system-windows-forms4.0-cil libmono-system-xml4.0-cil libmono-system4.0-cil libmono-webbrowser4.0-cil mono-4.0-gac mono-gac mono-runtime mono-runtime-common mono-runtime-sgen xsel 0 upgraded, 31 newly installed, 0 to remove and 0 not upgraded. Need to get 8,355 kB of archives. After this operation, 29.6 MB of additional disk space will be used. Do you want to continue? [Y/n]
Mono will also add many root certificates to your system during the installation and keepass2.
Updating Mono key store Linux Cert Store Sync - version 4.6.2.0 Synchronize local certs with certs from local Linux trust store. Copyright 2002, 2003 Motus Technologies. Copyright 2004-2008 Novell. BSD licensed. I already trust 0, your new list has 133 Certificate added: CN=ACCVRAIZ1, OU=PKIACCV, O=ACCV, C=ES Certificate added: C=ES, O=FNMT-RCM, OU=AC RAIZ FNMT-RCM Certificate added: C=IT, L=Milan, O=Actalis S.p.A./03358520967, CN=Actalis Authentication Root CA Certificate added: C=SE, O=AddTrust AB, OU=AddTrust External TTP Network, CN=AddTrust External CA Root Certificate added: C=US, O=AffirmTrust, CN=AffirmTrust Commercial Certificate added: C=US, O=AffirmTrust, CN=AffirmTrust Networking Certificate added: C=US, O=AffirmTrust, CN=AffirmTrust Premium Certificate added: C=US, O=AffirmTrust, CN=AffirmTrust Premium ECC Certificate added: C=US, O=Amazon, CN=Amazon Root CA 1 Certificate added: C=US, O=Amazon, CN=Amazon Root CA 2 Certificate added: C=US, O=Amazon, CN=Amazon Root CA 3 Certificate added: C=US, O=Amazon, CN=Amazon Root CA 4 Certificate added: CN=Atos TrustedRoot 2011, O=Atos, C=DE Certificate added: C=ES, CN=Autoridad de Certificacion Firmaprofesional CIF A62634068 Certificate added: C=IE, O=Baltimore, OU=CyberTrust, CN=Baltimore CyberTrust Root Certificate added: C=NO, O=Buypass AS-983163327, CN=Buypass Class 2 Root CA Certificate added: C=NO, O=Buypass AS-983163327, CN=Buypass Class 3 Root CA Certificate added: C=SK, L=Bratislava, O=Disig a.s., CN=CA Disig Root R2 Certificate added: C=CN, O=China Financial Certification Authority, CN=CFCA EV ROOT Certificate added: C=GB, S=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO Certification Authority Certificate added: C=GB, S=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO ECC Certification Authority Certificate added: C=GB, S=Greater Manchester, L=Salford, O=COMODO CA Limited, CN=COMODO RSA Certification Authority Certificate added: C=FR, O=Dhimyotis, CN=Certigna Certificate added: C=FR, O=Certinomis, OU=0002 433998903, CN=Certinomis - Root CA Certificate added: C=FR, O=Certplus, CN=Class 2 Primary CA Certificate added: C=FR, O=Certplus, CN=Certplus Root CA G1 Certificate added: C=FR, O=Certplus, CN=Certplus Root CA G2 Certificate added: C=PL, O=Unizeto Technologies S.A., OU=Certum Certification Authority, CN=Certum Trusted Network CA Certificate added: C=PL, O=Unizeto Technologies S.A., OU=Certum Certification Authority, CN=Certum Trusted Network CA 2 Certificate added: C=EU, L=Madrid (see current address at www.camerfirma.com/address), OID.2.5.4.5=A82743287, O=AC Camerfirma S.A., CN=Chambers of Commerce Root - 2008 Certificate added: C=GB, S=Greater Manchester, L=Salford, O=Comodo CA Limited, CN=AAA Certificate Services Certificate added: O="Cybertrust, Inc", CN=Cybertrust Global Root Certificate added: C=DE, O=D-Trust GmbH, CN=D-TRUST Root Class 3 CA 2 2009 Certificate added: C=DE, O=D-Trust GmbH, CN=D-TRUST Root Class 3 CA 2 EV 2009 Certificate added: O=Digital Signature Trust Co., CN=DST Root CA X3 Certificate added: C=DE, O=Deutsche Telekom AG, OU=T-TeleSec Trust Center, CN=Deutsche Telekom Root CA 2 Certificate added: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root CA Certificate added: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root G2 Certificate added: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Assured ID Root G3 Certificate added: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root CA Certificate added: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G2 Certificate added: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Global Root G3 Certificate added: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert High Assurance EV Root CA Certificate added: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=DigiCert Trusted Root G4 Certificate added: C=TR, L=Ankara, O=E-Tuğra EBG Bilişim Teknolojileri ve Hizmetleri A.Ş., OU=E-Tugra Sertifikasyon Merkezi, CN=E-Tugra Certification Authority Certificate added: C=ES, O=Agencia Catalana de Certificacio (NIF Q-0801176-I), OU=Serveis Publics de Certificacio, OU=Vegeu https://www.catcert.net/verarrel (c)03, OU=Jerarquia Entitats de Certificacio Catalanes, CN=EC-ACC Certificate added: C=EE, O=AS Sertifitseerimiskeskus, CN=EE Certification Centre Root CA, E=pki@sk.ee Certificate added: O=Entrust.net, OU=www.entrust.net/CPS_2048 incorp. by ref. (limits liab.), OU=(c) 1999 Entrust.net Limited, CN=Entrust.net Certification Authority (2048) Certificate added: C=US, O="Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, OU="(c) 2006 Entrust, Inc.", CN=Entrust Root Certification Authority Certificate added: C=US, O="Entrust, Inc.", OU=See www.entrust.net/legal-terms, OU="(c) 2012 Entrust, Inc. - for authorized use only", CN=Entrust Root Certification Authority - EC1 Certificate added: C=US, O="Entrust, Inc.", OU=See www.entrust.net/legal-terms, OU="(c) 2009 Entrust, Inc. - for authorized use only", CN=Entrust Root Certification Authority - G2 Certificate added: C=CN, O="GUANG DONG CERTIFICATE AUTHORITY CO.,LTD.", CN=GDCA TrustAUTH R5 ROOT Certificate added: C=US, O=GeoTrust Inc., CN=GeoTrust Global CA Certificate added: C=US, O=GeoTrust Inc., CN=GeoTrust Primary Certification Authority Certificate added: C=US, O=GeoTrust Inc., OU=(c) 2007 GeoTrust Inc. - For authorized use only, CN=GeoTrust Primary Certification Authority - G2 Certificate added: C=US, O=GeoTrust Inc., OU=(c) 2008 GeoTrust Inc. - For authorized use only, CN=GeoTrust Primary Certification Authority - G3 Certificate added: C=US, O=GeoTrust Inc., CN=GeoTrust Universal CA Certificate added: C=US, O=GeoTrust Inc., CN=GeoTrust Universal CA 2 Certificate added: OU=GlobalSign ECC Root CA - R4, O=GlobalSign, CN=GlobalSign Certificate added: OU=GlobalSign ECC Root CA - R5, O=GlobalSign, CN=GlobalSign Certificate added: C=BE, O=GlobalSign nv-sa, OU=Root CA, CN=GlobalSign Root CA Certificate added: OU=GlobalSign Root CA - R2, O=GlobalSign, CN=GlobalSign Certificate added: OU=GlobalSign Root CA - R3, O=GlobalSign, CN=GlobalSign Certificate added: C=EU, L=Madrid (see current address at www.camerfirma.com/address), OID.2.5.4.5=A82743287, O=AC Camerfirma S.A., CN=Global Chambersign Root - 2008 Certificate added: C=US, O="The Go Daddy Group, Inc.", OU=Go Daddy Class 2 Certification Authority Certificate added: C=US, S=Arizona, L=Scottsdale, O="GoDaddy.com, Inc.", CN=Go Daddy Root Certificate Authority - G2 Certificate added: C=GR, L=Athens, O=Hellenic Academic and Research Institutions Cert. Authority, CN=Hellenic Academic and Research Institutions ECC RootCA 2015 Certificate added: C=GR, O=Hellenic Academic and Research Institutions Cert. Authority, CN=Hellenic Academic and Research Institutions RootCA 2011 Certificate added: C=GR, L=Athens, O=Hellenic Academic and Research Institutions Cert. Authority, CN=Hellenic Academic and Research Institutions RootCA 2015 Certificate added: C=HK, O=Hongkong Post, CN=Hongkong Post Root CA 1 Certificate added: C=US, O=Internet Security Research Group, CN=ISRG Root X1 Certificate added: C=US, O=IdenTrust, CN=IdenTrust Commercial Root CA 1 Certificate added: C=US, O=IdenTrust, CN=IdenTrust Public Sector Root CA 1 Certificate added: C=ES, O=IZENPE S.A., CN=Izenpe.com Certificate added: C=LU, O=LuxTrust S.A., CN=LuxTrust Global Root 2 Certificate added: C=HU, L=Budapest, O=Microsec Ltd., CN=Microsec e-Szigno Root CA 2009, E=info@e-szigno.hu Certificate added: C=HU, L=Budapest, O=NetLock Kft., OU=Tanúsítványkiadók (Certification Services), CN=NetLock Arany (Class Gold) Főtanúsítvány Certificate added: C=US, O=Network Solutions L.L.C., CN=Network Solutions Certificate Authority Certificate added: C=CH, O=WISeKey, OU=Copyright (c) 2005, OU=OISTE Foundation Endorsed, CN=OISTE WISeKey Global Root GA CA Certificate added: C=CH, O=WISeKey, OU=OISTE Foundation Endorsed, CN=OISTE WISeKey Global Root GB CA Certificate added: C=FR, O=OpenTrust, CN=OpenTrust Root CA G1 Certificate added: C=FR, O=OpenTrust, CN=OpenTrust Root CA G2 Certificate added: C=FR, O=OpenTrust, CN=OpenTrust Root CA G3 Certificate added: C=BM, O=QuoVadis Limited, OU=Root Certification Authority, CN=QuoVadis Root Certification Authority Certificate added: C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 1 G3 Certificate added: C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 2 Certificate added: C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 2 G3 Certificate added: C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 3 Certificate added: C=BM, O=QuoVadis Limited, CN=QuoVadis Root CA 3 G3 Certificate added: C=US, S=Texas, L=Houston, O=SSL Corporation, CN=SSL.com EV Root Certification Authority ECC Certificate added: C=US, S=Texas, L=Houston, O=SSL Corporation, CN=SSL.com EV Root Certification Authority RSA R2 Certificate added: C=US, S=Texas, L=Houston, O=SSL Corporation, CN=SSL.com Root Certification Authority ECC Certificate added: C=US, S=Texas, L=Houston, O=SSL Corporation, CN=SSL.com Root Certification Authority RSA Certificate added: C=PL, O=Krajowa Izba Rozliczeniowa S.A., CN=SZAFIR ROOT CA2 Certificate added: C=JP, O="Japan Certification Services, Inc.", CN=SecureSign RootCA11 Certificate added: C=US, O=SecureTrust Corporation, CN=SecureTrust CA Certificate added: C=US, O=SecureTrust Corporation, CN=Secure Global CA Certificate added: C=JP, O="SECOM Trust Systems CO.,LTD.", OU=Security Communication RootCA2 Certificate added: C=JP, O=SECOM Trust.net, OU=Security Communication RootCA1 Certificate added: C=FI, O=Sonera, CN=Sonera Class2 CA Certificate added: C=NL, O=Staat der Nederlanden, CN=Staat der Nederlanden EV Root CA Certificate added: C=NL, O=Staat der Nederlanden, CN=Staat der Nederlanden Root CA - G2 Certificate added: C=NL, O=Staat der Nederlanden, CN=Staat der Nederlanden Root CA - G3 Certificate added: C=US, O="Starfield Technologies, Inc.", OU=Starfield Class 2 Certification Authority Certificate added: C=US, S=Arizona, L=Scottsdale, O="Starfield Technologies, Inc.", CN=Starfield Root Certificate Authority - G2 Certificate added: C=US, S=Arizona, L=Scottsdale, O="Starfield Technologies, Inc.", CN=Starfield Services Root Certificate Authority - G2 Certificate added: C=CH, O=SwissSign AG, CN=SwissSign Gold CA - G2 Certificate added: C=CH, O=SwissSign AG, CN=SwissSign Silver CA - G2 Certificate added: C=DE, O=T-Systems Enterprise Services GmbH, OU=T-Systems Trust Center, CN=T-TeleSec GlobalRoot Class 2 Certificate added: C=DE, O=T-Systems Enterprise Services GmbH, OU=T-Systems Trust Center, CN=T-TeleSec GlobalRoot Class 3 Certificate added: C=TR, L=Gebze - Kocaeli, O=Turkiye Bilimsel ve Teknolojik Arastirma Kurumu - TUBITAK, OU=Kamu Sertifikasyon Merkezi - Kamu SM, CN=TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1 Certificate added: C=TW, O=TAIWAN-CA, OU=Root CA, CN=TWCA Global Root CA Certificate added: C=TW, O=TAIWAN-CA, OU=Root CA, CN=TWCA Root Certification Authority Certificate added: C=TW, O=Government Root Certification Authority Certificate added: O=TeliaSonera, CN=TeliaSonera Root CA v1 Certificate added: C=PA, S=Panama, L=Panama City, O=TrustCor Systems S. de R.L., OU=TrustCor Certificate Authority, CN=TrustCor ECA-1 Certificate added: C=PA, S=Panama, L=Panama City, O=TrustCor Systems S. de R.L., OU=TrustCor Certificate Authority, CN=TrustCor RootCert CA-1 Certificate added: C=PA, S=Panama, L=Panama City, O=TrustCor Systems S. de R.L., OU=TrustCor Certificate Authority, CN=TrustCor RootCert CA-2 Certificate added: C=GB, O=Trustis Limited, OU=Trustis FPS Root CA Certificate added: C=TR, L=Ankara, O=TÜRKTRUST Bilgi İletişim ve Bilişim Güvenliği Hizmetleri A.Ş., CN=TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5 Certificate added: C=US, S=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust ECC Certification Authority Certificate added: C=US, S=New Jersey, L=Jersey City, O=The USERTRUST Network, CN=USERTrust RSA Certification Authority Certificate added: C=US, O="VeriSign, Inc.", OU=VeriSign Trust Network, OU="(c) 2007 VeriSign, Inc. - For authorized use only", CN=VeriSign Class 3 Public Primary Certification Authority - G4 Certificate added: C=US, O="VeriSign, Inc.", OU=VeriSign Trust Network, OU="(c) 2006 VeriSign, Inc. - For authorized use only", CN=VeriSign Class 3 Public Primary Certification Authority - G5 Certificate added: C=US, O="VeriSign, Inc.", OU=VeriSign Trust Network, OU="(c) 2008 VeriSign, Inc. - For authorized use only", CN=VeriSign Universal Root Certification Authority Certificate added: C=US, O="VeriSign, Inc.", OU=VeriSign Trust Network, OU="(c) 1999 VeriSign, Inc. - For authorized use only", CN=VeriSign Class 3 Public Primary Certification Authority - G3 Certificate added: C=US, O=VISA, OU=Visa International Service Association, CN=Visa eCommerce Root Certificate added: C=US, OU=www.xrampsecurity.com, O=XRamp Security Services Inc, CN=XRamp Global Certification Authority Certificate added: C=RO, O=certSIGN, OU=certSIGN ROOT CA Certificate added: C=TW, O="Chunghwa Telecom Co., Ltd.", OU=ePKI Root Certification Authority Certificate added: C=US, O="thawte, Inc.", OU=Certification Services Division, OU="(c) 2006 thawte, Inc. - For authorized use only", CN=thawte Primary Root CA Certificate added: C=US, O="thawte, Inc.", OU="(c) 2007 thawte, Inc. - For authorized use only", CN=thawte Primary Root CA - G2 Certificate added: C=US, O="thawte, Inc.", OU=Certification Services Division, OU="(c) 2008 thawte, Inc. - For authorized use only", CN=thawte Primary Root CA - G3 133 new root certificates were added to your trust store. Import process completed. Done done.
To use keepass2 on Ubuntu
Depends on what Linux distro you are using, keepass2 shortcut will be placed under “All Application / Utilities”
After you start keepass2, this is the main keepass2 screen look like
Keepass was great but Bitwarden leaves it in the dust