1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
|
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta http-equiv="expires" content="0" />
<meta http-equiv="cache-control" content="no-cache" />
<meta http-equiv="pragma" content="no-cache" />
<meta name="author" content="Dominik Reichl" />
<meta name="DC.title" content="Multi-User - KeePass" />
<meta name="DC.creator" content="Dominik Reichl" />
<meta name="DC.type" content="Text" />
<meta name="DC.format" content="text/html" />
<meta name="DC.language" content="en" />
<meta name="DC.rights" content="Copyright (C) 2003-2019 Dominik Reichl" />
<meta name="robots" content="index, follow" />
<meta name="flattr:id" content="42rykv" />
<title>Multi-User - KeePass</title>
<base target="_self" />
<link rel="stylesheet" type="text/css" href="../../default.css" />
</head>
<body>
<table class="sectionsummary"><tr><td width="68">
<img src="../images/b64x64_kdmconfig.png" width="64" height="64"
class="singleimg" align="left" alt="Help" />
</td><td valign="middle"><h1>Multi-User</h1><br />
Details about multi-user features of KeePass.
</td></tr></table>
<ul>
<li><b>Shared Database Editing:</b>
<ul>
<li><a href="#shareddb">General Information about Shared Databases</a></li>
<li><a href="#locking1x">KeePass 1.x: Office-Style Locking</a></li>
<li><a href="#syncorsave2x">KeePass 2.x: Synchronize or Overwrite</a></li>
</ul>
</li>
</ul>
<br />
<a name="shareddb"></a>
<h2 class="sectiontitle">
<img src="../images/b16x16_kdmconfig.png" class="singleimg" alt="People" /> General
Information about Shared Databases</h2>
<p>Both KeePass 1.x and 2.x allow multiple users working with one database,
which is typically stored on a shared network drive or a file server.</p>
<p>All users use the same master password and/or key file to open the
database. There are no per-group or per-entry access control lists (ACLs).</p>
<p>In order to restrict write access to the database file (i.e. only a select
set of users may change the stored data), use file system access rights.</p>
<br />
<a name="locking1x"></a>
<h2 class="sectiontitle">
<img src="../images/b16x16_kdmconfig.png" class="singleimg" alt="People" /> KeePass
1.x: Office-Style Locking</h2>
<br />
<table class="laytable" cellpadding="0" cellspacing="0">
<tr><td align="left" valign="top">
With KeePass 1.x, a database can be stored on a shared network drive and used by multiple
users. When a user tries to open a database that is already opened by
someone else, a prompt asks whether to open the database in read-only
or normal mode (see image on the right).<br />
<br />
By opening a database in normal mode, the current user takes ownership
of the file (i.e. subsequent opening attempts will show the current user
as owner).<br />
<br />
KeePass 1.x does not provide synchronization, i.e. by saving the database you
are saving your current data to disk. If another user has changed an entry
in the meanwhile (i.e. since you loaded the database), these changes are overwritten.
</td>
<td width="306" align="right" valign="top">
<a href="https://keepass.info/screenshots/windows_vista/readonlymode_big.png"
target="_blank"><img src="../../screenshots/windows_vista/readonlymode.png"
align="right" alt="KeePass 1.x Read-Only Prompt" /></a>
</td></tr></table>
<p>If you want to use KeePass 1.x with a database on a shared network drive, it
is recommended to let an administrator write to the database and let
users only read it (ensure this using file system access rights).
By using the <a href="cmdline.html">-readonly</a> command line switch,
KeePass will automatically open
a given database in read-only mode (i.e. not show the mode prompt). Users
would open the database using a shortcut that contains this command line
switch.</p>
<p>If there is no central administrator managing the database, users need to
be careful to not overwrite each others changes.</p>
<br />
<a name="syncorsave2x"></a>
<h2 class="sectiontitle">
<img src="../images/b16x16_kdmconfig.png" class="singleimg" alt="People" /> KeePass
2.x: Synchronize or Overwrite</h2>
<br />
<table class="laytable" cellpadding="0" cellspacing="0">
<tr><td align="left" valign="top">
With KeePass 2.x, a database can be stored on a shared network drive and used by multiple
users. When attempting to save, KeePass first checks whether the file on disk has been
modified since it was loaded. If yes, KeePass asks whether to synchronize or
overwrite the file (see image on the right).<br />
<br />
By synchronizing, changes made by other users (file on disk)
and changes made by the current user are merged.
After the synchronization process has finished,
the current user also sees the changes made by others (i.e. the data in the
current KeePass instance is up-to-date).<br />
<br />
If there is a conflict (multiple users edited the same
entry), KeePass uses the latest version of the entry based on the last
modification time.
</td>
<td width="306" align="right" valign="top">
<a href="https://keepass.info/screenshots/windows_vista/syncorsave_big.png"
target="_blank"><img src="../../screenshots/windows_vista/syncorsave.png"
align="right" alt="KeePass 2.x Synchronize Prompt" /></a>
</td></tr></table>
<p>Note: the synchronize prompt is only triggered by the 'Save' command,
<i>not</i> by the 'Save As' command. When executing the 'Save As' command and
manually selecting a file, this file will always be overwritten.</p>
</body></html>
|
